last executing test programs: 1m48.899224511s ago: executing program 3 (id=2634): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/disk', 0x0, 0x14a) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x204402, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000480)={0x3, 0xfff9, 0x20e, 0x8, 0x2, 0x1c0000, 0x0, 0xc, 0x0}, &(0x7f00000004c0)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000580)={r1, 0x8, 0x20, 0x3331, 0x1}, &(0x7f00000005c0)=0x18) socket$packet(0x11, 0x2, 0x300) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000840)=@ethtool_flash={0x33, 0xea5, './bus\x00'}}) unshare(0x22020400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r5 = fsmount(r4, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x9}, 0x0, 0x3, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x697b78f4596ca005, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r5) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x8040) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000aae8f79edbd82f672779b2ccf56959f9fd64eafff7421d55730dfc845958c5550564c3a29afca4be4911c3426a0d0d3fe6282146d7bb52028adbf8b70cd1dc46c55838721b0fe50eef1596e3ed8985df6f7a169a14232d0e7e0953078a4165179a5564b68b01a7bf497216b451b39e26b382a60b40d013cdd10e0b6d1cbc9bd04ee2596268522ec561f3884adb538041c6871525f76c5143f42f2621bae29c6ae9af795d9648306ebd7b2021f08f030506b50d47900014017a33814408a0e812967d15439ef9de6a84eda"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m48.567443817s ago: executing program 3 (id=2640): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) 1m45.553415426s ago: executing program 3 (id=2641): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4e, 0x5}, 0x0, 0x0, 0x800004, 0x5, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r1, r1, 0x200000000000000) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x14, 0x0, &(0x7f0000000180)=0x20) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) 1m45.417517408s ago: executing program 3 (id=2707): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x2}, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000012c0)={0x52, 0xffffffffffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x12, 0x7, 0x8, 0x2, 0x2000, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x210}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='veth1_to_team\x00', 0x2, 0x1, 0x71}) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000f00000004000100080004"], 0x44}}, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x585d4d9346027f5c}, 0x0) 1m45.248987712s ago: executing program 3 (id=2711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m43.994942406s ago: executing program 3 (id=2736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000300)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x7c8e57edab868d16, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") 1m43.978761896s ago: executing program 32 (id=2736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000300)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x7c8e57edab868d16, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") 1.52645563s ago: executing program 0 (id=5640): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@local, @in6=@private2}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.377669114s ago: executing program 0 (id=5649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, 0x0, 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.245113256s ago: executing program 0 (id=5652): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x1e0, 0x30, 0x1, 0x0, 0x0, {}, [{0x1cc, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x17c, 0x5, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x1, 0x0, 0x1, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x265c, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xcc4, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x81, 0x0, 0x56cf, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x198, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x8, 0xa}}]}, {0xe1, 0x6, "434a65cdf1d1189332f71aaa4c6c5e274c881a6274c421706bec31eb7dd4c510888e044ad50dadee72f8098938550de577538d482324fe8d25eb743a5774eab12c598258743e91dcba3929d7dcf4afac504285ad1d86a9288f0dc2c216c3ea549694baa3807f1d27a1bbce51b80dabc9d912257b36136f30716154dcfafbff81707c32f9c300572085a1896a97310e47319e0c780e17295f3d91d3b988869ebc130a6dda8ce2f1c447dd2afcf9135edbaf4c6969ee1b2a94f4b12ac082a5837074babfd91fa986a6970c704095204f31b1c8cd10c5a0d4b32417cc90e7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1e0}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], &(0x7f0000000340)=""/141, 0x8c, 0x8d, 0x404, 0x200}, 0x28) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r2, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000004c0)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r3) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) fsetxattr$security_selinux(r5, &(0x7f0000000080), &(0x7f0000000240)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 840.617294ms ago: executing program 1 (id=5670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 771.677105ms ago: executing program 1 (id=5673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b0000002001000000000000000000000000000005000000000000000000000000000000020000000000000000ff0000000000000000001000000000feffffffffffffff00000000000000000900000000000000000000000000000000002000000000000700000000000000000000000000000001000400000000000900000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x4) 748.452125ms ago: executing program 1 (id=5674): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 697.090987ms ago: executing program 1 (id=5678): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x4010810) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x22042698}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000480fe02642a3b15df77b658b31d86ba2d2672be0e5f2cbae3a73722a9e03103807849e00d631fec42e9ec5af756a2dbd11c5bbe1110a65fc89999f1a7c279ba4cc01a16da8aa3b84eba4eca4f37368dfadf4c2", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf250f000000", @ANYRES32=r5, @ANYBLOB="0600960000080000050019010d00000005001901050000000800270000000000080027000000000004000501"], 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x20048004) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x88, r3, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004}, 0x48000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000800)='ext4_free_blocks\x00', r6}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r10, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448dc, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/104, 0x68, 0x0, &(0x7f0000000000)=""/53, 0x35}, &(0x7f0000000180)=0x40) 679.060697ms ago: executing program 2 (id=5679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="08000400b6"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) 646.765068ms ago: executing program 2 (id=5681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) 600.159298ms ago: executing program 2 (id=5683): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000040)={0x20, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x12) 581.045939ms ago: executing program 2 (id=5685): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) socket$kcm(0x2c, 0x3, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="5c00000014006b030231a6080c000af32c0cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1000000e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f000801}, 0x4004014) 551.187419ms ago: executing program 1 (id=5688): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x40, 0x0, "1cdc0dca1d9f6884"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x60}, 0x1, 0x7}, 0x0) 523.95456ms ago: executing program 4 (id=5689): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x23456}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 522.61807ms ago: executing program 1 (id=5690): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89\x89\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zpo\xd0\xc7\'CT') sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r1, r0, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x96d}], 0x1, 0x40, 0x0) 522.17478ms ago: executing program 4 (id=5691): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796100000000410077a31359882fff8dae1db4d0e81a230800040000000000eb0000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x15c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x7, 0x8, 0x1}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000040)='fdinfo/3\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="5c0000007a006bcd9e3fe3dc6e08170007000054250ec000488bc3a00000e517d34460bc24fff3000005251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0x7fffffffffffffff}, 0x18) fchdir(0xffffffffffffffff) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 472.874251ms ago: executing program 2 (id=5693): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0x14, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 445.751511ms ago: executing program 2 (id=5695): syz_io_uring_setup(0x280d, &(0x7f0000000500)={0x0, 0x8901, 0x4000, 0x2000000, 0x213}, &(0x7f0000000400), &(0x7f0000000380)=0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mmap(&(0x7f00006f3000/0x1000)=nil, 0x1000, 0x200000f, 0x12, 0xffffffffffffffff, 0xfffff000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100002500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3000000, 0x0) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, r5, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xffffffffffffff7e, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @multicast1}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @xdp={0x2c, 0x5, 0x0, 0xe}, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = accept4(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x80, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x2c}}, 0x4040040) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_io_uring_setup(0x55c9, &(0x7f0000000140)={0x0, 0x1001, 0x10, 0x1, 0xfffffffe}, &(0x7f00000005c0)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() r10 = socket(0x29, 0x800, 0x4006) setsockopt$sock_int(r10, 0x1, 0x2e, 0x0, 0x0) 403.642342ms ago: executing program 5 (id=5696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000300)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfdfffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") 353.858363ms ago: executing program 4 (id=5697): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x40, 0x0, "1cdc0dca1d9f6884"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x60}, 0x1, 0x7}, 0x0) 338.572534ms ago: executing program 0 (id=5698): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") (async) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002200)=[{{&(0x7f00000002c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000004180)="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", 0x1000}, {&(0x7f0000000340)="668a0da45e0a1bdaee960b5d96e6bb4ce6ce2905738d7c6401940172c9c9c0340266cc22542b84426545f07e13733593ebfa805970726728876f488e5dd3de9bef25049334e309d721dcd89c851c02643a291222e28d9b47e23a66b906cf9d08fb3ecf0109ae60b097539a", 0x6b}, {&(0x7f0000000c80)="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", 0x17b}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4}}], 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r6, 0x0, 0x9}, 0x18) (async, rerun: 64) setregid(0x0, 0x0) (async, rerun: 64) io_setup(0x8154, &(0x7f0000000100)=0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000480)='net/psched\x00') io_submit(r7, 0x1, &(0x7f0000000940)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x8, r8, 0x0, 0x0, 0x0, 0x0, 0x1}]) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0xc, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x4010) (async) sendmsg$inet(r11, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000000080000000008"], 0x40}, 0x20000024) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) write$sndseq(r9, &(0x7f0000000140)=[{0x1f, 0x0, 0x6, 0xfd, @time={0x3, 0x7}, {}, {0x4}, @connect={{0x15, 0xb}, {0x6, 0x7}}}], 0x1c) 291.238565ms ago: executing program 4 (id=5699): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@local, @in6=@private2}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 236.378655ms ago: executing program 0 (id=5700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000980)=ANY=[@ANYBLOB="8804020300000000000000000000000001008600000000000000000000000000bb2ce6f249a79f18ce36deb4c938de750d29f0ffc39790974ab77f12"], 0x28) 235.927275ms ago: executing program 0 (id=5701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0xb12e, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={0x0, r0, 0x0, 0x1}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {0x0}], 0x4, 0x1) write$snapshot(r1, &(0x7f0000000080)="ba9f76", 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRES8=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x80}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0909000000000000140012800b00010067656e6576650000040002800a0001"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4d, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b13"], 0x7c}}, 0x20000840) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 174.445067ms ago: executing program 5 (id=5702): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x23456}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 125.490538ms ago: executing program 5 (id=5703): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 124.739728ms ago: executing program 5 (id=5704): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 106.170578ms ago: executing program 5 (id=5705): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0x14, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 105.678948ms ago: executing program 4 (id=5706): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x4e, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000000)={&(0x7f0000000a00)=""/4096, 0x1000, 0x0, &(0x7f0000001a00)=""/4096, 0x1000}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7f, '\x00', r1, r0, 0x4, 0x5, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000440), &(0x7f0000000540)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r9, 0x0, 0x20}, 0x18) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000500)="0730e89b", &(0x7f0000000480)=@tcp=r7}, 0x20) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r11, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0xa, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x11, 0x0, r11}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0xff}, 0xa, @in6=@remote, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) getgid() quotactl_fd$Q_GETFMT(r5, 0xffffffff80000401, r11, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) 91.546678ms ago: executing program 5 (id=5707): syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3000000, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, r2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x80, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000001020300000000f3d6832476eb00000000010005050800070600074000020000060007"], 0x2c}}, 0x4040040) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() r7 = socket(0x23, 0x800, 0x6) setsockopt$sock_int(r7, 0x1, 0x2e, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 4 (id=5708): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x1e0, 0x30, 0x1, 0x0, 0x0, {}, [{0x1cc, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x17c, 0x5, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x1, 0x0, 0x1, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x265c, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xcc4, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x81, 0x0, 0x56cf, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x198, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x8, 0xa}}]}, {0xe1, 0x6, "434a65cdf1d1189332f71aaa4c6c5e274c881a6274c421706bec31eb7dd4c510888e044ad50dadee72f8098938550de577538d482324fe8d25eb743a5774eab12c598258743e91dcba3929d7dcf4afac504285ad1d86a9288f0dc2c216c3ea549694baa3807f1d27a1bbce51b80dabc9d912257b36136f30716154dcfafbff81707c32f9c300572085a1896a97310e47319e0c780e17295f3d91d3b988869ebc130a6dda8ce2f1c447dd2afcf9135edbaf4c6969ee1b2a94f4b12ac082a5837074babfd91fa986a6970c704095204f31b1c8cd10c5a0d4b32417cc90e7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1e0}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], &(0x7f0000000340)=""/141, 0x8c, 0x8d, 0x404, 0x200}, 0x28) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r2, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000004c0)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r3) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) fsetxattr$security_selinux(r5, &(0x7f0000000080), &(0x7f0000000240)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) kernel console output (not intermixed with test programs): _key+0x67/0x80 [ 221.012137][T16531] x64_sys_call+0x28c8/0x3000 [ 221.012159][T16531] do_syscall_64+0xd2/0x200 [ 221.012187][T16531] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 221.012237][T16531] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 221.012271][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.012295][T16531] RIP: 0033:0x7f269b45eec9 [ 221.012313][T16531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.012409][T16531] RSP: 002b:00007f2699ec7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 221.012431][T16531] RAX: ffffffffffffffda RBX: 00007f269b6b5fa0 RCX: 00007f269b45eec9 [ 221.012445][T16531] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000240 [ 221.012458][T16531] RBP: 00007f2699ec7090 R08: 00000000073cf211 R09: 0000000000000000 [ 221.012470][T16531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.012484][T16531] R13: 00007f269b6b6038 R14: 00007f269b6b5fa0 R15: 00007ffede2611a8 [ 221.012504][T16531] [ 221.013992][T16533] random: crng reseeded on system resumption [ 221.249633][T16537] serio: Serial port ptm0 [ 221.276923][T16541] batman_adv: batadv0: Adding interface: dummy0 [ 221.283253][T16541] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.308823][T16541] batman_adv: batadv0: Interface activated: dummy0 [ 221.378962][T16553] serio: Serial port ptm2 [ 221.436327][T16550] __nla_validate_parse: 8 callbacks suppressed [ 221.436347][T16550] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4552'. [ 221.593812][T16570] xt_socket: unknown flags 0x50 [ 221.633398][T16575] netlink: 'syz.5.4561': attribute type 1 has an invalid length. [ 221.641234][T16575] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4561'. [ 221.728920][T16585] serio: Serial port ptm1 [ 221.873128][T16597] netlink: 766 bytes leftover after parsing attributes in process `syz.5.4570'. [ 222.061186][T16605] serio: Serial port ptm3 [ 222.594762][T16630] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4583'. [ 222.605716][T16630] tipc: Enabled bearer , priority 0 [ 222.613148][T16630] syzkaller0: entered promiscuous mode [ 222.618857][T16630] syzkaller0: entered allmulticast mode [ 222.628289][T16629] tipc: Resetting bearer [ 222.638672][T16629] tipc: Disabling bearer [ 222.722846][T16646] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4584'. [ 222.795077][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4587'. [ 222.827209][T16661] serio: Serial port ptm0 [ 222.907665][T16670] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4597'. [ 222.921383][T16670] tipc: Enabled bearer , priority 0 [ 222.930484][T16670] syzkaller0: entered promiscuous mode [ 222.936264][T16670] syzkaller0: entered allmulticast mode [ 222.948385][T16669] tipc: Resetting bearer [ 222.972239][T16669] tipc: Disabling bearer [ 223.026222][T16687] netdevsim netdevsim2: Direct firmware load for ./bus failed with error -2 [ 223.041009][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4604'. [ 223.080407][T16696] netlink: 766 bytes leftover after parsing attributes in process `syz.5.4600'. [ 223.124844][T16703] binfmt_misc: register: failed to install interpreter file ./file0 [ 223.353419][T16703] Set syz1 is full, maxelem 65536 reached [ 223.372050][T16724] loop2: detected capacity change from 0 to 512 [ 223.396900][T16726] loop5: detected capacity change from 0 to 1024 [ 223.404492][T16726] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 223.413310][T16724] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 223.415580][T16726] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 223.430608][T16724] EXT4-fs (loop2): mount failed [ 223.441093][T16726] JBD2: no valid journal superblock found [ 223.450418][T16726] EXT4-fs (loop5): Could not load journal inode [ 223.469520][T16724] loop2: detected capacity change from 0 to 512 [ 223.477097][T16724] EXT4-fs (loop2): orphan cleanup on readonly fs [ 223.483878][T16724] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.4617: bad orphan inode 13 [ 223.496287][T16724] ext4_test_bit(bit=12, block=18) = 1 [ 223.501695][T16724] is_bad_inode(inode)=0 [ 223.505939][T16724] NEXT_ORPHAN(inode)=2130706432 [ 223.506115][T16732] netlink: 324 bytes leftover after parsing attributes in process `syz.5.4619'. [ 223.510797][T16724] max_ino=32 [ 223.510807][T16724] i_nlink=1 [ 223.511240][T16724] EXT4-fs mount: 8 callbacks suppressed [ 223.511253][T16724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.522097][T16732] tipc: Enabled bearer , priority 0 [ 223.552579][T16724] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 223.553341][T16732] syzkaller0: entered promiscuous mode [ 223.568468][T16732] syzkaller0: entered allmulticast mode [ 223.578023][T16731] tipc: Resetting bearer [ 223.586526][T16731] tipc: Disabling bearer [ 223.593327][T16724] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4617: bg 0: block 248: padding at end of block bitmap is not set [ 223.608204][T16724] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4617: Failed to acquire dquot type 1 [ 223.619918][T16724] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 223.649807][T13015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.692221][T16738] loop1: detected capacity change from 0 to 512 [ 223.700758][T16738] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4622: casefold flag without casefold feature [ 223.713813][T16738] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4622: couldn't read orphan inode 15 (err -117) [ 223.726437][T16738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.745453][T16738] netlink: 'syz.1.4622': attribute type 10 has an invalid length. [ 223.754943][T16738] team0: Port device dummy0 added [ 223.762536][T16738] netlink: 'syz.1.4622': attribute type 10 has an invalid length. [ 223.772084][T16738] team0: Port device dummy0 removed [ 223.774934][T16743] loop2: detected capacity change from 0 to 512 [ 223.779097][T16738] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 223.786264][T16743] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4623: casefold flag without casefold feature [ 223.811492][T16743] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4623: couldn't read orphan inode 15 (err -117) [ 223.828887][T16743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.844108][T16743] FAULT_INJECTION: forcing a failure. [ 223.844108][T16743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.857581][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.2.4623 Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.857671][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.857685][T16743] Call Trace: [ 223.857691][T16743] [ 223.857723][T16743] __dump_stack+0x1d/0x30 [ 223.857754][T16743] dump_stack_lvl+0xe8/0x140 [ 223.857783][T16743] dump_stack+0x15/0x1b [ 223.857883][T16743] should_fail_ex+0x265/0x280 [ 223.857954][T16743] should_fail+0xb/0x20 [ 223.857972][T16743] should_fail_usercopy+0x1a/0x20 [ 223.857996][T16743] _copy_to_user+0x20/0xa0 [ 223.858026][T16743] simple_read_from_buffer+0xb5/0x130 [ 223.858046][T16743] proc_fail_nth_read+0x10e/0x150 [ 223.858072][T16743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.858116][T16743] vfs_read+0x1a5/0x770 [ 223.858140][T16743] ? vt_ioctl+0xff9/0x18a0 [ 223.858247][T16743] ? __rcu_read_unlock+0x4f/0x70 [ 223.858269][T16743] ? __fget_files+0x184/0x1c0 [ 223.858354][T16743] ksys_read+0xda/0x1a0 [ 223.858380][T16743] __x64_sys_read+0x40/0x50 [ 223.858405][T16743] x64_sys_call+0x27c0/0x3000 [ 223.858434][T16743] do_syscall_64+0xd2/0x200 [ 223.858539][T16743] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.858592][T16743] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 223.858713][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.858744][T16743] RIP: 0033:0x7fdae557d8dc [ 223.858762][T16743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 223.858810][T16743] RSP: 002b:00007fdae3fdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.858832][T16743] RAX: ffffffffffffffda RBX: 00007fdae57d5fa0 RCX: 00007fdae557d8dc [ 223.858846][T16743] RDX: 000000000000000f RSI: 00007fdae3fdf0a0 RDI: 0000000000000006 [ 223.858861][T16743] RBP: 00007fdae3fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 223.858875][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.858921][T16743] R13: 00007fdae57d6038 R14: 00007fdae57d5fa0 R15: 00007fffd0fffff8 [ 223.858937][T16743] [ 224.080445][T12282] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.109831][T13015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.148005][T16761] serio: Serial port ptm0 [ 224.218329][T16772] netdevsim netdevsim1: Direct firmware load for ./bus failed with error -2 [ 224.249333][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 224.249381][ T29] audit: type=1326 audit(1759767559.621:18583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7a73eec9 code=0x7ffc0000 [ 224.280082][ T29] audit: type=1326 audit(1759767559.621:18584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.4.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7a73eec9 code=0x7ffc0000 [ 224.322433][T16786] bridge_slave_0: left allmulticast mode [ 224.328233][T16786] bridge_slave_0: left promiscuous mode [ 224.333934][T16786] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.345666][T16786] bridge_slave_1: left allmulticast mode [ 224.351489][T16786] bridge_slave_1: left promiscuous mode [ 224.357316][T16786] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.377669][T16786] bond0: (slave bond_slave_0): Releasing backup interface [ 224.404789][ T29] audit: type=1400 audit(1759767559.781:18585): avc: denied { mounton } for pid=16785 comm="syz.2.4638" path="/proc/576/task" dev="proc" ino=51613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 224.428002][ T29] audit: type=1400 audit(1759767559.781:18586): avc: denied { mount } for pid=16785 comm="syz.2.4638" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 224.453082][T16786] bond0: (slave bond_slave_1): Releasing backup interface [ 224.454101][ T29] audit: type=1400 audit(1759767559.831:18587): avc: denied { accept } for pid=16799 comm="syz.1.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.482932][ T29] audit: type=1400 audit(1759767559.851:18588): avc: denied { read write } for pid=16799 comm="syz.1.4644" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 224.504516][T16801] netlink: 'syz.2.4638': attribute type 4 has an invalid length. [ 224.506583][ T29] audit: type=1400 audit(1759767559.851:18589): avc: denied { open } for pid=16799 comm="syz.1.4644" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 224.537896][ T29] audit: type=1400 audit(1759767559.861:18590): avc: denied { ioctl } for pid=16799 comm="syz.1.4644" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 224.564709][T16786] team0: Port device team_slave_0 removed [ 224.574013][T16786] team0: Port device team_slave_1 removed [ 224.580483][T16786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.588053][T16786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.597189][T16786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.604736][T16786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.608673][ T29] audit: type=1400 audit(1759767559.981:18591): avc: denied { ioctl } for pid=16799 comm="syz.1.4644" path="socket:[51626]" dev="sockfs" ino=51626 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.639714][T16786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.669505][T16801] .`: renamed from bond0 (while UP) [ 224.771674][ T29] audit: type=1326 audit(1759767560.141:18592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16819 comm="syz.2.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 224.784505][T16820] serio: Serial port ptm1 [ 224.969696][T16840] bond0: (slave dummy0): Releasing backup interface [ 224.977379][T16840] bridge_slave_0: left allmulticast mode [ 224.983101][T16840] bridge_slave_0: left promiscuous mode [ 224.988836][T16840] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.996910][T16840] bridge_slave_1: left allmulticast mode [ 225.002611][T16840] bridge_slave_1: left promiscuous mode [ 225.008428][T16840] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.022628][T16840] bond0: (slave bond_slave_0): Releasing backup interface [ 225.035295][T16840] bond0: (slave bond_slave_1): Releasing backup interface [ 225.037142][T16844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16844 comm=syz.0.4661 [ 225.062968][T16840] team0: Port device team_slave_0 removed [ 225.069936][T16840] team0: Port device team_slave_1 removed [ 225.082660][T16840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.095370][T16840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.103241][T16840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.119573][T16844] netlink: 'syz.0.4661': attribute type 5 has an invalid length. [ 225.309138][T16881] bridge_slave_0: left allmulticast mode [ 225.314870][T16881] bridge_slave_0: left promiscuous mode [ 225.320666][T16881] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.330171][T16881] bridge_slave_1: left allmulticast mode [ 225.335969][T16881] bridge_slave_1: left promiscuous mode [ 225.341713][T16881] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.352168][T16881] bond0: (slave bond_slave_0): Releasing backup interface [ 225.362142][T16881] bond0: (slave bond_slave_1): Releasing backup interface [ 225.373629][T16881] team0: Port device team_slave_0 removed [ 225.381519][T16881] team0: Port device team_slave_1 removed [ 225.390187][T16881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.397657][T16881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.406156][T16881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.413648][T16881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.422874][T16881] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.447593][ T36] !yz!: Port: 1 Link DOWN [ 225.468913][T16890] loop1: detected capacity change from 0 to 256 [ 225.588073][T16902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16902 comm=syz.1.4682 [ 225.638615][T16906] FAULT_INJECTION: forcing a failure. [ 225.638615][T16906] name failslab, interval 1, probability 0, space 0, times 0 [ 225.651526][T16906] CPU: 0 UID: 0 PID: 16906 Comm: syz.2.4688 Not tainted syzkaller #0 PREEMPT(voluntary) [ 225.651565][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.651578][T16906] Call Trace: [ 225.651585][T16906] [ 225.651593][T16906] __dump_stack+0x1d/0x30 [ 225.651630][T16906] dump_stack_lvl+0xe8/0x140 [ 225.651752][T16906] dump_stack+0x15/0x1b [ 225.651760][T16902] loop1: detected capacity change from 0 to 8192 [ 225.651785][T16906] should_fail_ex+0x265/0x280 [ 225.651818][T16906] should_failslab+0x8c/0xb0 [ 225.651842][T16906] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 225.651927][T16906] ? security_context_to_sid_core+0x69/0x3b0 [ 225.651957][T16906] kmemdup_nul+0x36/0xc0 [ 225.652022][T16906] security_context_to_sid_core+0x69/0x3b0 [ 225.652049][T16906] ? avc_has_perm_noaudit+0x1b1/0x200 [ 225.652082][T16906] security_context_to_sid+0x2e/0x40 [ 225.652108][T16906] selinux_lsm_setattr+0x2dc/0x660 [ 225.652212][T16906] selinux_setprocattr+0x4f/0x70 [ 225.652232][T16906] security_setprocattr+0x1a4/0x1d0 [ 225.652258][T16906] proc_pid_attr_write+0x1eb/0x220 [ 225.652341][T16906] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 225.652367][T16906] vfs_write+0x266/0x960 [ 225.652389][T16906] ? __rcu_read_unlock+0x4f/0x70 [ 225.652450][T16906] ? __fget_files+0x184/0x1c0 [ 225.652480][T16906] ksys_write+0xda/0x1a0 [ 225.652504][T16906] __x64_sys_write+0x40/0x50 [ 225.652527][T16906] x64_sys_call+0x2802/0x3000 [ 225.652547][T16906] do_syscall_64+0xd2/0x200 [ 225.652573][T16906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 225.652649][T16906] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 225.652681][T16906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.652751][T16906] RIP: 0033:0x7fdae557eec9 [ 225.652768][T16906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.652801][T16906] RSP: 002b:00007fdae3fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.652822][T16906] RAX: ffffffffffffffda RBX: 00007fdae57d5fa0 RCX: 00007fdae557eec9 [ 225.652835][T16906] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000006 [ 225.652848][T16906] RBP: 00007fdae3fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 225.652860][T16906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.652872][T16906] R13: 00007fdae57d6038 R14: 00007fdae57d5fa0 R15: 00007fffd0fffff8 [ 225.652890][T16906] [ 225.682139][T16908] loop2: detected capacity change from 0 to 512 [ 225.902674][T16908] ext4: Unknown parameter 'dont_hash' [ 225.929474][T16911] netlink: 'syz.2.4690': attribute type 1 has an invalid length. [ 226.127203][T16934] serio: Serial port ptm1 [ 226.135654][T16932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 226.427606][T16960] loop2: detected capacity change from 0 to 1024 [ 226.435178][T16960] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 226.446191][T16960] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 226.462111][T16960] JBD2: no valid journal superblock found [ 226.467953][T16960] EXT4-fs (loop2): Could not load journal inode [ 226.564398][T16967] FAULT_INJECTION: forcing a failure. [ 226.564398][T16967] name failslab, interval 1, probability 0, space 0, times 0 [ 226.577234][T16967] CPU: 1 UID: 0 PID: 16967 Comm: syz.4.4713 Not tainted syzkaller #0 PREEMPT(voluntary) [ 226.577267][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 226.577280][T16967] Call Trace: [ 226.577289][T16967] [ 226.577298][T16967] __dump_stack+0x1d/0x30 [ 226.577447][T16967] dump_stack_lvl+0xe8/0x140 [ 226.577475][T16967] dump_stack+0x15/0x1b [ 226.577507][T16967] should_fail_ex+0x265/0x280 [ 226.577537][T16967] should_failslab+0x8c/0xb0 [ 226.577585][T16967] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 226.577614][T16967] ? v9fs_session_init+0x4b/0xde0 [ 226.577655][T16967] kstrdup+0x3e/0xd0 [ 226.577740][T16967] v9fs_session_init+0x4b/0xde0 [ 226.577769][T16967] ? __schedule+0x6b9/0xb30 [ 226.577787][T16967] ? should_fail_ex+0xdb/0x280 [ 226.577818][T16967] ? v9fs_mount+0x51/0x5c0 [ 226.577843][T16967] ? should_failslab+0x8c/0xb0 [ 226.577870][T16967] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 226.577900][T16967] v9fs_mount+0x67/0x5c0 [ 226.577920][T16967] ? selinux_capable+0x31/0x40 [ 226.577952][T16967] ? __pfx_v9fs_mount+0x10/0x10 [ 226.577974][T16967] legacy_get_tree+0x75/0xd0 [ 226.578002][T16967] vfs_get_tree+0x54/0x1d0 [ 226.578024][T16967] do_new_mount+0x24d/0x660 [ 226.578048][T16967] ? security_capable+0x83/0x90 [ 226.578095][T16967] path_mount+0x4a5/0xb70 [ 226.578119][T16967] ? user_path_at+0x109/0x130 [ 226.578191][T16967] __se_sys_mount+0x28c/0x2e0 [ 226.578217][T16967] ? fput+0x8f/0xc0 [ 226.578247][T16967] __x64_sys_mount+0x67/0x80 [ 226.578329][T16967] x64_sys_call+0x2b51/0x3000 [ 226.578348][T16967] do_syscall_64+0xd2/0x200 [ 226.578425][T16967] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 226.578523][T16967] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 226.578547][T16967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.578567][T16967] RIP: 0033:0x7f5c7a73eec9 [ 226.578582][T16967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.578604][T16967] RSP: 002b:00007f5c791a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.578683][T16967] RAX: ffffffffffffffda RBX: 00007f5c7a995fa0 RCX: 00007f5c7a73eec9 [ 226.578698][T16967] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 226.578713][T16967] RBP: 00007f5c791a7090 R08: 0000200000000240 R09: 0000000000000000 [ 226.578726][T16967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.578776][T16967] R13: 00007f5c7a996038 R14: 00007f5c7a995fa0 R15: 00007ffdc5c28878 [ 226.578796][T16967] [ 226.776338][T16968] __nla_validate_parse: 7 callbacks suppressed [ 226.776352][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4709'. [ 226.819684][T16970] serio: Serial port ptm0 [ 226.829173][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4709'. [ 226.969018][T16981] netlink: 'syz.0.4718': attribute type 1 has an invalid length. [ 226.976903][T16981] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4718'. [ 227.012774][T16985] loop2: detected capacity change from 0 to 1024 [ 227.020155][T16985] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 227.031131][T16985] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 227.041620][T16985] JBD2: no valid journal superblock found [ 227.047589][T16985] EXT4-fs (loop2): Could not load journal inode [ 227.109637][T16993] serio: Serial port ptm1 [ 227.194867][T17006] serio: Serial port ptm2 [ 227.203233][T16997] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4724'. [ 227.249965][T17010] netlink: 'syz.0.4730': attribute type 1 has an invalid length. [ 227.258196][T17010] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4730'. [ 227.744144][T17035] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4737'. [ 227.787621][T17037] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4738'. [ 227.904076][T17053] loop4: detected capacity change from 0 to 1024 [ 227.911160][T17053] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 227.922621][T17053] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 227.932927][T17053] JBD2: no valid journal superblock found [ 227.938662][T17053] EXT4-fs (loop4): Could not load journal inode [ 227.966380][T17055] serio: Serial port ptm0 [ 228.013227][T17057] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4748'. [ 228.084503][T17064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.141072][T17070] loop1: detected capacity change from 0 to 512 [ 228.164450][T17070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 228.177151][T17070] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.205978][T12282] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 228.255576][T17085] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4759'. [ 228.260555][T17087] serio: Serial port ptm1 [ 228.265571][T17085] tipc: Enabled bearer , priority 0 [ 228.280887][T17085] syzkaller0: entered promiscuous mode [ 228.286625][T17085] syzkaller0: entered allmulticast mode [ 228.295099][T17083] tipc: Resetting bearer [ 228.303708][T17083] tipc: Disabling bearer [ 228.603305][T17112] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4768'. [ 228.810261][T17119] random: crng reseeded on system resumption [ 228.829705][T17119] loop2: detected capacity change from 0 to 2048 [ 228.844284][T17119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.864716][T17127] tipc: Enabled bearer , priority 0 [ 228.871685][T17127] syzkaller0: entered promiscuous mode [ 228.877205][T17127] syzkaller0: entered allmulticast mode [ 228.883686][T13015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.893099][T17126] tipc: Resetting bearer [ 228.901068][T17126] tipc: Disabling bearer [ 228.977839][T17137] loop5: detected capacity change from 0 to 1024 [ 228.985024][T17137] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 228.996049][T17137] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 229.006775][T17137] JBD2: no valid journal superblock found [ 229.012875][T17137] EXT4-fs (loop5): Could not load journal inode [ 229.061766][T17142] random: crng reseeded on system resumption [ 229.083753][T17142] loop2: detected capacity change from 0 to 2048 [ 229.107723][T17142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.155111][T17148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.200622][T13015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.213845][T17148] netlink: 'syz.4.4781': attribute type 83 has an invalid length. [ 229.242720][T17158] serio: Serial port ptm0 [ 229.298411][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 229.298429][ T29] audit: type=1326 audit(1759767564.671:18898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.331221][T17168] serio: Serial port ptm1 [ 229.344371][ T29] audit: type=1326 audit(1759767564.701:18899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.368502][ T29] audit: type=1326 audit(1759767564.701:18900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.392321][ T29] audit: type=1326 audit(1759767564.701:18901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.415832][ T29] audit: type=1326 audit(1759767564.701:18902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.439475][ T29] audit: type=1326 audit(1759767564.701:18903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.463055][ T29] audit: type=1326 audit(1759767564.701:18904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.486762][ T29] audit: type=1326 audit(1759767564.701:18905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.510443][ T29] audit: type=1326 audit(1759767564.701:18906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.534331][ T29] audit: type=1326 audit(1759767564.701:18907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.0.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 229.616403][T17181] FAULT_INJECTION: forcing a failure. [ 229.616403][T17181] name failslab, interval 1, probability 0, space 0, times 0 [ 229.629198][T17181] CPU: 1 UID: 0 PID: 17181 Comm: syz.4.4794 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.629226][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.629237][T17181] Call Trace: [ 229.629243][T17181] [ 229.629263][T17181] __dump_stack+0x1d/0x30 [ 229.629296][T17181] dump_stack_lvl+0xe8/0x140 [ 229.629331][T17181] dump_stack+0x15/0x1b [ 229.629360][T17181] should_fail_ex+0x265/0x280 [ 229.629416][T17181] should_failslab+0x8c/0xb0 [ 229.629442][T17181] kmem_cache_alloc_noprof+0x50/0x480 [ 229.629542][T17181] ? audit_log_start+0x342/0x720 [ 229.629619][T17181] audit_log_start+0x342/0x720 [ 229.629653][T17181] ? kstrtouint+0x76/0xc0 [ 229.629708][T17181] audit_seccomp+0x48/0x100 [ 229.629736][T17181] ? __seccomp_filter+0x82d/0x1250 [ 229.629777][T17181] __seccomp_filter+0x83e/0x1250 [ 229.629801][T17181] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 229.629833][T17181] ? vfs_write+0x7e8/0x960 [ 229.629853][T17181] ? __rcu_read_unlock+0x4f/0x70 [ 229.629891][T17181] ? __fget_files+0x184/0x1c0 [ 229.629917][T17181] __secure_computing+0x82/0x150 [ 229.629938][T17181] syscall_trace_enter+0xcf/0x1e0 [ 229.630038][T17181] do_syscall_64+0xac/0x200 [ 229.630065][T17181] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 229.630090][T17181] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 229.630157][T17181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.630176][T17181] RIP: 0033:0x7f5c7a73eec9 [ 229.630192][T17181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.630235][T17181] RSP: 002b:00007f5c791a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 229.630257][T17181] RAX: ffffffffffffffda RBX: 00007f5c7a995fa0 RCX: 00007f5c7a73eec9 [ 229.630271][T17181] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 229.630284][T17181] RBP: 00007f5c791a7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.630367][T17181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.630380][T17181] R13: 00007f5c7a996038 R14: 00007f5c7a995fa0 R15: 00007ffdc5c28878 [ 229.630397][T17181] [ 230.194077][T17217] FAULT_INJECTION: forcing a failure. [ 230.194077][T17217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.207336][T17217] CPU: 1 UID: 0 PID: 17217 Comm: syz.0.4807 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.207368][T17217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.207380][T17217] Call Trace: [ 230.207387][T17217] [ 230.207396][T17217] __dump_stack+0x1d/0x30 [ 230.207456][T17217] dump_stack_lvl+0xe8/0x140 [ 230.207544][T17217] dump_stack+0x15/0x1b [ 230.207576][T17217] should_fail_ex+0x265/0x280 [ 230.207650][T17217] should_fail+0xb/0x20 [ 230.207665][T17217] should_fail_usercopy+0x1a/0x20 [ 230.207683][T17217] _copy_from_user+0x1c/0xb0 [ 230.207778][T17217] __sys_bpf+0x183/0x7c0 [ 230.207811][T17217] __x64_sys_bpf+0x41/0x50 [ 230.207859][T17217] x64_sys_call+0x2aee/0x3000 [ 230.207881][T17217] do_syscall_64+0xd2/0x200 [ 230.207910][T17217] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 230.207972][T17217] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 230.207999][T17217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.208024][T17217] RIP: 0033:0x7f0e1ea8eec9 [ 230.208042][T17217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.208075][T17217] RSP: 002b:00007f0e1d4f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.208098][T17217] RAX: ffffffffffffffda RBX: 00007f0e1ece5fa0 RCX: 00007f0e1ea8eec9 [ 230.208112][T17217] RDX: 0000000000000050 RSI: 0000200000000740 RDI: 0000000000000000 [ 230.208126][T17217] RBP: 00007f0e1d4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 230.208139][T17217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.208199][T17217] R13: 00007f0e1ece6038 R14: 00007f0e1ece5fa0 R15: 00007ffc14d66ba8 [ 230.208219][T17217] [ 230.409731][T17221] tipc: Enabled bearer , priority 0 [ 230.422046][T17221] syzkaller0: entered promiscuous mode [ 230.427591][T17221] syzkaller0: entered allmulticast mode [ 230.451581][T17224] loop5: detected capacity change from 0 to 128 [ 230.467921][T17228] serio: Serial port ptm0 [ 230.473868][T17224] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 230.481712][T17224] FAT-fs (loop5): Filesystem has been set read-only [ 230.488707][T17224] bio_check_eod: 214 callbacks suppressed [ 230.488726][T17224] syz.5.4808: attempt to access beyond end of device [ 230.488726][T17224] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 230.512565][T17219] tipc: Resetting bearer [ 230.525459][T17219] tipc: Disabling bearer [ 230.527950][T17224] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 230.539100][T17224] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 230.560175][T17224] syz.5.4808: attempt to access beyond end of device [ 230.560175][T17224] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.573603][T17224] syz.5.4808: attempt to access beyond end of device [ 230.573603][T17224] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.587328][T17224] syz.5.4808: attempt to access beyond end of device [ 230.587328][T17224] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.600882][T17224] syz.5.4808: attempt to access beyond end of device [ 230.600882][T17224] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.644461][T17224] syz.5.4808: attempt to access beyond end of device [ 230.644461][T17224] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.660008][T17238] serio: Serial port ptm1 [ 230.664964][T17224] syz.5.4808: attempt to access beyond end of device [ 230.664964][T17224] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.678696][T17224] syz.5.4808: attempt to access beyond end of device [ 230.678696][T17224] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.692499][T17224] syz.5.4808: attempt to access beyond end of device [ 230.692499][T17224] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.706357][T17224] syz.5.4808: attempt to access beyond end of device [ 230.706357][T17224] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.722351][T17233] random: crng reseeded on system resumption [ 230.773868][T17233] loop4: detected capacity change from 0 to 2048 [ 230.808655][T17233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.981441][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.006411][T17258] loop4: detected capacity change from 0 to 512 [ 231.019154][T17258] EXT4-fs (loop4): orphan cleanup on readonly fs [ 231.031561][T17260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.031769][T17258] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4822: Failed to acquire dquot type 1 [ 231.056305][T17260] netlink: 'syz.2.4823': attribute type 83 has an invalid length. [ 231.064956][T17258] EXT4-fs (loop4): 1 truncate cleaned up [ 231.073181][T17258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.097194][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.160606][T17272] netlink: 'syz.4.4827': attribute type 1 has an invalid length. [ 231.279130][T17284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.350590][T17284] netlink: 'syz.5.4832': attribute type 4 has an invalid length. [ 231.367038][T17284] .`: renamed from bond0 (while UP) [ 231.599862][T17323] random: crng reseeded on system resumption [ 231.685689][T17323] loop5: detected capacity change from 0 to 2048 [ 231.705843][T17331] GUP no longer grows the stack in syz.1.4850 (17331): 200000004000-200000008000 (200000002000) [ 231.716428][T17331] CPU: 1 UID: 0 PID: 17331 Comm: syz.1.4850 Not tainted syzkaller #0 PREEMPT(voluntary) [ 231.716506][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.716519][T17331] Call Trace: [ 231.716603][T17331] [ 231.716610][T17331] __dump_stack+0x1d/0x30 [ 231.716649][T17331] dump_stack_lvl+0xe8/0x140 [ 231.716713][T17331] dump_stack+0x15/0x1b [ 231.716813][T17331] __get_user_pages+0x1968/0x1ed0 [ 231.716844][T17331] get_user_pages_remote+0x1d5/0x6c0 [ 231.716870][T17331] __access_remote_vm+0x15c/0x590 [ 231.716903][T17331] access_remote_vm+0x32/0x40 [ 231.716922][T17331] proc_pid_cmdline_read+0x32b/0x6c0 [ 231.716949][T17331] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 231.716976][T17331] vfs_readv+0x3f8/0x690 [ 231.717074][T17331] __x64_sys_preadv+0xfd/0x1c0 [ 231.717090][T17331] x64_sys_call+0x282e/0x3000 [ 231.717103][T17331] do_syscall_64+0xd2/0x200 [ 231.717122][T17331] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.717138][T17331] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 231.717202][T17331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.717216][T17331] RIP: 0033:0x7f269b45eec9 [ 231.717227][T17331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.717239][T17331] RSP: 002b:00007f2699ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 231.717284][T17331] RAX: ffffffffffffffda RBX: 00007f269b6b5fa0 RCX: 00007f269b45eec9 [ 231.717292][T17331] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000005 [ 231.717300][T17331] RBP: 00007f269b4e1f91 R08: 0000000000000007 R09: 0000000000000000 [ 231.717308][T17331] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 231.717332][T17331] R13: 00007f269b6b6038 R14: 00007f269b6b5fa0 R15: 00007ffede2611a8 [ 231.717344][T17331] [ 231.913783][T17323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.938309][T17325] __nla_validate_parse: 11 callbacks suppressed [ 231.938325][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4848'. [ 231.956672][T17325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4848'. [ 231.971990][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.043620][T17352] loop4: detected capacity change from 0 to 1024 [ 232.052944][T17352] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 232.063891][T17352] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 232.070770][T17351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.094120][T17352] JBD2: no valid journal superblock found [ 232.100201][T17352] EXT4-fs (loop4): Could not load journal inode [ 232.118037][T17351] netlink: 'syz.5.4856': attribute type 4 has an invalid length. [ 232.125847][T17351] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4856'. [ 232.162792][T17369] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4863'. [ 232.189835][T17374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4865'. [ 232.240474][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4860'. [ 232.254483][T17374] loop9: detected capacity change from 0 to 7 [ 232.260928][T17374] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.278814][T17373] vxlan1: entered promiscuous mode [ 232.281335][T17374] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.291912][T17374] loop9: unable to read partition table [ 232.297863][T17374] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 232.297863][T17374] ) failed (rc=-5) [ 232.433329][T17388] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4869'. [ 232.443454][T17390] netlink: 766 bytes leftover after parsing attributes in process `syz.5.4871'. [ 232.526411][T17403] bridge_slave_0: left allmulticast mode [ 232.532209][T17403] bridge_slave_0: left promiscuous mode [ 232.538060][T17403] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.555422][T17403] bridge_slave_1: left allmulticast mode [ 232.561126][T17403] bridge_slave_1: left promiscuous mode [ 232.567290][T17403] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.580646][T17403] bond0: (slave bond_slave_0): Releasing backup interface [ 232.592711][T17403] bond0: (slave bond_slave_1): Releasing backup interface [ 232.605457][T17411] serio: Serial port ptm0 [ 232.605603][T17403] team0: Port device team_slave_0 removed [ 232.618922][T17403] team0: Port device team_slave_1 removed [ 232.626105][T17403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.633618][T17403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.642794][T17414] netlink: 'syz.4.4875': attribute type 4 has an invalid length. [ 232.643711][T17403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.650542][T17414] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4875'. [ 232.658156][T17403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.681489][T17403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.705889][T17414] .`: renamed from bond0 (while UP) [ 232.773191][T17422] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4882'. [ 232.865383][T17430] tipc: Enabled bearer , priority 0 [ 232.872718][T17430] syzkaller0: entered promiscuous mode [ 232.878315][T17430] syzkaller0: entered allmulticast mode [ 232.888291][T17428] tipc: Resetting bearer [ 232.896052][T17428] tipc: Disabling bearer [ 233.039683][T17457] tipc: Enabled bearer , priority 0 [ 233.046642][T17457] syzkaller0: entered promiscuous mode [ 233.052377][T17457] syzkaller0: entered allmulticast mode [ 233.060909][T17455] tipc: Resetting bearer [ 233.068601][T17455] tipc: Disabling bearer [ 233.069768][T17450] loop4: detected capacity change from 0 to 2048 [ 233.134764][T17450] Alternate GPT is invalid, using primary GPT. [ 233.141201][T17450] loop4: p2 p3 p7 [ 233.227782][T17469] random: crng reseeded on system resumption [ 233.299975][T17463] loop2: detected capacity change from 0 to 2048 [ 233.316284][T17463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.353640][T17491] FAULT_INJECTION: forcing a failure. [ 233.353640][T17491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.367299][T17491] CPU: 0 UID: 0 PID: 17491 Comm: syz.0.4909 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.367330][T17491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.367344][T17491] Call Trace: [ 233.367352][T17491] [ 233.367360][T17491] __dump_stack+0x1d/0x30 [ 233.367440][T17491] dump_stack_lvl+0xe8/0x140 [ 233.367475][T17491] dump_stack+0x15/0x1b [ 233.367507][T17491] should_fail_ex+0x265/0x280 [ 233.367585][T17491] should_fail+0xb/0x20 [ 233.367603][T17491] should_fail_usercopy+0x1a/0x20 [ 233.367623][T17491] strncpy_from_user+0x25/0x230 [ 233.367650][T17491] ? kmem_cache_alloc_noprof+0x242/0x480 [ 233.367716][T17491] ? getname_flags+0x80/0x3b0 [ 233.367744][T17491] getname_flags+0xae/0x3b0 [ 233.367772][T17491] __x64_sys_symlinkat+0x4d/0x70 [ 233.367826][T17491] x64_sys_call+0x2941/0x3000 [ 233.367848][T17491] do_syscall_64+0xd2/0x200 [ 233.367875][T17491] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.367970][T17491] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 233.367998][T17491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.368017][T17491] RIP: 0033:0x7f0e1ea8eec9 [ 233.368032][T17491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.368049][T17491] RSP: 002b:00007f0e1d4f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 233.368149][T17491] RAX: ffffffffffffffda RBX: 00007f0e1ece5fa0 RCX: 00007f0e1ea8eec9 [ 233.368162][T17491] RDX: 0000000000000000 RSI: ffffffffffffff9c RDI: 0000000000000000 [ 233.368173][T17491] RBP: 00007f0e1d4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.368186][T17491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.368200][T17491] R13: 00007f0e1ece6038 R14: 00007f0e1ece5fa0 R15: 00007ffc14d66ba8 [ 233.368220][T17491] [ 233.369548][T13015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.738276][T17511] lo speed is unknown, defaulting to 1000 [ 233.877078][T17514] lo speed is unknown, defaulting to 1000 [ 234.302316][ T29] kauditd_printk_skb: 1282 callbacks suppressed [ 234.302334][ T29] audit: type=1326 audit(1759767569.671:20186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17533 comm="syz.1.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 234.324194][T17525] random: crng reseeded on system resumption [ 234.392038][T17525] loop5: detected capacity change from 0 to 2048 [ 234.401154][T17543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.422975][T17525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.451845][T17548] netlink: 'syz.0.4927': attribute type 30 has an invalid length. [ 234.460384][T17543] netlink: 'syz.1.4926': attribute type 4 has an invalid length. [ 234.489640][T17543] .`: renamed from bond0 [ 234.494809][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.572449][T17560] tipc: Enabled bearer , priority 0 [ 234.600903][T17560] syzkaller0: entered promiscuous mode [ 234.606494][T17560] syzkaller0: entered allmulticast mode [ 234.621140][ T29] audit: type=1326 audit(1759767569.991:20187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 234.652999][ T29] audit: type=1326 audit(1759767570.001:20188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 234.677291][ T29] audit: type=1326 audit(1759767570.001:20189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 234.701308][ T29] audit: type=1326 audit(1759767570.001:20190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 234.725087][ T29] audit: type=1326 audit(1759767570.001:20191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 234.748807][ T29] audit: type=1326 audit(1759767570.001:20192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 234.772392][ T29] audit: type=1326 audit(1759767570.001:20193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 234.796171][ T29] audit: type=1326 audit(1759767570.001:20194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 234.820274][ T29] audit: type=1326 audit(1759767570.001:20195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.2.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdae557eec9 code=0x7ffc0000 [ 234.848087][T17578] serio: Serial port ptm0 [ 234.858675][T17580] serio: Serial port ptm1 [ 234.892435][T17587] serio: Serial port ptm2 [ 235.081403][T17608] tipc: Enabled bearer , priority 0 [ 235.088440][T17608] syzkaller0: entered promiscuous mode [ 235.094022][T17608] syzkaller0: entered allmulticast mode [ 235.102972][T17607] tipc: Resetting bearer [ 235.110580][T17607] tipc: Disabling bearer [ 235.230071][T17611] loop5: detected capacity change from 0 to 164 [ 235.237437][T17611] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.246691][T17611] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.255179][T17611] Symlink component flag not implemented [ 235.260810][T17611] Symlink component flag not implemented [ 235.266911][T17611] Symlink component flag not implemented (7) [ 235.273022][T17611] Symlink component flag not implemented (116) [ 235.279946][T17611] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.288715][T17611] rock: directory entry would overflow storage [ 235.294916][T17611] rock: sig=0x4f50, size=4, remaining=3 [ 235.300565][T17611] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 235.657534][T17621] loop4: detected capacity change from 0 to 8192 [ 235.694976][T17623] netlink: 'syz.0.4957': attribute type 10 has an invalid length. [ 235.708538][T17623] batman_adv: batadv0: Interface deactivated: dummy0 [ 235.712319][ T36] tipc: Node number set to 3596118719 [ 235.715551][T17623] batman_adv: batadv0: Removing interface: dummy0 [ 235.757045][T17623] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 235.819549][T17641] tipc: Enabled bearer , priority 0 [ 235.828968][T17641] syzkaller0: entered promiscuous mode [ 235.834492][T17641] syzkaller0: entered allmulticast mode [ 235.848243][T17647] serio: Serial port ptm0 [ 235.848292][T17646] serio: Serial port ptm1 [ 235.857481][T17640] tipc: Resetting bearer [ 235.865498][T17640] tipc: Disabling bearer [ 235.895353][T17643] loop1: detected capacity change from 0 to 2048 [ 235.924032][T17643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 236.046478][T17648] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.065088][T17648] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 236.077831][T17648] EXT4-fs (loop1): This should not happen!! Data will be lost [ 236.077831][T17648] [ 236.087730][T17648] EXT4-fs (loop1): Total free blocks count 0 [ 236.093834][T17648] EXT4-fs (loop1): Free/Dirty block details [ 236.099830][T17648] EXT4-fs (loop1): free_blocks=2415919104 [ 236.105671][T17648] EXT4-fs (loop1): dirty_blocks=2096 [ 236.111022][T17648] EXT4-fs (loop1): Block reservation details [ 236.117098][T17648] EXT4-fs (loop1): i_reserved_data_blocks=131 [ 236.125730][T17664] loop5: detected capacity change from 0 to 2048 [ 236.160525][T17664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.337717][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.393305][T17677] serio: Serial port ptm2 [ 236.577316][T17684] FAULT_INJECTION: forcing a failure. [ 236.577316][T17684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.590898][T17684] CPU: 0 UID: 0 PID: 17684 Comm: syz.4.4977 Not tainted syzkaller #0 PREEMPT(voluntary) [ 236.590927][T17684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.590935][T17684] Call Trace: [ 236.590948][T17684] [ 236.590954][T17684] __dump_stack+0x1d/0x30 [ 236.590977][T17684] dump_stack_lvl+0xe8/0x140 [ 236.591060][T17684] dump_stack+0x15/0x1b [ 236.591132][T17684] should_fail_ex+0x265/0x280 [ 236.591164][T17684] should_fail+0xb/0x20 [ 236.591174][T17684] should_fail_usercopy+0x1a/0x20 [ 236.591253][T17684] _copy_from_user+0x1c/0xb0 [ 236.591269][T17684] vt_setactivate+0x43/0x230 [ 236.591286][T17684] vt_ioctl+0x839/0x18a0 [ 236.591303][T17684] ? tty_jobctrl_ioctl+0x29e/0x810 [ 236.591327][T17684] tty_ioctl+0x7d5/0xb80 [ 236.591358][T17684] ? __pfx_tty_ioctl+0x10/0x10 [ 236.591375][T17684] __se_sys_ioctl+0xce/0x140 [ 236.591388][T17684] __x64_sys_ioctl+0x43/0x50 [ 236.591400][T17684] x64_sys_call+0x1816/0x3000 [ 236.591466][T17684] do_syscall_64+0xd2/0x200 [ 236.591487][T17684] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 236.591511][T17684] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 236.591527][T17684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.591566][T17684] RIP: 0033:0x7f5c7a73eec9 [ 236.591578][T17684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.591591][T17684] RSP: 002b:00007f5c791a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.591605][T17684] RAX: ffffffffffffffda RBX: 00007f5c7a995fa0 RCX: 00007f5c7a73eec9 [ 236.591615][T17684] RDX: 0000200000000100 RSI: 000000000000560f RDI: 0000000000000003 [ 236.591693][T17684] RBP: 00007f5c791a7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.591702][T17684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.591710][T17684] R13: 00007f5c7a996038 R14: 00007f5c7a995fa0 R15: 00007ffdc5c28878 [ 236.591723][T17684] [ 236.680575][T12282] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 236.773788][T17690] loop2: detected capacity change from 0 to 2048 [ 236.833205][T17690] loop2: p1 < > p4 [ 236.838398][T17690] loop2: p4 size 8388608 extends beyond EOD, truncated [ 237.150752][T17709] serio: Serial port ptm0 [ 237.156574][T17703] __nla_validate_parse: 12 callbacks suppressed [ 237.156593][T17703] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4985'. [ 237.270096][T17715] loop5: detected capacity change from 0 to 1024 [ 237.284248][T17715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.312160][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.323246][T17712] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4989'. [ 237.663625][T17737] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4999'. [ 237.696623][T17739] serio: Serial port ptm1 [ 237.714580][T17743] FAULT_INJECTION: forcing a failure. [ 237.714580][T17743] name failslab, interval 1, probability 0, space 0, times 0 [ 237.727318][T17743] CPU: 1 UID: 0 PID: 17743 Comm: syz.5.5002 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.727343][T17743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.727356][T17743] Call Trace: [ 237.727363][T17743] [ 237.727372][T17743] __dump_stack+0x1d/0x30 [ 237.727479][T17743] dump_stack_lvl+0xe8/0x140 [ 237.727508][T17743] dump_stack+0x15/0x1b [ 237.727612][T17743] should_fail_ex+0x265/0x280 [ 237.727649][T17743] should_failslab+0x8c/0xb0 [ 237.727678][T17743] kmem_cache_alloc_noprof+0x50/0x480 [ 237.727701][T17743] ? getname_flags+0x80/0x3b0 [ 237.727799][T17743] ? fput+0x8f/0xc0 [ 237.727833][T17743] getname_flags+0x80/0x3b0 [ 237.727893][T17743] __x64_sys_execve+0x42/0x70 [ 237.727913][T17743] x64_sys_call+0x271a/0x3000 [ 237.727934][T17743] do_syscall_64+0xd2/0x200 [ 237.727999][T17743] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 237.728026][T17743] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 237.728096][T17743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.728118][T17743] RIP: 0033:0x7f5f54e7eec9 [ 237.728135][T17743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.728152][T17743] RSP: 002b:00007f5f538df038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 237.728171][T17743] RAX: ffffffffffffffda RBX: 00007f5f550d5fa0 RCX: 00007f5f54e7eec9 [ 237.728251][T17743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.728263][T17743] RBP: 00007f5f538df090 R08: 0000000000000000 R09: 0000000000000000 [ 237.728274][T17743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.728285][T17743] R13: 00007f5f550d6038 R14: 00007f5f550d5fa0 R15: 00007ffc2096d978 [ 237.728369][T17743] [ 237.731904][T17741] netlink: 'syz.0.5001': attribute type 1 has an invalid length. [ 237.755332][T17745] serio: Serial port ptm2 [ 237.758172][T17741] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5001'. [ 237.830214][T17757] loop5: detected capacity change from 0 to 1024 [ 237.937120][T17757] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 237.948154][T17757] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 237.959329][T17757] JBD2: no valid journal superblock found [ 237.965146][T17757] EXT4-fs (loop5): Could not load journal inode [ 237.994966][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5011'. [ 238.010982][T17777] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5009'. [ 238.073462][T17776] netlink: 766 bytes leftover after parsing attributes in process `syz.5.5012'. [ 238.085249][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5013'. [ 238.094697][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5013'. [ 238.149256][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5017'. [ 238.244251][T17796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.283593][T17796] netlink: 'syz.5.5019': attribute type 4 has an invalid length. [ 238.384266][T17800] random: crng reseeded on system resumption [ 238.405407][T17799] loop5: detected capacity change from 0 to 2048 [ 238.434611][T17799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.468617][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.490068][T17805] loop5: detected capacity change from 0 to 1024 [ 238.497115][T17805] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 238.508167][T17805] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 238.518661][T17805] JBD2: no valid journal superblock found [ 238.524819][T17805] EXT4-fs (loop5): Could not load journal inode [ 238.649624][T17819] random: crng reseeded on system resumption [ 238.691109][T17819] loop5: detected capacity change from 0 to 2048 [ 238.714086][T17819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.822853][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.853325][T17839] serio: Serial port ptm0 [ 239.037387][T17849] bridge_slave_0: left allmulticast mode [ 239.043204][T17849] bridge_slave_0: left promiscuous mode [ 239.048983][T17849] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.088540][T17849] bridge_slave_1: left allmulticast mode [ 239.094308][T17849] bridge_slave_1: left promiscuous mode [ 239.100005][T17849] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.119481][T17856] netlink: 'syz.0.5035': attribute type 4 has an invalid length. [ 239.134656][T17849] bond0: (slave bond_slave_0): Releasing backup interface [ 239.154637][T17849] bond0: (slave bond_slave_1): Releasing backup interface [ 239.166970][T17849] team0: Port device team_slave_0 removed [ 239.175976][T17849] team0: Port device team_slave_1 removed [ 239.183422][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.190925][T17849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.199669][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.207380][T17849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.217122][T17849] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.236012][T17856] .`: renamed from bond0 (while UP) [ 239.312826][T17860] random: crng reseeded on system resumption [ 239.325997][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 239.326015][ T29] audit: type=1400 audit(1759767574.701:20538): avc: denied { mount } for pid=17863 comm="syz.1.5039" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 239.355421][ T29] audit: type=1400 audit(1759767574.701:20539): avc: denied { write } for pid=17863 comm="syz.1.5039" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.376529][ T29] audit: type=1400 audit(1759767574.701:20540): avc: denied { open } for pid=17863 comm="syz.1.5039" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.376968][T17858] loop4: detected capacity change from 0 to 2048 [ 239.398505][ T29] audit: type=1400 audit(1759767574.731:20541): avc: denied { connect } for pid=17863 comm="syz.1.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.434422][T17858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.436605][ T29] audit: type=1400 audit(1759767574.811:20542): avc: denied { unmount } for pid=12282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 239.496051][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.509584][ T29] audit: type=1326 audit(1759767574.881:20543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17874 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 239.533927][ T29] audit: type=1326 audit(1759767574.911:20544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17874 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 239.536389][T17875] serio: Serial port ptm1 [ 239.557976][ T29] audit: type=1326 audit(1759767574.911:20545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17874 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 239.577237][T17877] loop4: detected capacity change from 0 to 512 [ 239.586040][ T29] audit: type=1326 audit(1759767574.911:20546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17874 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 239.615865][ T29] audit: type=1326 audit(1759767574.911:20547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17874 comm="syz.0.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 239.643108][T17877] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.5044: Failed to acquire dquot type 1 [ 239.655382][T17877] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.5044: Failed to acquire dquot type 1 [ 239.667248][T17877] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5044: bg 0: block 248: padding at end of block bitmap is not set [ 239.683142][T17877] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 239.692463][T17877] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.5044: Failed to acquire dquot type 1 [ 239.706988][T17877] EXT4-fs (loop4): 1 orphan inode deleted [ 239.718964][T17877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.732132][T17877] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.791673][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.819293][T17899] FAULT_INJECTION: forcing a failure. [ 239.819293][T17899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.833033][T17899] CPU: 1 UID: 0 PID: 17899 Comm: syz.2.5052 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.833063][T17899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.833138][T17899] Call Trace: [ 239.833144][T17899] [ 239.833152][T17899] __dump_stack+0x1d/0x30 [ 239.833239][T17899] dump_stack_lvl+0xe8/0x140 [ 239.833375][T17899] dump_stack+0x15/0x1b [ 239.833410][T17899] should_fail_ex+0x265/0x280 [ 239.833462][T17899] should_fail+0xb/0x20 [ 239.833521][T17899] should_fail_usercopy+0x1a/0x20 [ 239.833543][T17899] _copy_from_user+0x1c/0xb0 [ 239.833570][T17899] proc_control+0x43/0xa0 [ 239.833603][T17899] usbdev_ioctl+0x93c/0x1700 [ 239.833639][T17899] ? __pfx_usbdev_ioctl+0x10/0x10 [ 239.833739][T17899] __se_sys_ioctl+0xce/0x140 [ 239.833760][T17899] __x64_sys_ioctl+0x43/0x50 [ 239.833781][T17899] x64_sys_call+0x1816/0x3000 [ 239.833897][T17899] do_syscall_64+0xd2/0x200 [ 239.833930][T17899] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 239.833985][T17899] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 239.834007][T17899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.834027][T17899] RIP: 0033:0x7fdae557eec9 [ 239.834045][T17899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.834147][T17899] RSP: 002b:00007fdae3fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.834168][T17899] RAX: ffffffffffffffda RBX: 00007fdae57d5fa0 RCX: 00007fdae557eec9 [ 239.834180][T17899] RDX: 0000200000000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 239.834192][T17899] RBP: 00007fdae3fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 239.834204][T17899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.834215][T17899] R13: 00007fdae57d6038 R14: 00007fdae57d5fa0 R15: 00007fffd0fffff8 [ 239.834235][T17899] [ 240.058328][T17910] serio: Serial port ptm0 [ 240.116293][T17925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.173086][T17935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.181678][T17935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.237386][T17939] FAULT_INJECTION: forcing a failure. [ 240.237386][T17939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.250543][T17939] CPU: 0 UID: 0 PID: 17939 Comm: syz.2.5069 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.250643][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.250655][T17939] Call Trace: [ 240.250662][T17939] [ 240.250671][T17939] __dump_stack+0x1d/0x30 [ 240.250794][T17939] dump_stack_lvl+0xe8/0x140 [ 240.250905][T17939] dump_stack+0x15/0x1b [ 240.250936][T17939] should_fail_ex+0x265/0x280 [ 240.250965][T17939] should_fail+0xb/0x20 [ 240.251002][T17939] should_fail_usercopy+0x1a/0x20 [ 240.251069][T17939] _copy_from_user+0x1c/0xb0 [ 240.251112][T17939] ___sys_sendmsg+0xc1/0x1d0 [ 240.251149][T17939] __x64_sys_sendmsg+0xd4/0x160 [ 240.251176][T17939] x64_sys_call+0x191e/0x3000 [ 240.251334][T17939] do_syscall_64+0xd2/0x200 [ 240.251370][T17939] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 240.251401][T17939] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 240.251433][T17939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.251453][T17939] RIP: 0033:0x7fdae557eec9 [ 240.251469][T17939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.251504][T17939] RSP: 002b:00007fdae3fdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.251528][T17939] RAX: ffffffffffffffda RBX: 00007fdae57d5fa0 RCX: 00007fdae557eec9 [ 240.251540][T17939] RDX: 0000000020000000 RSI: 0000200000008580 RDI: 0000000000000003 [ 240.251624][T17939] RBP: 00007fdae3fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 240.251639][T17939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.251654][T17939] R13: 00007fdae57d6038 R14: 00007fdae57d5fa0 R15: 00007fffd0fffff8 [ 240.251675][T17939] [ 240.575197][T17961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.672866][T17967] tipc: Enabled bearer , priority 0 [ 240.679976][T17967] syzkaller0: entered promiscuous mode [ 240.685551][T17967] syzkaller0: entered allmulticast mode [ 240.695502][T17966] tipc: Resetting bearer [ 240.703625][T17966] tipc: Disabling bearer [ 240.855110][T17974] FAULT_INJECTION: forcing a failure. [ 240.855110][T17974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.868393][T17974] CPU: 0 UID: 0 PID: 17974 Comm: syz.1.5083 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.868424][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.868438][T17974] Call Trace: [ 240.868447][T17974] [ 240.868510][T17974] __dump_stack+0x1d/0x30 [ 240.868583][T17974] dump_stack_lvl+0xe8/0x140 [ 240.868616][T17974] dump_stack+0x15/0x1b [ 240.868678][T17974] should_fail_ex+0x265/0x280 [ 240.868709][T17974] should_fail+0xb/0x20 [ 240.868735][T17974] should_fail_usercopy+0x1a/0x20 [ 240.868754][T17974] _copy_to_user+0x20/0xa0 [ 240.868793][T17974] simple_read_from_buffer+0xb5/0x130 [ 240.868896][T17974] proc_fail_nth_read+0x10e/0x150 [ 240.868927][T17974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.868954][T17974] vfs_read+0x1a5/0x770 [ 240.869004][T17974] ? __rcu_read_unlock+0x4f/0x70 [ 240.869068][T17974] ? __fget_files+0x184/0x1c0 [ 240.869096][T17974] ksys_read+0xda/0x1a0 [ 240.869117][T17974] __x64_sys_read+0x40/0x50 [ 240.869208][T17974] x64_sys_call+0x27c0/0x3000 [ 240.869264][T17974] do_syscall_64+0xd2/0x200 [ 240.869296][T17974] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 240.869392][T17974] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 240.869422][T17974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.869464][T17974] RIP: 0033:0x7f269b45d8dc [ 240.869529][T17974] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.869551][T17974] RSP: 002b:00007f2699ec7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.869620][T17974] RAX: ffffffffffffffda RBX: 00007f269b6b5fa0 RCX: 00007f269b45d8dc [ 240.869633][T17974] RDX: 000000000000000f RSI: 00007f2699ec70a0 RDI: 0000000000000004 [ 240.869644][T17974] RBP: 00007f2699ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.869717][T17974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.869739][T17974] R13: 00007f269b6b6038 R14: 00007f269b6b5fa0 R15: 00007ffede2611a8 [ 240.869799][T17974] [ 241.082450][T17975] random: crng reseeded on system resumption [ 241.147517][T17975] loop2: detected capacity change from 0 to 2048 [ 241.212405][T17975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.367075][T17989] loop4: detected capacity change from 0 to 512 [ 241.377570][T17989] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.388062][T13015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.413488][T18007] serio: Serial port ptm0 [ 241.418928][T18004] FAULT_INJECTION: forcing a failure. [ 241.418928][T18004] name failslab, interval 1, probability 0, space 0, times 0 [ 241.431656][T18004] CPU: 1 UID: 0 PID: 18004 Comm: syz.1.5093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.431688][T18004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.431701][T18004] Call Trace: [ 241.431710][T18004] [ 241.431720][T18004] __dump_stack+0x1d/0x30 [ 241.431789][T18004] dump_stack_lvl+0xe8/0x140 [ 241.431868][T18004] dump_stack+0x15/0x1b [ 241.431998][T18004] should_fail_ex+0x265/0x280 [ 241.432037][T18004] should_failslab+0x8c/0xb0 [ 241.432064][T18004] kmem_cache_alloc_noprof+0x50/0x480 [ 241.432086][T18004] ? audit_log_start+0x342/0x720 [ 241.432173][T18004] audit_log_start+0x342/0x720 [ 241.432204][T18004] ? kstrtouint+0x76/0xc0 [ 241.432240][T18004] audit_seccomp+0x48/0x100 [ 241.432274][T18004] ? __seccomp_filter+0x82d/0x1250 [ 241.432368][T18004] __seccomp_filter+0x83e/0x1250 [ 241.432473][T18004] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 241.432507][T18004] ? vfs_write+0x7e8/0x960 [ 241.432534][T18004] ? __rcu_read_unlock+0x4f/0x70 [ 241.432560][T18004] ? __fget_files+0x184/0x1c0 [ 241.432670][T18004] __secure_computing+0x82/0x150 [ 241.432695][T18004] syscall_trace_enter+0xcf/0x1e0 [ 241.432725][T18004] do_syscall_64+0xac/0x200 [ 241.432767][T18004] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 241.432803][T18004] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 241.432833][T18004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.432929][T18004] RIP: 0033:0x7f269b45eec9 [ 241.432946][T18004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.432967][T18004] RSP: 002b:00007f2699ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 241.432987][T18004] RAX: ffffffffffffffda RBX: 00007f269b6b5fa0 RCX: 00007f269b45eec9 [ 241.432999][T18004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 241.433052][T18004] RBP: 00007f2699ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.433063][T18004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.433078][T18004] R13: 00007f269b6b6038 R14: 00007f269b6b5fa0 R15: 00007ffede2611a8 [ 241.433099][T18004] [ 241.435619][T17989] EXT4-fs (loop4): 1 orphan inode deleted [ 241.653744][T17989] EXT4-fs (loop4): 1 truncate cleaned up [ 241.660367][T17989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.682240][T17989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.711361][T18012] serio: Serial port ptm1 [ 241.813383][T18036] netlink: 'syz.2.5106': attribute type 1 has an invalid length. [ 241.814623][T18039] FAULT_INJECTION: forcing a failure. [ 241.814623][T18039] name failslab, interval 1, probability 0, space 0, times 0 [ 241.834030][T18039] CPU: 1 UID: 0 PID: 18039 Comm: syz.0.5108 Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.834140][T18039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.834154][T18039] Call Trace: [ 241.834163][T18039] [ 241.834172][T18039] __dump_stack+0x1d/0x30 [ 241.834210][T18039] dump_stack_lvl+0xe8/0x140 [ 241.834259][T18039] dump_stack+0x15/0x1b [ 241.834320][T18039] should_fail_ex+0x265/0x280 [ 241.834358][T18039] should_failslab+0x8c/0xb0 [ 241.834384][T18039] kmem_cache_alloc_noprof+0x50/0x480 [ 241.834421][T18039] ? getname_flags+0x80/0x3b0 [ 241.834450][T18039] getname_flags+0x80/0x3b0 [ 241.834476][T18039] getname_uflags+0x21/0x30 [ 241.834541][T18039] __x64_sys_execveat+0x5d/0x90 [ 241.834604][T18039] x64_sys_call+0x1fec/0x3000 [ 241.834624][T18039] do_syscall_64+0xd2/0x200 [ 241.834649][T18039] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 241.834675][T18039] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 241.834706][T18039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.834736][T18039] RIP: 0033:0x7f0e1ea8eec9 [ 241.834752][T18039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.834772][T18039] RSP: 002b:00007f0e1d4f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 241.834843][T18039] RAX: ffffffffffffffda RBX: 00007f0e1ece5fa0 RCX: 00007f0e1ea8eec9 [ 241.834858][T18039] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 241.834873][T18039] RBP: 00007f0e1d4f7090 R08: 0000000000001000 R09: 0000000000000000 [ 241.834886][T18039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.834899][T18039] R13: 00007f0e1ece6038 R14: 00007f0e1ece5fa0 R15: 00007ffc14d66ba8 [ 241.834917][T18039] [ 242.052696][T18049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.116654][T18058] netlink: 'syz.2.5116': attribute type 1 has an invalid length. [ 242.121720][T18059] netlink: 'syz.2.5116': attribute type 1 has an invalid length. [ 242.135958][T18058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.149494][T18058] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 242.158662][T18058] bond2: (slave batadv1): making interface the new active one [ 242.167831][T18058] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 242.179589][T18059] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 242.188133][T18059] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 242.200946][T18058] __nla_validate_parse: 16 callbacks suppressed [ 242.201040][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5116'. [ 242.220745][T18058] bond2 (unregistering): (slave batadv1): Releasing active interface [ 242.223599][T18066] FAULT_INJECTION: forcing a failure. [ 242.223599][T18066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.242093][T18066] CPU: 1 UID: 0 PID: 18066 Comm: syz.5.5119 Not tainted syzkaller #0 PREEMPT(voluntary) [ 242.242114][T18066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.242189][T18066] Call Trace: [ 242.242193][T18066] [ 242.242198][T18066] __dump_stack+0x1d/0x30 [ 242.242220][T18066] dump_stack_lvl+0xe8/0x140 [ 242.242243][T18066] dump_stack+0x15/0x1b [ 242.242275][T18066] should_fail_ex+0x265/0x280 [ 242.242356][T18066] should_fail+0xb/0x20 [ 242.242377][T18066] should_fail_usercopy+0x1a/0x20 [ 242.242415][T18066] _copy_from_user+0x1c/0xb0 [ 242.242431][T18066] ___sys_sendmsg+0xc1/0x1d0 [ 242.242462][T18066] __x64_sys_sendmsg+0xd4/0x160 [ 242.242478][T18066] x64_sys_call+0x191e/0x3000 [ 242.242491][T18066] do_syscall_64+0xd2/0x200 [ 242.242561][T18066] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 242.242578][T18066] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 242.242612][T18066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.242626][T18066] RIP: 0033:0x7f5f54e7eec9 [ 242.242637][T18066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.242667][T18066] RSP: 002b:00007f5f538df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.242681][T18066] RAX: ffffffffffffffda RBX: 00007f5f550d5fa0 RCX: 00007f5f54e7eec9 [ 242.242690][T18066] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 242.242698][T18066] RBP: 00007f5f538df090 R08: 0000000000000000 R09: 0000000000000000 [ 242.242769][T18066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.242777][T18066] R13: 00007f5f550d6038 R14: 00007f5f550d5fa0 R15: 00007ffc2096d978 [ 242.242790][T18066] [ 242.244756][T18058] bond2 (unregistering): (slave batadv2): Releasing active interface [ 242.317564][T18073] netlink: 324 bytes leftover after parsing attributes in process `syz.0.5118'. [ 242.319977][T18072] netlink: 'syz.5.5121': attribute type 1 has an invalid length. [ 242.442431][T18072] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5121'. [ 242.452580][T18058] bond2 (unregistering): Released all slaves [ 242.461836][T18073] syzkaller0: entered promiscuous mode [ 242.467534][T18073] syzkaller0: entered allmulticast mode [ 242.592838][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5126'. [ 242.739695][T18109] random: crng reseeded on system resumption [ 242.832106][T18112] loop2: detected capacity change from 0 to 2048 [ 242.867684][T18116] loop4: detected capacity change from 0 to 1024 [ 242.892879][T18116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.930824][T18112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.956114][T18116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18116 comm=syz.4.5134 [ 242.968720][T18116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18116 comm=syz.4.5134 [ 243.008594][T18116] ip6gretap1: entered allmulticast mode [ 243.018786][T13015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.036473][T18129] random: crng reseeded on system resumption [ 243.072671][T18134] FAULT_INJECTION: forcing a failure. [ 243.072671][T18134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.085854][T18134] CPU: 1 UID: 0 PID: 18134 Comm: syz.2.5139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.085961][T18134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.085974][T18134] Call Trace: [ 243.085983][T18134] [ 243.085992][T18134] __dump_stack+0x1d/0x30 [ 243.086028][T18134] dump_stack_lvl+0xe8/0x140 [ 243.086133][T18134] dump_stack+0x15/0x1b [ 243.086162][T18134] should_fail_ex+0x265/0x280 [ 243.086274][T18134] should_fail+0xb/0x20 [ 243.086292][T18134] should_fail_usercopy+0x1a/0x20 [ 243.086366][T18134] _copy_from_user+0x1c/0xb0 [ 243.086392][T18134] io_submit_one+0x52/0x11d0 [ 243.086525][T18134] __se_sys_io_submit+0xfb/0x280 [ 243.086615][T18134] __x64_sys_io_submit+0x43/0x50 [ 243.086705][T18134] x64_sys_call+0x2d6c/0x3000 [ 243.086727][T18134] do_syscall_64+0xd2/0x200 [ 243.086755][T18134] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 243.086782][T18134] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 243.086861][T18134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.086884][T18134] RIP: 0033:0x7fdae557eec9 [ 243.086962][T18134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.086980][T18134] RSP: 002b:00007fdae3fdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 243.087004][T18134] RAX: ffffffffffffffda RBX: 00007fdae57d5fa0 RCX: 00007fdae557eec9 [ 243.087018][T18134] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fdae3f9b000 [ 243.087032][T18134] RBP: 00007fdae3fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 243.087046][T18134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.087061][T18134] R13: 00007fdae57d6038 R14: 00007fdae57d5fa0 R15: 00007fffd0fffff8 [ 243.087080][T18134] [ 243.087915][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.157039][T18125] loop5: detected capacity change from 0 to 2048 [ 243.303823][T18125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.363407][T18144] netlink: 'syz.0.5144': attribute type 1 has an invalid length. [ 243.371565][T18144] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5144'. [ 243.430270][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.456470][T18155] netlink: 'syz.5.5146': attribute type 12 has an invalid length. [ 243.472218][T18155] loop5: detected capacity change from 0 to 512 [ 243.503115][T18155] EXT4-fs: Ignoring removed oldalloc option [ 243.509428][T18155] EXT4-fs: test_dummy_encryption option not supported [ 243.543154][T18155] loop5: detected capacity change from 0 to 512 [ 243.569897][T18161] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5149'. [ 243.594840][T18176] random: crng reseeded on system resumption [ 243.601237][T18155] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.5146: Failed to acquire dquot type 1 [ 243.615753][T18171] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5155'. [ 243.639260][T18155] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.5146: Failed to acquire dquot type 1 [ 243.669329][T18155] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5146: bg 0: block 248: padding at end of block bitmap is not set [ 243.684172][T18163] loop4: detected capacity change from 0 to 2048 [ 243.691513][T18155] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 243.701172][T18155] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.5146: Failed to acquire dquot type 1 [ 243.701303][T18178] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5157'. [ 243.712976][T18155] EXT4-fs (loop5): 1 orphan inode deleted [ 243.729435][T18155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.742593][T18155] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.755168][T18163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.768396][T18155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.780753][T18182] serio: Serial port ptm0 [ 243.808987][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.906944][T18196] netlink: 324 bytes leftover after parsing attributes in process `syz.4.5162'. [ 243.918553][T18196] syzkaller0: entered promiscuous mode [ 243.924198][T18196] syzkaller0: entered allmulticast mode [ 243.976828][T18194] random: crng reseeded on system resumption [ 243.996811][T18194] loop5: detected capacity change from 0 to 2048 [ 244.032299][T18194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.065459][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5167'. [ 244.129210][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.149088][T18222] serio: Serial port ptm1 [ 244.222621][T18229] random: crng reseeded on system resumption [ 244.258033][T18220] loop2: detected capacity change from 0 to 2048 [ 244.288721][T18220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.319167][T18233] random: crng reseeded on system resumption [ 244.337986][T13015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.362769][T18235] loop2: detected capacity change from 0 to 1024 [ 244.370070][T18235] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 244.381112][T18235] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 244.391353][T18228] loop4: detected capacity change from 0 to 2048 [ 244.391682][T18235] JBD2: no valid journal superblock found [ 244.403804][T18235] EXT4-fs (loop2): Could not load journal inode [ 244.408051][T18228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.475167][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.526342][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 244.526359][ T29] audit: type=1326 audit(1759771420.067:20822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.567048][T18249] syzkaller0: entered promiscuous mode [ 244.572621][T18249] syzkaller0: entered allmulticast mode [ 244.580644][ T29] audit: type=1326 audit(1759771420.109:20823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.604525][ T29] audit: type=1326 audit(1759771420.109:20824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.628266][ T29] audit: type=1326 audit(1759771420.109:20825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.651994][ T29] audit: type=1326 audit(1759771420.109:20826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.675572][ T29] audit: type=1326 audit(1759771420.109:20827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.699248][ T29] audit: type=1326 audit(1759771420.109:20828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.722903][ T29] audit: type=1326 audit(1759771420.109:20829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.746551][ T29] audit: type=1326 audit(1759771420.109:20830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.770137][ T29] audit: type=1326 audit(1759771420.109:20831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1ea8eec9 code=0x7ffc0000 [ 244.911466][T18264] random: crng reseeded on system resumption [ 244.937062][T18263] loop4: detected capacity change from 0 to 2048 [ 244.960008][T18263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.993106][T18274] serio: Serial port ptm0 [ 245.013524][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.287449][T18292] syzkaller0: entered promiscuous mode [ 245.293293][T18292] syzkaller0: entered allmulticast mode [ 245.337072][T18298] loop2: detected capacity change from 0 to 1024 [ 245.344767][T18298] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 245.355852][T18298] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 245.366605][T18298] JBD2: no valid journal superblock found [ 245.372393][T18298] EXT4-fs (loop2): Could not load journal inode [ 245.456497][T18312] serio: Serial port ptm1 [ 245.461818][T18316] serio: Serial port ptm2 [ 245.638398][T18322] FAULT_INJECTION: forcing a failure. [ 245.638398][T18322] name failslab, interval 1, probability 0, space 0, times 0 [ 245.651250][T18322] CPU: 0 UID: 0 PID: 18322 Comm: syz.2.5208 Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.651283][T18322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.651297][T18322] Call Trace: [ 245.651304][T18322] [ 245.651312][T18322] __dump_stack+0x1d/0x30 [ 245.651379][T18322] dump_stack_lvl+0xe8/0x140 [ 245.651445][T18322] dump_stack+0x15/0x1b [ 245.651471][T18322] should_fail_ex+0x265/0x280 [ 245.651572][T18322] should_failslab+0x8c/0xb0 [ 245.651596][T18322] __kvmalloc_node_noprof+0x12e/0x670 [ 245.651622][T18322] ? alloc_fdtable+0xc2/0x1d0 [ 245.651659][T18322] alloc_fdtable+0xc2/0x1d0 [ 245.651685][T18322] dup_fd+0x4c7/0x540 [ 245.651719][T18322] ksys_unshare+0x346/0x6d0 [ 245.651752][T18322] ? ksys_write+0x192/0x1a0 [ 245.651851][T18322] __x64_sys_unshare+0x1f/0x30 [ 245.651884][T18322] x64_sys_call+0x2915/0x3000 [ 245.651908][T18322] do_syscall_64+0xd2/0x200 [ 245.651941][T18322] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.652036][T18322] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 245.652097][T18322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.652119][T18322] RIP: 0033:0x7fdae557eec9 [ 245.652138][T18322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.652159][T18322] RSP: 002b:00007fdae3f93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 245.652183][T18322] RAX: ffffffffffffffda RBX: 00007fdae57d6180 RCX: 00007fdae557eec9 [ 245.652249][T18322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 245.652263][T18322] RBP: 00007fdae3f93090 R08: 0000000000000000 R09: 0000000000000000 [ 245.652277][T18322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.652291][T18322] R13: 00007fdae57d6218 R14: 00007fdae57d6180 R15: 00007fffd0fffff8 [ 245.652391][T18322] [ 246.429110][T18389] serio: Serial port ptm0 [ 246.711261][T18420] netlink: 'syz.1.5251': attribute type 1 has an invalid length. [ 246.728568][T18422] netlink: 'syz.2.5252': attribute type 1 has an invalid length. [ 246.734857][T18420] bond1: entered promiscuous mode [ 246.742210][T18420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.846345][T18445] loop5: detected capacity change from 0 to 1024 [ 246.853527][T18445] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 246.864549][T18445] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 246.870235][T18447] loop1: detected capacity change from 0 to 1024 [ 246.878114][T18445] JBD2: no valid journal superblock found [ 246.881365][T18447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.886398][T18445] EXT4-fs (loop5): Could not load journal inode [ 246.907956][T18447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 246.916585][T18447] System zones: 0-1, 3-12 [ 246.927183][T18447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.957511][T18447] EXT4-fs error (device loop1): __ext4_remount:6748: comm syz.1.5263: Abort forced by user [ 246.968179][T18447] EXT4-fs (loop1): Remounting filesystem read-only [ 246.974870][T18447] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 247.000706][T18455] __nla_validate_parse: 18 callbacks suppressed [ 247.000723][T18455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5264'. [ 247.017911][T18455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5264'. [ 247.043378][T12282] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.074392][T18459] netlink: 'syz.1.5266': attribute type 1 has an invalid length. [ 247.082270][T18459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5266'. [ 247.217431][T18477] loop4: detected capacity change from 0 to 1024 [ 247.225224][T18477] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 247.236387][T18477] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 247.249746][T18477] JBD2: no valid journal superblock found [ 247.255495][T18477] EXT4-fs (loop4): Could not load journal inode [ 247.293739][T18479] serio: Serial port ptm0 [ 247.325839][T18487] netlink: 324 bytes leftover after parsing attributes in process `syz.4.5279'. [ 247.336017][T18487] syzkaller0: entered promiscuous mode [ 247.341812][T18487] syzkaller0: entered allmulticast mode [ 247.420567][T18498] serio: Serial port ptm1 [ 247.762504][T18512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5290'. [ 247.902048][T18525] serio: Serial port ptm2 [ 248.255422][T18542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5302'. [ 248.277803][T18544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5300'. [ 248.279171][T18534] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5299'. [ 248.287462][T18544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5300'. [ 248.299197][T18545] serio: Serial port ptm0 [ 248.442316][T18554] loop1: detected capacity change from 0 to 1024 [ 248.449369][T18554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.466639][T18554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 248.474942][T18554] System zones: 0-1, 3-12 [ 248.480407][T18554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.493652][T18554] EXT4-fs error (device loop1): __ext4_remount:6748: comm syz.1.5307: Abort forced by user [ 248.503999][T18554] EXT4-fs (loop1): Remounting filesystem read-only [ 248.510786][T18554] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 248.519889][T18554] FAULT_INJECTION: forcing a failure. [ 248.519889][T18554] name failslab, interval 1, probability 0, space 0, times 0 [ 248.532560][T18554] CPU: 1 UID: 0 PID: 18554 Comm: syz.1.5307 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.532588][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.532601][T18554] Call Trace: [ 248.532638][T18554] [ 248.532646][T18554] __dump_stack+0x1d/0x30 [ 248.532682][T18554] dump_stack_lvl+0xe8/0x140 [ 248.532715][T18554] dump_stack+0x15/0x1b [ 248.532789][T18554] should_fail_ex+0x265/0x280 [ 248.532819][T18554] ? __inet_diag_dump_start+0x53/0x850 [ 248.532840][T18554] should_failslab+0x8c/0xb0 [ 248.532865][T18554] __kmalloc_cache_noprof+0x4c/0x4a0 [ 248.532959][T18554] __inet_diag_dump_start+0x53/0x850 [ 248.532979][T18554] ? __rcu_read_unlock+0x34/0x70 [ 248.533002][T18554] ? __netlink_lookup+0x266/0x2a0 [ 248.533023][T18554] inet_diag_dump_start_compat+0x1a/0x30 [ 248.533053][T18554] __netlink_dump_start+0x334/0x520 [ 248.533074][T18554] inet_diag_rcv_msg_compat+0x10b/0x1d0 [ 248.533096][T18554] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 248.533178][T18554] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 248.533192][T18554] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 248.533273][T18554] sock_diag_rcv_msg+0x186/0x2c0 [ 248.533289][T18554] netlink_rcv_skb+0x123/0x220 [ 248.533301][T18554] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 248.533341][T18554] sock_diag_rcv+0x1c/0x30 [ 248.533367][T18554] netlink_unicast+0x5c0/0x690 [ 248.533388][T18554] netlink_sendmsg+0x58b/0x6b0 [ 248.533404][T18554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.533426][T18554] __sock_sendmsg+0x142/0x180 [ 248.533494][T18554] ____sys_sendmsg+0x31e/0x4e0 [ 248.533519][T18554] ___sys_sendmsg+0x17b/0x1d0 [ 248.533621][T18554] __x64_sys_sendmsg+0xd4/0x160 [ 248.533637][T18554] x64_sys_call+0x191e/0x3000 [ 248.533651][T18554] do_syscall_64+0xd2/0x200 [ 248.533668][T18554] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 248.533692][T18554] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 248.533736][T18554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.533751][T18554] RIP: 0033:0x7f269b45eec9 [ 248.533762][T18554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.533775][T18554] RSP: 002b:00007f2699ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.533790][T18554] RAX: ffffffffffffffda RBX: 00007f269b6b5fa0 RCX: 00007f269b45eec9 [ 248.533799][T18554] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000006 [ 248.533807][T18554] RBP: 00007f2699ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.533849][T18554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.533857][T18554] R13: 00007f269b6b6038 R14: 00007f269b6b5fa0 R15: 00007ffede2611a8 [ 248.533878][T18554] [ 248.809450][T12282] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.861408][T18565] serio: Serial port ptm1 [ 248.874575][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5312'. [ 248.911598][T18574] FAULT_INJECTION: forcing a failure. [ 248.911598][T18574] name failslab, interval 1, probability 0, space 0, times 0 [ 248.924470][T18574] CPU: 1 UID: 0 PID: 18574 Comm: syz.1.5315 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.924500][T18574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.924513][T18574] Call Trace: [ 248.924519][T18574] [ 248.924526][T18574] __dump_stack+0x1d/0x30 [ 248.924638][T18574] dump_stack_lvl+0xe8/0x140 [ 248.924748][T18574] dump_stack+0x15/0x1b [ 248.924781][T18574] should_fail_ex+0x265/0x280 [ 248.924901][T18574] should_failslab+0x8c/0xb0 [ 248.924996][T18574] __kvmalloc_node_noprof+0x12e/0x670 [ 248.925028][T18574] ? bpf_test_run_xdp_live+0xf2/0x1050 [ 248.925050][T18574] bpf_test_run_xdp_live+0xf2/0x1050 [ 248.925068][T18574] ? __pfx_autoremove_wake_function+0x10/0x10 [ 248.925128][T18574] ? 0xffffffffa0205400 [ 248.925143][T18574] ? 0xffffffffa0205400 [ 248.925158][T18574] ? 0xffffffffa0205400 [ 248.925172][T18574] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 248.925251][T18574] ? 0xffffffffa0205400 [ 248.925274][T18574] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 248.925305][T18574] bpf_prog_test_run_xdp+0x59a/0x970 [ 248.925328][T18574] ? __rcu_read_unlock+0x4f/0x70 [ 248.925352][T18574] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 248.925372][T18574] bpf_prog_test_run+0x22a/0x390 [ 248.925533][T18574] __sys_bpf+0x4c0/0x7c0 [ 248.925570][T18574] __x64_sys_bpf+0x41/0x50 [ 248.925610][T18574] x64_sys_call+0x2aee/0x3000 [ 248.925633][T18574] do_syscall_64+0xd2/0x200 [ 248.925752][T18574] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 248.925775][T18574] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 248.925800][T18574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.925823][T18574] RIP: 0033:0x7f269b45eec9 [ 248.925837][T18574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.925880][T18574] RSP: 002b:00007f2699ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.925973][T18574] RAX: ffffffffffffffda RBX: 00007f269b6b5fa0 RCX: 00007f269b45eec9 [ 248.925986][T18574] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 248.926000][T18574] RBP: 00007f2699ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.926012][T18574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.926024][T18574] R13: 00007f269b6b6038 R14: 00007f269b6b5fa0 R15: 00007ffede2611a8 [ 248.926044][T18574] [ 248.941941][T18577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.229326][T18590] netlink: 'syz.4.5320': attribute type 1 has an invalid length. [ 249.278544][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 249.278563][ T29] audit: type=1326 audit(1759774497.077:21060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.308824][ T29] audit: type=1326 audit(1759774497.077:21061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.338187][T18600] serio: Serial port ptm0 [ 249.353810][ T29] audit: type=1326 audit(1759774497.151:21062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.377640][ T29] audit: type=1326 audit(1759774497.151:21063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.401456][ T29] audit: type=1326 audit(1759774497.151:21064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.415209][T18613] serio: Serial port ptm2 [ 249.425277][ T29] audit: type=1326 audit(1759774497.151:21065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.453271][ T29] audit: type=1326 audit(1759774497.151:21066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.477265][ T29] audit: type=1326 audit(1759774497.151:21067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.501260][ T29] audit: type=1326 audit(1759774497.151:21068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.525182][ T29] audit: type=1326 audit(1759774497.151:21069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269b45eec9 code=0x7ffc0000 [ 249.967532][T18647] random: crng reseeded on system resumption [ 249.988420][T18646] loop4: detected capacity change from 0 to 2048 [ 250.008208][T18646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.041258][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.122305][T18664] loop1: detected capacity change from 0 to 1024 [ 250.129307][T18664] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 250.140424][T18664] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 250.151775][T18664] JBD2: no valid journal superblock found [ 250.157594][T18664] EXT4-fs (loop1): Could not load journal inode [ 250.269912][T18687] serio: Serial port ptm0 [ 250.289637][T18693] loop4: detected capacity change from 0 to 1024 [ 250.297127][T18693] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 250.306210][T18695] serio: Serial port ptm1 [ 250.308219][T18693] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 250.323166][T18693] JBD2: no valid journal superblock found [ 250.329094][T18693] EXT4-fs (loop4): Could not load journal inode [ 250.361368][T18699] loop4: detected capacity change from 0 to 1024 [ 250.368549][T18699] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 250.379668][T18699] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 250.390482][T18699] JBD2: no valid journal superblock found [ 250.396400][T18699] EXT4-fs (loop4): Could not load journal inode [ 250.542428][T18711] syzkaller0: entered promiscuous mode [ 250.548345][T18711] syzkaller0: entered allmulticast mode [ 251.167224][T18792] netlink: 'syz.1.5406': attribute type 1 has an invalid length. [ 251.197876][T18795] syzkaller0: entered promiscuous mode [ 251.203627][T18795] syzkaller0: entered allmulticast mode [ 251.225873][T18802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.249385][T18802] netlink: 'syz.1.5410': attribute type 4 has an invalid length. [ 251.365484][T18814] random: crng reseeded on system resumption [ 251.427457][T18814] loop2: detected capacity change from 0 to 2048 [ 251.475590][T18829] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 251.529440][T18833] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 251.623676][T18858] ip6gretap1: entered allmulticast mode [ 251.778436][T18879] random: crng reseeded on system resumption [ 251.872349][T18887] __nla_validate_parse: 33 callbacks suppressed [ 251.872368][T18887] netlink: 766 bytes leftover after parsing attributes in process `syz.4.5446'. [ 252.152950][T18917] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.177706][T18917] netlink: 'syz.4.5458': attribute type 4 has an invalid length. [ 252.185752][T18917] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5458'. [ 252.283767][T18936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5466'. [ 252.288893][T18924] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5461'. [ 252.342502][T18942] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.5469'. [ 252.384393][T18948] netlink: 324 bytes leftover after parsing attributes in process `syz.0.5472'. [ 252.394656][T18948] syzkaller0: entered promiscuous mode [ 252.400416][T18948] syzkaller0: entered allmulticast mode [ 252.410132][T18950] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.5473'. [ 252.516044][T18954] netlink: 766 bytes leftover after parsing attributes in process `syz.5.5474'. [ 252.529870][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5483'. [ 252.554825][T18975] serio: Serial port ptm0 [ 252.583642][T18977] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.5485'. [ 252.647303][T18987] tipc: Enabling of bearer rejected, failed to enable media [ 252.685085][T18999] loop1: detected capacity change from 0 to 1024 [ 252.693963][T18999] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 252.704930][T18999] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 252.716013][T18999] JBD2: no valid journal superblock found [ 252.721963][T18999] EXT4-fs (loop1): Could not load journal inode [ 252.792393][T19009] netlink: 'syz.4.5498': attribute type 1 has an invalid length. [ 252.832446][T19014] loop1: detected capacity change from 0 to 1024 [ 252.852722][T19018] random: crng reseeded on system resumption [ 252.866587][T19014] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 252.877720][T19014] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 252.910926][T19014] JBD2: no valid journal superblock found [ 252.916735][T19014] EXT4-fs (loop1): Could not load journal inode [ 253.198738][T19074] loop1: detected capacity change from 0 to 1024 [ 253.212475][T19074] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 253.223450][T19074] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 253.241689][T19074] JBD2: no valid journal superblock found [ 253.247667][T19074] EXT4-fs (loop1): Could not load journal inode [ 253.318158][T19096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.349879][T19096] netlink: 'syz.1.5534': attribute type 4 has an invalid length. [ 253.548033][T19133] FAULT_INJECTION: forcing a failure. [ 253.548033][T19133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.561592][T19133] CPU: 0 UID: 0 PID: 19133 Comm: syz.4.5550 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.561668][T19133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.561681][T19133] Call Trace: [ 253.561688][T19133] [ 253.561696][T19133] __dump_stack+0x1d/0x30 [ 253.561733][T19133] dump_stack_lvl+0xe8/0x140 [ 253.561822][T19133] dump_stack+0x15/0x1b [ 253.561848][T19133] should_fail_ex+0x265/0x280 [ 253.561891][T19133] should_fail+0xb/0x20 [ 253.561979][T19133] should_fail_usercopy+0x1a/0x20 [ 253.562002][T19133] _copy_from_user+0x1c/0xb0 [ 253.562028][T19133] do_semtimedop+0x153/0x220 [ 253.562127][T19133] __x64_sys_semtimedop+0xc8/0xf0 [ 253.562164][T19133] x64_sys_call+0x23f3/0x3000 [ 253.562218][T19133] do_syscall_64+0xd2/0x200 [ 253.562254][T19133] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 253.562279][T19133] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 253.562377][T19133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.562400][T19133] RIP: 0033:0x7f5c7a73eec9 [ 253.562440][T19133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.562457][T19133] RSP: 002b:00007f5c791a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 253.562477][T19133] RAX: ffffffffffffffda RBX: 00007f5c7a995fa0 RCX: 00007f5c7a73eec9 [ 253.562491][T19133] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000000 [ 253.562577][T19133] RBP: 00007f5c791a7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.562591][T19133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.562605][T19133] R13: 00007f5c7a996038 R14: 00007f5c7a995fa0 R15: 00007ffdc5c28878 [ 253.562627][T19133] [ 253.779434][T19143] netlink: 'syz.5.5554': attribute type 1 has an invalid length. [ 253.948891][T19170] random: crng reseeded on system resumption [ 254.030680][T19170] loop2: detected capacity change from 0 to 2048 [ 254.048157][T19170] EXT4-fs mount: 2 callbacks suppressed [ 254.048173][T19170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.080339][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 254.080357][ T29] audit: type=1326 audit(1759779878.151:21222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.113024][ T29] audit: type=1326 audit(1759779878.151:21223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.136805][ T29] audit: type=1326 audit(1759779878.151:21224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.160592][ T29] audit: type=1326 audit(1759779878.151:21225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.184284][ T29] audit: type=1326 audit(1759779878.151:21226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.208018][ T29] audit: type=1326 audit(1759779878.151:21227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.231636][ T29] audit: type=1326 audit(1759779878.151:21228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.255389][ T29] audit: type=1326 audit(1759779878.151:21229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.279148][ T29] audit: type=1326 audit(1759779878.151:21230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.302812][ T29] audit: type=1326 audit(1759779878.151:21231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.5.5570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f5f54e7eec9 code=0x7ffc0000 [ 254.329414][T13015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.582898][T19221] random: crng reseeded on system resumption [ 254.635675][T19235] serio: Serial port ptm0 [ 255.292773][T19279] loop5: detected capacity change from 0 to 2048 [ 255.369621][T19282] loop2: detected capacity change from 0 to 4096 [ 255.376525][T19282] EXT4-fs: dax option not supported [ 255.413452][T19279] loop5: unable to read partition table [ 255.426358][T19279] loop5: partition table beyond EOD, truncated [ 255.432700][T19279] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 255.545652][T19278] tmpfs: Unknown parameter '' [ 255.554328][T19278] $H: renamed from .` [ 255.561969][T19278] $H: entered promiscuous mode [ 255.717504][T19317] netlink: 'syz.2.5628': attribute type 1 has an invalid length. [ 255.730212][T19319] serio: Serial port ptm0 [ 255.916194][T19351] loop4: detected capacity change from 0 to 1024 [ 255.923417][T19351] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 255.934582][T19351] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 255.955841][T19351] JBD2: no valid journal superblock found [ 255.961722][T19351] EXT4-fs (loop4): Could not load journal inode [ 255.975025][T19355] netlink: 'syz.2.5644': attribute type 1 has an invalid length. [ 256.165961][T19377] random: crng reseeded on system resumption [ 256.190405][T19377] loop4: detected capacity change from 0 to 2048 [ 256.211707][T19377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.254130][T12569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.357884][T19398] netlink: 'syz.4.5658': attribute type 1 has an invalid length. [ 256.567313][T19427] loop1: detected capacity change from 0 to 1024 [ 256.575625][T19427] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 256.586701][T19427] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 256.599057][T19427] JBD2: no valid journal superblock found [ 256.604883][T19427] EXT4-fs (loop1): Could not load journal inode [ 256.626412][T19431] netlink: 'syz.2.5672': attribute type 1 has an invalid length. [ 256.634347][T19431] __nla_validate_parse: 47 callbacks suppressed [ 256.634365][T19431] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5672'. [ 256.728744][T19450] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5679'. [ 256.757165][T19453] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.5680'. [ 256.773054][T19456] netlink: 766 bytes leftover after parsing attributes in process `syz.4.5677'. [ 256.886880][T19478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.905679][T19480] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5692'. [ 256.923381][T19478] netlink: 'syz.4.5691': attribute type 4 has an invalid length. [ 256.931164][T19478] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5691'. [ 256.955873][T19488] netlink: 'syz.2.5695': attribute type 10 has an invalid length. [ 256.963847][T19488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5695'. [ 256.974076][T19488] batman_adv: batadv0: Adding interface: veth1_vlan [ 256.980713][T19488] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.003969][T19490] mmap: syz.2.5695 (19490) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.022038][T19488] batman_adv: batadv0: Interface activated: veth1_vlan [ 257.125481][T19504] random: crng reseeded on system resumption [ 257.164776][T19504] loop5: detected capacity change from 0 to 2048 [ 257.185736][T19504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.187932][T19506] serio: Serial port ptm0 [ 257.224156][T11505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.255330][T19514] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.5703'. [ 257.313052][T19520] netlink: 'syz.4.5706': attribute type 1 has an invalid length. [ 257.319859][T19522] netlink: 'syz.5.5707': attribute type 10 has an invalid length. [ 257.320930][T19520] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5706'. [ 257.328756][T19522] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5707'. [ 257.347962][T19522] batman_adv: batadv0: Adding interface: veth1_vlan [ 257.354626][T19522] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.380616][T19522] batman_adv: batadv0: Interface activated: veth1_vlan [ 257.558627][T19530] ================================================================== [ 257.566853][T19530] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 257.573906][T19530] [ 257.576239][T19530] write to 0xffff88811a77dfe8 of 8 bytes by task 19529 on cpu 1: [ 257.583984][T19530] shmem_fallocate+0x221/0x840 [ 257.588769][T19530] vfs_fallocate+0x3b3/0x400 [ 257.593386][T19530] madvise_vma_behavior+0x1920/0x1cf0 [ 257.598778][T19530] madvise_do_behavior+0x5b7/0x970 [ 257.603999][T19530] do_madvise+0x10e/0x190 [ 257.608493][T19530] __x64_sys_madvise+0x64/0x80 [ 257.613359][T19530] x64_sys_call+0x1f1a/0x3000 [ 257.618133][T19530] do_syscall_64+0xd2/0x200 [ 257.622648][T19530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.628576][T19530] [ 257.630907][T19530] read to 0xffff88811a77dfe8 of 8 bytes by task 19530 on cpu 0: [ 257.638543][T19530] shmem_fault+0x90/0x250 [ 257.642894][T19530] __do_fault+0xbc/0x200 [ 257.647159][T19530] handle_mm_fault+0xf78/0x2be0 [ 257.652026][T19530] __get_user_pages+0x102a/0x1ed0 [ 257.657057][T19530] __mm_populate+0x243/0x3a0 [ 257.661649][T19530] vm_mmap_pgoff+0x232/0x2e0 [ 257.666249][T19530] ksys_mmap_pgoff+0xc2/0x310 [ 257.670948][T19530] x64_sys_call+0x14a3/0x3000 [ 257.675636][T19530] do_syscall_64+0xd2/0x200 [ 257.680152][T19530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.686052][T19530] [ 257.688373][T19530] value changed: 0x0000000000000000 -> 0xffffc90001503b58 [ 257.695481][T19530] [ 257.697803][T19530] Reported by Kernel Concurrency Sanitizer on: [ 257.703952][T19530] CPU: 0 UID: 0 PID: 19530 Comm: syz.4.5708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 257.713760][T19530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.723817][T19530] ==================================================================