last executing test programs: 2m18.661897447s ago: executing program 1 (id=836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x7}, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x3, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 2m18.565288501s ago: executing program 1 (id=838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m18.495120085s ago: executing program 1 (id=843): socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x20}, 0x18) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5435, 0x0) setgid(0x0) 2m18.266205836s ago: executing program 1 (id=846): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2000844, &(0x7f0000000440)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x83}}, {@nodots}, {@fat=@quiet}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@fat=@nfs_nostale_ro}, {@fat=@umask={'umask', 0x3d, 0x87}}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d5}}]}, 0x1, 0x262, &(0x7f0000000040)="$eJzs3UFr02AYB/BnW9dmA3Fn8RDw4mmo36BIBTEgVHrQk4XpZRMhu1RP/Rh+Bj+SH2On3SouoZ1ZFTvTpprfD0oe8s9b3uTQt4fnbd/e/3B68vH8/ezbl0iSNDoR07iMOIrd2IvCTnncvaq7cd00/tydFa4FANZnOBz3m54DNdq5eSrP++P9iOjdSEZfNzMpAAAAAAAAAAAA6ra0/7/SQ1ZX/z8AsB30////8rw/Piy/v/1M/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQnMvZ7O7sN6+m5wcA1M/6DwDtY/0HgPax/gNA+7x6/eZFP8sGwzRNIi6mk9FkVByL/NnzbPAovXK0GHUxmYz2yzobPC7ytJofluOfLM278fBBkf/Inr7MKnkvTtZ98wAAAAAAAAAAAAAAAAAAALAljtO5yv7+vSI//lVeVNd+H6Cyf78T9zobuw0AAAAAAAAAAAAAAAAAAAD4p51/+nw6Pjt7lysU8+IgbjEqifmZ2wxfrehGxKqjerElj3d9RVLfk2/6kwkAAAAAAAAAAAAAAAAAANpnsem36ZkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHMW////N8VB+W7Lr2n4FgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICW+B4AAP//C6SJig==") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d0429bd0a000000000076000000", @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c00028008000300000000000600020001"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) 2m18.141307421s ago: executing program 1 (id=847): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m16.965260746s ago: executing program 1 (id=871): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, @perf_bp={&(0x7f0000000580), 0x4}, 0x0, 0x0, 0x0, 0x4, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket(0x2a, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 2m16.917342197s ago: executing program 32 (id=871): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, @perf_bp={&(0x7f0000000580), 0x4}, 0x0, 0x0, 0x0, 0x4, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket(0x2a, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 3.762395566s ago: executing program 2 (id=2952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/73, 0x49, 0x0, &(0x7f0000000080)=""/8, 0x8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x1e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x1, 0x1, 0xa, 0xfffffffffffffff0, 0x8}, @generic={0x1, 0x1, 0x0, 0x8000, 0xb}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x81, &(0x7f0000000300)=""/129, 0x41100, 0x10, '\x00', r1, @fallback=0x1, r2, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x4, &(0x7f0000000500)=[r0, r0, r0, 0xffffffffffffffff], &(0x7f0000000540)=[{0x5, 0x1, 0xf, 0x7}, {0x4, 0x1, 0xb, 0x5}, {0x1, 0x3, 0xb, 0x8}, {0x4, 0x1, 0xd, 0x5}], 0x10, 0xfffffff9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r5, 0x80284511, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000580)={'trans=virtio,', {[{@version_9p2000}, {@cachetag={'cachetag', 0x3d, '%.\''}}, {@debug={'debug', 0x3d, 0x61}}, {@dfltuid}, {@cache_mmap}, {@cache_none}, {@access_client}], [{@obj_user={'obj_user', 0x3d, '][\\}:\xfd['}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '}'}}, {@seclabel}, {@subj_user}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@smackfshat={'smackfshat', 0x3d, '!'}}, {@permit_directio}]}}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) recvmsg$unix(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) recvmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x14006) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 3.212250031s ago: executing program 4 (id=2956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x9, 0x3, 0x80, 0xfff}, {0x4, 0x7f, 0x0, 0x4}, {0x24f, 0x3, 0x65, 0x8}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x120) acct(&(0x7f0000000100)='./file1\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80003, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x15000000) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@local, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x4, 0x4, 0x7, 0xa78a}, 0xfffffffe, 0x4, 0x1}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@private=0xa010102, 0x0, 0x3, 0x1, 0x7, 0x8, 0x4}}, 0xe8) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="02060000020000000200000000000000"], 0x10}}, 0x0) 2.833579829s ago: executing program 2 (id=2964): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x4}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}, @qdisc_kind_options=@q_drr={0x8}]}, 0x80}}, 0xc0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdaff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x27, 0xe, 0xf, 0x4}]}}]}}]}, 0x44}}, 0x0) 2.822998789s ago: executing program 3 (id=2965): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x4, 0x10, 0x42, 0x3, 0x44, @loopback, @mcast1, 0x1, 0x20, 0xe4a, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x6f3, &(0x7f0000000bc0)={{0x12, 0x1, 0x110, 0xc, 0x25, 0xec, 0x40, 0x1b3d, 0x1e9, 0xdee3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e1, 0x2, 0x0, 0x6, 0x10, 0x4, [{{0x9, 0x4, 0x4a, 0x7, 0xe, 0xc5, 0x4b, 0x2, 0xe1, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x10, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x64, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x6}]}}, {{0x9, 0x5, 0xc, 0x12, 0x20, 0x6b, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xf001}, @generic={0x77, 0x24, "fc9518b02edb47829155aa50e3c367e9a2ab25272c3a56818502ddce92b6a4813e9e1b6522159137283504d922c2c017453a6746a30a1ebba19016ca6809fe5e766a4c992103dd9ebe45a19ef52b3e0fbe830e5ac1a851ba0eb1da3eec0633290a9835ab1cdd2e4069da67b4e28b13bea2c1a81034"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x0, 0x6, 0xf7}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x6, 0x44, 0x8, [@generic={0xbd, 0x23, "53bf4b0495c539293e5e768fa0fe339b7acb3a6f832c75e6fb33fb9adb17b37e47a4fc67d72c0a8cd8595f06552c4eb2932384b0769ff8f7d3f05c4a89e618481730a52c54468b77739064bdeb20ca78770ddedfc4a5cb2ae56ff43bf0a74451669e2e25793d09bce47ff567dae9eeed90adbaeba2656824f087d8ee54cbd2c4a1004943c00b4db85ede08e409282d12e636a801564aca5778118aec0cc31ae93f5f4f197fc146b84a4ff26ee5b32fdebb86428b82f05891e60664"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x240, 0xb, 0xfb, 0x1, [@generic={0x40, 0x22, "a0dc1f1524eebe39caf98f90c499d9b541be7641161bc97dc083e7634a3ca80342bca969a085c4b6da191776d53759ee9eb4d3d5f95409e94ff6bc26825f"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x6, 0x6, 0xb, [@generic={0xf5, 0x22, "83767519fd09e8d9f55adbee0bce31a3a0fe464cd1e33072a3e4939b0454b7b9e73ed68d995f4bbbe1701fb94dd98b402d681b14c75ab6203db4d0a8d26a6862e43c54f20f9a5c35d7726c21bb578202bd282119cb5e05d095624e16197022bf0d1f05bcf1f631c1f0a4c4d0a5092034f29d940cdf69353d0c446850830f35684502eccaed540924a6702fa10f5ca42372109e8ff5e05cd3748b44bb6e8b7aafa565519b2a9d72d4412ce7a296085d24e371cd938ba1e04bd24ab4f32dc5aa6b20b3ff29dd6116a3b4170fb82447bd2843476dc60e03c2c6e76a5a76bec1e2ffd789f5e1fb9634dfb731aa033f49a3cbe8dbcd"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x80, 0x9, 0xf4}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x9, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x2, 0x8, 0x7f}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x6, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x80}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x0, 0x27, 0x98, [@generic={0x17, 0x9, "ce7c04a99c3073935f8c99420326d6bef4d870dcf2"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xb, 0x1, 0x20}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x2, 0x5, 0x2a, [@generic={0x5c, 0x23, "1c91f3360ece0db99b6a52a5d7640e237fe79c16feb9824ce8dbe4d7423a07afc47eead1f8402c07299a538b145bdf3b22871f762300c05c3d1ac4c5cbd288e506f51bcfc1b50ec843f50c6ef9b8c656d28c60a9591376d00723"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6f, 0xfff9}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x7, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe}, @generic={0x31, 0xa, "bb7c1210284f6c93a9ef86c2fe1d13054054e5a4fe1c8e225ffa4a4a3993de676dbe95425474bc2ce9065b470d5d67"}]}}]}}, {{0x9, 0x4, 0x6d, 0x81, 0x9, 0x50, 0xc5, 0x59, 0x7f, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "29d6"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0xaf6, 0x8001, 0x4, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xa, 0x1}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x4, 0xc, 0xfe}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x5, 0x0, 0xde, [@generic={0xd3, 0x3, "0c89ab5c9842ada136306d316955db0311391321a9aa5bec6209f9c2f72297a382e86c18c70424ed26597ecb2266bbc430a01f152747968b5d066f3d23ef5f4da2a8ebea7d71f715125749801e1cc091b11675aacf747d98aee312101b31b2c9d3acdde7defce8fc58ed3e7b788140ed5b61ddcbbe6a3964ce162048a7c5047159476bc0f92528abf31d353bb948e7d00d192754287990f4058221f7cb2fb6703f79e66777435c2f4904abe2f86089ad7b38920ca22e213e61e5dac435f787a8f0f49d3573bfa386144110ebc0ff09d92d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0xff}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x8, 0x4, 0x8e, [@generic={0xc, 0x5, "71487397fb2fed1f0b52"}, @generic={0x51, 0x4, "f2a2ea87f48ca34c4e0b7d77dfa5708b8eeb05e54a63744391ed3844aa37953ae5e8fda454a0fc7cab1ca725a475344c93d6846de5197b792936e6761069f8c4888005d23da73a8f4cf9072d137e39"}]}}, {{0x9, 0x5, 0xf, 0x8, 0xbc264c87e45f6ec, 0x34, 0x8b, 0x9}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xd, 0x2, 0xfa, [@generic={0x89, 0x8, "286c889b79b82ba3b51ceb45695a625cc5ffce219f787b40795adc8424c320a24eba9b7eee36c046cb6888f7edf4de4a44d05adee030fe53342f62d2f5fcfd04caa3a8cced5de8050b6d7fca1ee85f22d9bccb4ad14ac73af2bdeec16cac7b8cf3525da04a3df4784ff9c4fa7baa71171dca7c0e68c76805b8fa74496c28fbcd41e430c7b5a652"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x4, 0xed}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x6, 0xe, 0x92, [@generic={0x49, 0x7, "1a21d8e19a1d2a8cf274eb3b301b00272b0f5681e532f619c4646d5c26cde433c6104834e0bda03869ada86f554310c55080755e50a84fe31d8bd02fc39b3f292610d02f45148b"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xf1, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}, @generic={0x88, 0x11, "d9908700b067f5de982a1f422c89829023556faefc621d0092a703a9edfddc35924ad1141f2b7e793ccb084186fa78762d06699a1e11405ce774bacac24f7df7a2e0ec6fc1506afbf186920c268ea618f0c6a4f7845f69626f5ed7f0fbc97b59e0c4faa5973f21984565897066dbaaa654905ee7edce68217c44596b61f37f83b83e2e5b7b2f"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xf9, 0x43, 0x9, 0x20, 0x76}, 0x34, &(0x7f0000000100)={0x5, 0xf, 0x34, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe5, 0x1f, 0xba, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x12, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf4, "522abc170d9a528ccbc7033bbcc60a8c"}]}, 0x5, [{0xe7, &(0x7f0000000200)=@string={0xe7, 0x3, "6d03780f9d55b0d2c32cf0a450419adf19c2dc05e8af3773d2d22315fe353a31b98a25a02fadf5f5141bd1934666f9f55135b4f27c0401f6d212774e7e52c2923893bb459ac6211bb6b79359abcd13d158dbce0625e79acce058ace8491393936124e8705c47ebbdf629d0c49caf08f32ea97ccaff8ad60de6525e5211e0bde31cbd0b73035c417cff5bfd1f56585bba823626fec9cda4543dc35bf903e2684cac0de6ddbe15af86d9a308e495afd8f72af76920afdf81200b5239cb30e53cc76d173a6d1996bad42afa342cef4cd241d7350e778698b1055330db049c1fcfcc87e91f62ee"}}, {0x55, &(0x7f0000000480)=@string={0x55, 0x3, "b496c453113da3f6ee9b999304d33956c78270d0a276014a0e74ab24b9ebdb1af0f1462ef7edf726207c6df51713e44a9ff37e9d7e4c766dfe987ca115ad2adeb49275636c75ab47602b62093d7cf6c583c771"}}, {0x62, &(0x7f0000000580)=@string={0x62, 0x3, "bf37829f5970a4ce74944f10fac63b2691977b2c10f22fd6e311d2e8991b13dfd6467d52ee0466ff69ec4430884d5e23736567ff27d72cb77a3ac08d369aff543822e2ef517b046bb1c8b4803f94d3178787cce3203b22979b1eb79bbee52be8"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x820}}, {0x3f, &(0x7f00000006c0)=@string={0x3f, 0x3, "8026c1b70d0165607754dee255d28ff0bb9b9d422d414da438669571d0aba7e7b0ec64f8b32c2125f5cd6221fa7ebffa68564dc982b4f64dd69c7daf29"}}]}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32, @ANYBLOB="08802b000800000008002c0001000000"], 0x2c}}, 0x18) 2.737715193s ago: executing program 2 (id=2967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000000000000000000000000000000001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="00000500000000000000000000000000000000007bfe675bd4775e87"], 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback={0xe0}, 0xfffffffc}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000300)=0x43d, 0x0, 0x4) syz_io_uring_setup(0x6b6a, &(0x7f0000000180)={0x0, 0x5803, 0x2000, 0x2, 0x28a}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x70c7, &(0x7f0000000340)={0x0, 0xa881, 0x21820, 0x1, 0x210}, &(0x7f0000000280), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x13, 0x0, 0x0, 0x0, 0x12345}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1f, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r8) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) io_uring_enter(0xffffffffffffffff, 0x3514, 0x9141, 0x69, 0x0, 0x0) 2.520559674s ago: executing program 4 (id=2970): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.439105497s ago: executing program 5 (id=2971): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x8}, 0x8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0xba76, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500000000000029"], 0x5b0}, 0x20008001) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="659d4fe0d29d3ffb295865a4a664fc47b1943c3559", 0x15}], 0x1}, 0x20000844) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='erofs_readpages\x00', 0xffffffffffffffff, 0x0, 0xa1c}, 0x18) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1022}], 0x2, 0x0, 0x0, 0x0) 2.321291852s ago: executing program 4 (id=2972): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.309986603s ago: executing program 2 (id=2973): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000c80)='kmem_cache_free\x00'}, 0x18) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x4, 0x1, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xb, 0x6bf, 0x1, 0x2, 0x3, 0x6, 0x9}}, {0x16, 0x2, [0x100, 0x84, 0x9, 0x60, 0x7, 0x6, 0x6904, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x7, 0x10, 0xf60e, 0x1, 0xffffa41d, 0x9, 0x8}}, {0x14, 0x2, [0xeb, 0x2f69, 0xffff, 0x3ff, 0x7, 0x6, 0xfff, 0x0]}}, {{0x1c, 0x1, {0xac, 0x6, 0x101, 0x6, 0x1, 0x6, 0x81, 0x7}}, {0x12, 0x2, [0x7, 0x6, 0x1ff, 0xf1da, 0xcd87, 0x2, 0x9]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x84}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x40000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000480)={{0x7, 0x3}, 0x0, 0x9, 0x3, {0x1, 0x5}, 0x28, 0x8}) setns(0xffffffffffffffff, 0x24020000) 2.264707355s ago: executing program 4 (id=2974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/73, 0x49, 0x0, &(0x7f0000000080)=""/8, 0x8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x1e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x1, 0x1, 0xa, 0xfffffffffffffff0, 0x8}, @generic={0x1, 0x1, 0x0, 0x8000, 0xb}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x81, &(0x7f0000000300)=""/129, 0x41100, 0x10, '\x00', r1, @fallback=0x1, r2, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x4, &(0x7f0000000500)=[r0, r0, r0, 0xffffffffffffffff], &(0x7f0000000540)=[{0x5, 0x1, 0xf, 0x7}, {0x4, 0x1, 0xb, 0x5}, {0x1, 0x3, 0xb, 0x8}, {0x4, 0x1, 0xd, 0x5}], 0x10, 0xfffffff9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r5, 0x80284511, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000580)={'trans=virtio,', {[{@version_9p2000}, {@cachetag={'cachetag', 0x3d, '%.\''}}, {@debug={'debug', 0x3d, 0x61}}, {@dfltuid}, {@cache_mmap}, {@cache_none}, {@access_client}], [{@obj_user={'obj_user', 0x3d, '][\\}:\xfd['}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '}'}}, {@seclabel}, {@subj_user}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@smackfshat={'smackfshat', 0x3d, '!'}}, {@permit_directio}]}}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) recvmsg$unix(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) recvmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x14006) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 2.221566227s ago: executing program 5 (id=2975): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001cc0)=@newtaction={0x828, 0x30, 0x800, 0x70bd26, 0x25dfdbff, {}, [{0x814, 0x1, [@m_bpf={0x94, 0x5, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x53, 0x6, "e97f44372ef72c206842007dd702aa0cf9350ce73b9c89e8f6edcc3d07a4c51dbc004e919b7c902fc802ce5e66e11e0bc2e0d1f6768f2b1c4af038daaad6ed1a9fb677cdb64a1dc3bd65c47ec45d25"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x9c, 0x10, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_LABELS_MASK={0x14, 0x8, "293dcdffd966537f253ae8af8e282602"}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ab341ee77bbc032981fbf083a9e386a5"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c48bc8c6021e05276b2b7cb59b4fe2b0"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x1f, 0x6, "3c7789b8e9d555da57b107fd5cf9776bbda40b20c357dc267e1047"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x1e8, 0x7, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x10, 0x3, 0xee7, 0x200}, @broadcast, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x9f7f153cf505f7d4, 0x0, 0x7}, @multicast1, @rand_addr=0x64010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x4, 0x7f, 0x2}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x0, 0x4, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xb725, 0x7, 0xffffff43, 0x4}, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0xa19, 0x8, 0x5, 0x1e69}, @multicast2, @rand_addr=0x64010102, 0xffffff00, 0x1}}]}, {0xcd, 0x6, "dee003d78fd87affe36e942eb1609a0ca12d09c3b3c5951180943b0f768a56aa2c60e357232657787c90ceb491976dc5a50552956a233314b8801f2494b5d97732293abe0493af468327e05b2d79ed64886d42f96d8f5414993780f614a671e3ec3263e26cf232cca2e92bf9f83ee83a3ae4d8846c9c9f78596157ea6ea4ed851545f3af1d5ed3f2218c5e0f5c8b67d1191d32606711db2efd7b39731cb087105320d223f523c9627ad4c6d378d094cee98baf824d733bc33d8714c343f2efac96834dd3dd1ef39455"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x4f8, 0x8, 0x0, 0x0, {{0xb}, {0x48c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0xdaa7, 0x5, 0x80, 0x6, 0xe, 0x8, 0x6, 0xde, 0x200, 0x8, 0x10001, 0x68, 0x6, 0x6, 0x1, 0x1, 0x2, 0x8, 0x3, 0x855a, 0x1, 0x5, 0x8, 0x40, 0x34, 0x10, 0x1, 0x6, 0x4, 0xc, 0x3, 0x797, 0x3, 0xb, 0x100, 0x5, 0x820b, 0x400, 0x1, 0xfffffffd, 0xe, 0xfff, 0x7, 0xffff, 0x1ff, 0xd, 0x1000, 0x4, 0xe0d7, 0x5d3d, 0x7, 0x2, 0x1acb, 0xff, 0x0, 0x6, 0x10000, 0x9, 0x648, 0x5, 0x0, 0x6, 0x25, 0x5, 0x7, 0x0, 0x10, 0xea1, 0x0, 0x8, 0xff, 0xfffffff9, 0xffffffff, 0x200, 0x10000, 0x2, 0x3, 0x101, 0x6, 0x8448, 0x3, 0x0, 0x3, 0x0, 0x4, 0x5, 0xc, 0xffff, 0x6, 0x6, 0x8, 0x1000, 0x2, 0x2, 0x7, 0xe, 0x3, 0x7, 0x80, 0xba, 0x4, 0x40, 0x6, 0x1000, 0x6, 0x2, 0x8, 0x1000, 0x5, 0x4, 0x7, 0x4, 0x10001, 0x8, 0x240, 0x4, 0x1, 0xe, 0x10001, 0x10, 0x10000, 0x1, 0x7, 0xfffffff7, 0x8, 0x5, 0x3, 0x1, 0x8, 0xa, 0x3, 0x3, 0x4, 0x200, 0x1ba, 0x9a, 0x5, 0x8, 0xffff, 0x5, 0x9b14, 0x7, 0x2, 0x6, 0x3, 0x2, 0x3, 0x5, 0x66, 0x2, 0x344, 0xae, 0x400, 0x8, 0x7fff, 0x2f, 0x10000, 0x101, 0x80000001, 0x3, 0xb2, 0x1ff, 0x3e, 0x0, 0x37, 0x200000, 0xfffffff9, 0x7f, 0xf79, 0x9, 0x2, 0x0, 0x5, 0x0, 0x0, 0x9679, 0x8, 0x9, 0x4, 0x1, 0x6, 0xee, 0xffffffff, 0xffff, 0x401, 0x80000000, 0x0, 0x49, 0x27ae, 0x6, 0x1e9, 0x7fff, 0x3ff, 0x2, 0xfffffffe, 0x5, 0x9, 0x4fc, 0x7, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x1000, 0xffff8001, 0x4, 0x40, 0x7f, 0x200, 0x7, 0x2, 0x10001, 0x400, 0x920, 0x1, 0x1, 0x9, 0x0, 0x4, 0x5, 0xdd, 0x1, 0x1000, 0xbf, 0xfffffd3e, 0xfa5, 0x0, 0x4, 0x101, 0x2, 0x3, 0x0, 0x76, 0x0, 0x8b9, 0x6, 0xffffff76, 0x4, 0x993, 0xf, 0xffff, 0x9, 0x1, 0x6, 0x8, 0x1, 0x5442, 0x3, 0x10, 0x41, 0x6, 0xd]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff801}, @TCA_POLICE_RATE64={0xc, 0x8, 0x45e5df98}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x92f, 0x10000000, 0x5, 0xffffffff, 0xff, {0x2, 0x0, 0x1f4d, 0x8001, 0x3, 0xb248}, {0x5, 0x2, 0x1, 0x7, 0x5, 0x3}, 0x3, 0x4080, 0xfb24}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]]}, {0x44, 0x6, "e4e9b0d45688c8a9fcff400337333d2c8eda9495a18b2e526d991d460332853f0f067fd43aa28df66925132c7370323b3ed10aba9e687716b86f372f62d4cf27"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x828}}, 0x74000800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) socket$nl_rdma(0x10, 0x3, 0x14) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x9}, 0x100, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0xc0085504, &(0x7f0000000140)=0x10) 2.134432051s ago: executing program 2 (id=2976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'nicvf0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r13 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r10, r13, 0x4, 0x2, 0x2}, 0x50) 2.064679874s ago: executing program 0 (id=2977): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x4}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}, @qdisc_kind_options=@q_drr={0x8}]}, 0x80}}, 0xc0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x27, 0xe, 0xf, 0x4}]}}]}}]}, 0x44}}, 0x0) 2.036716316s ago: executing program 3 (id=2978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x7}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r5) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r6, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40042, 0x1) close(r8) r9 = getuid() quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r9, &(0x7f00000002c0)='./file0\x00') r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x80044940, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.837693205s ago: executing program 0 (id=2979): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r6}, 0x18) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000380)={@none, 0xb7}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9e}, &(0x7f0000000300)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x19, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x1, 0xd, 0x1, 0x5000, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x1, 0x22, &(0x7f0000000700)=""/34, 0x41000, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x6, 0x2, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r1, r4, r4], &(0x7f0000000800)=[{0x2, 0x5, 0x7, 0x3}, {0x5, 0x4, 0x5, 0x9}, {0x2, 0x1, 0x10, 0x6}, {0x0, 0x4, 0x2, 0x8}, {0x5, 0x4, 0x4, 0xc}, {0x5, 0x3, 0xb, 0x4}, {0x0, 0x3, 0xa, 0x1}, {0x0, 0x4, 0x1, 0x8}, {0x3, 0x3, 0xd}, {0x2, 0x4, 0x9, 0x9}], 0x10, 0x90fe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r8, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='f2fs_truncate_data_blocks_range\x00', r8, 0x0, 0xfa97}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xfe, 0x7fff0000}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3a, &(0x7f0000000000)=0xfffffffe, 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000000)=0x1) 1.786659197s ago: executing program 0 (id=2980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.636888884s ago: executing program 0 (id=2981): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4f, 0x3, 0x2, 0x8}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xfff, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r0, 0x0, 0x0, 0xfecc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000000)=0xffff, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000006e2cf2a25ba2e51c191b5d207894e647e416ff12e31f1b3259f9aa87469a2c6bc00c4abf948cb44dc06e51260306eba3a45cf4", @ANYRES16=r5, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = open_tree(0xffffffffffffffff, 0x0, 0x8001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f00000004"], 0x58) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x0, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYBLOB="332d0ab2f88d1716cd15495a63968c2091e72656231a5dce9b6647fc7ed69928d23988673447ad27e5f0dfbbcc28d442677db35946d73511189b60b441d4064a4c7c3dbe18ba512095e66250dae93a82015e0938471b87eb6c93a0b0d7a02496eaad4f38e01a21ee19e85abe4c46259e3dc02de4369f150ed05d5125c7cb7b7f88817fd77255bca5fa26ac439a5fc8a4bfeacb1cdba6bb0676b1429cd3604eab7d9eb75a5cf12078974e3e4f389d43119761d6545fe98f7a30f976", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200a221679a0007020000f8ffffffb703000008000000b704000000000000850000000300000095e3735235434314ae52a468ce24e10839d7dc1bc3fbd15a122f12b7c3f20f33d9148c2a51bc2b7f2645bec58d46c134b17c4a196de5e1ee192ce8e73ada1b4d5d76f0061e304460b2c22384f5a78a6715c50482e9bf2d5e396cbc41b189525e66f285f27071ff389ed6053f6a03284e51afe6f441ce919b7a35c6", @ANYBLOB="47b5e9396b13441efb36015a643b601a624c1fafbebc94a721885fcd075a35b4adf4106f665e28e37de0abfefdba4fb20dd33cfc0c945a070111c4010dc652018a57a402bb26672a07c0611d2b09e9af15d018938793429eb9d72cd3ef533ca8d840b8c26488686615e00780a96fa53d67d47771827071bb35cbdb284846ca4fc211cc925679", @ANYRES8=r6, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) unshare(0x20040600) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000045d200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) 1.607342286s ago: executing program 2 (id=2982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r1 = syz_io_uring_setup(0x2221, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x0, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{0x0}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}) io_uring_enter(r1, 0x66ae, 0x4, 0x2, 0x0, 0x0) 1.501238631s ago: executing program 0 (id=2983): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (fail_nth: 6) 1.363840957s ago: executing program 4 (id=2984): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', r2}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendto(r4, &(0x7f0000000680)="ca94c899f403edded044a6389fcf20763368d93816d80215d165a0ff4092fb2a963f2b57631ca041360387601ec9b7333f8f13367e552b5f878a3a54e9d77b656efcdef72084c9d84e98827b7f8e75401d587a1b56fd6ec4f64b3db1591c12075edec7e82f212ef5fe66dad08cdd9df198aba219f679fe0ef04b7cf021df4edb84f1c3e0fcfd5cf126e538703af7a84931eff77cfcc77bc244b16c46377579ef64e649b54dcec012f9fd99984462a7fec012d4d87d12ea492daf77134e806c89b30b9e6fbc93e9e12af0ef1333075f2e16c7483a1b", 0xd5, 0x40800, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) close(r8) 1.184024015s ago: executing program 3 (id=2985): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r3, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000"], 0x5c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a20000000020a0108"], 0x3440}}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x11, 0x0, 0x80000000, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) ftruncate(r7, 0xb35) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYRES32=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.031101842s ago: executing program 5 (id=2986): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x4000000, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x4, 0x10, 0x42, 0x3, 0x44, @loopback, @mcast1, 0x1, 0x20, 0xe4a, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x6f3, &(0x7f0000000bc0)={{0x12, 0x1, 0x110, 0xc, 0x25, 0xec, 0x40, 0x1b3d, 0x1e9, 0xdee3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e1, 0x2, 0x0, 0x6, 0x10, 0x4, [{{0x9, 0x4, 0x4a, 0x7, 0xe, 0xc5, 0x4b, 0x2, 0xe1, [], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x10, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x64, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x6}]}}, {{0x9, 0x5, 0xc, 0x12, 0x20, 0x6b, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xf001}, @generic={0x77, 0x24, "fc9518b02edb47829155aa50e3c367e9a2ab25272c3a56818502ddce92b6a4813e9e1b6522159137283504d922c2c017453a6746a30a1ebba19016ca6809fe5e766a4c992103dd9ebe45a19ef52b3e0fbe830e5ac1a851ba0eb1da3eec0633290a9835ab1cdd2e4069da67b4e28b13bea2c1a81034"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0x0, 0x6, 0xf7}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x6, 0x44, 0x8, [@generic={0xbd, 0x23, "53bf4b0495c539293e5e768fa0fe339b7acb3a6f832c75e6fb33fb9adb17b37e47a4fc67d72c0a8cd8595f06552c4eb2932384b0769ff8f7d3f05c4a89e618481730a52c54468b77739064bdeb20ca78770ddedfc4a5cb2ae56ff43bf0a74451669e2e25793d09bce47ff567dae9eeed90adbaeba2656824f087d8ee54cbd2c4a1004943c00b4db85ede08e409282d12e636a801564aca5778118aec0cc31ae93f5f4f197fc146b84a4ff26ee5b32fdebb86428b82f05891e60664"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x240, 0xb, 0xfb, 0x1, [@generic={0x40, 0x22, "a0dc1f1524eebe39caf98f90c499d9b541be7641161bc97dc083e7634a3ca80342bca969a085c4b6da191776d53759ee9eb4d3d5f95409e94ff6bc26825f"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x6, 0x6, 0xb, [@generic={0xf5, 0x22, "83767519fd09e8d9f55adbee0bce31a3a0fe464cd1e33072a3e4939b0454b7b9e73ed68d995f4bbbe1701fb94dd98b402d681b14c75ab6203db4d0a8d26a6862e43c54f20f9a5c35d7726c21bb578202bd282119cb5e05d095624e16197022bf0d1f05bcf1f631c1f0a4c4d0a5092034f29d940cdf69353d0c446850830f35684502eccaed540924a6702fa10f5ca42372109e8ff5e05cd3748b44bb6e8b7aafa565519b2a9d72d4412ce7a296085d24e371cd938ba1e04bd24ab4f32dc5aa6b20b3ff29dd6116a3b4170fb82447bd2843476dc60e03c2c6e76a5a76bec1e2ffd789f5e1fb9634dfb731aa033f49a3cbe8dbcd"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x80, 0x9, 0xf4}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x9, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x2, 0x8, 0x7f}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x6, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x80}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x0, 0x27, 0x98, [@generic={0x17, 0x9, "ce7c04a99c3073935f8c99420326d6bef4d870dcf2"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xb, 0x1, 0x20}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x2, 0x5, 0x2a, [@generic={0x5c, 0x23, "1c91f3360ece0db99b6a52a5d7640e237fe79c16feb9824ce8dbe4d7423a07afc47eead1f8402c07299a538b145bdf3b22871f762300c05c3d1ac4c5cbd288e506f51bcfc1b50ec843f50c6ef9b8c656d28c60a9591376d00723"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6f, 0xfff9}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x7, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe}, @generic={0x31, 0xa, "bb7c1210284f6c93a9ef86c2fe1d13054054e5a4fe1c8e225ffa4a4a3993de676dbe95425474bc2ce9065b470d5d67"}]}}]}}, {{0x9, 0x4, 0x6d, 0x81, 0x9, 0x50, 0xc5, 0x59, 0x7f, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "29d6"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0xaf6, 0x8001, 0x4, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xa, 0x1}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x4, 0xc, 0xfe}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x5, 0x0, 0xde, [@generic={0xd3, 0x3, "0c89ab5c9842ada136306d316955db0311391321a9aa5bec6209f9c2f72297a382e86c18c70424ed26597ecb2266bbc430a01f152747968b5d066f3d23ef5f4da2a8ebea7d71f715125749801e1cc091b11675aacf747d98aee312101b31b2c9d3acdde7defce8fc58ed3e7b788140ed5b61ddcbbe6a3964ce162048a7c5047159476bc0f92528abf31d353bb948e7d00d192754287990f4058221f7cb2fb6703f79e66777435c2f4904abe2f86089ad7b38920ca22e213e61e5dac435f787a8f0f49d3573bfa386144110ebc0ff09d92d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0xff}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x8, 0x4, 0x8e, [@generic={0xc, 0x5, "71487397fb2fed1f0b52"}, @generic={0x51, 0x4, "f2a2ea87f48ca34c4e0b7d77dfa5708b8eeb05e54a63744391ed3844aa37953ae5e8fda454a0fc7cab1ca725a475344c93d6846de5197b792936e6761069f8c4888005d23da73a8f4cf9072d137e39"}]}}, {{0x9, 0x5, 0xf, 0x8, 0xbc264c87e45f6ec, 0x34, 0x8b, 0x9}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xd, 0x2, 0xfa, [@generic={0x89, 0x8, "286c889b79b82ba3b51ceb45695a625cc5ffce219f787b40795adc8424c320a24eba9b7eee36c046cb6888f7edf4de4a44d05adee030fe53342f62d2f5fcfd04caa3a8cced5de8050b6d7fca1ee85f22d9bccb4ad14ac73af2bdeec16cac7b8cf3525da04a3df4784ff9c4fa7baa71171dca7c0e68c76805b8fa74496c28fbcd41e430c7b5a652"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x4, 0xed}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x6, 0xe, 0x92, [@generic={0x49, 0x7, "1a21d8e19a1d2a8cf274eb3b301b00272b0f5681e532f619c4646d5c26cde433c6104834e0bda03869ada86f554310c55080755e50a84fe31d8bd02fc39b3f292610d02f45148b"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xf1, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}, @generic={0x88, 0x11, "d9908700b067f5de982a1f422c89829023556faefc621d0092a703a9edfddc35924ad1141f2b7e793ccb084186fa78762d06699a1e11405ce774bacac24f7df7a2e0ec6fc1506afbf186920c268ea618f0c6a4f7845f69626f5ed7f0fbc97b59e0c4faa5973f21984565897066dbaaa654905ee7edce68217c44596b61f37f83b83e2e5b7b2f"}]}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xf9, 0x43, 0x9, 0x20, 0x76}, 0x34, &(0x7f0000000100)={0x5, 0xf, 0x34, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe5, 0x1f, 0xba, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x12, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf4, "522abc170d9a528ccbc7033bbcc60a8c"}]}, 0x5, [{0xe7, &(0x7f0000000200)=@string={0xe7, 0x3, "6d03780f9d55b0d2c32cf0a450419adf19c2dc05e8af3773d2d22315fe353a31b98a25a02fadf5f5141bd1934666f9f55135b4f27c0401f6d212774e7e52c2923893bb459ac6211bb6b79359abcd13d158dbce0625e79acce058ace8491393936124e8705c47ebbdf629d0c49caf08f32ea97ccaff8ad60de6525e5211e0bde31cbd0b73035c417cff5bfd1f56585bba823626fec9cda4543dc35bf903e2684cac0de6ddbe15af86d9a308e495afd8f72af76920afdf81200b5239cb30e53cc76d173a6d1996bad42afa342cef4cd241d7350e778698b1055330db049c1fcfcc87e91f62ee"}}, {0x55, &(0x7f0000000480)=@string={0x55, 0x3, "b496c453113da3f6ee9b999304d33956c78270d0a276014a0e74ab24b9ebdb1af0f1462ef7edf726207c6df51713e44a9ff37e9d7e4c766dfe987ca115ad2adeb49275636c75ab47602b62093d7cf6c583c771"}}, {0x62, &(0x7f0000000580)=@string={0x62, 0x3, "bf37829f5970a4ce74944f10fac63b2691977b2c10f22fd6e311d2e8991b13dfd6467d52ee0466ff69ec4430884d5e23736567ff27d72cb77a3ac08d369aff543822e2ef517b046bb1c8b4803f94d3178787cce3203b22979b1eb79bbee52be8"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x820}}, {0x3f, &(0x7f00000006c0)=@string={0x3f, 0x3, "8026c1b70d0165607754dee255d28ff0bb9b9d422d414da438669571d0aba7e7b0ec64f8b32c2125f5cd6221fa7ebffa68564dc982b4f64dd69c7daf29"}}]}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32, @ANYBLOB="08802b000800000008002c0001000000"], 0x2c}}, 0x18) 994.015184ms ago: executing program 5 (id=2989): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x4}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}, @qdisc_kind_options=@q_drr={0x8}]}, 0x80}}, 0xc0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x27, 0xe, 0xf, 0x4}]}}]}}]}, 0x44}}, 0x0) 912.277088ms ago: executing program 5 (id=2990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'nicvf0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 127.746094ms ago: executing program 3 (id=2991): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x2, 0x4}, 0x8) (fail_nth: 1) 105.488495ms ago: executing program 4 (id=2992): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x120) acct(&(0x7f0000000100)='./file1\x00') 9.061289ms ago: executing program 3 (id=2993): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r6}, 0x18) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000380)={@none, 0xb7}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9e}, &(0x7f0000000300)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x19, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x1, 0xd, 0x1, 0x5000, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x1, 0x22, &(0x7f0000000700)=""/34, 0x41000, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x6, 0x2, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r1, r4, r4], &(0x7f0000000800)=[{0x2, 0x5, 0x7, 0x3}, {0x5, 0x4, 0x5, 0x9}, {0x2, 0x1, 0x10, 0x6}, {0x0, 0x4, 0x2, 0x8}, {0x5, 0x4, 0x4, 0xc}, {0x5, 0x3, 0xb, 0x4}, {0x0, 0x3, 0xa, 0x1}, {0x0, 0x4, 0x1, 0x8}, {0x3, 0x3, 0xd}, {0x2, 0x4, 0x9, 0x9}], 0x10, 0x90fe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r8, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='f2fs_truncate_data_blocks_range\x00', r8, 0x0, 0xfa97}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xfe, 0x7fff0000}]}) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) 469.13µs ago: executing program 5 (id=2994): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001cc0)=@newtaction={0x828, 0x30, 0x800, 0x70bd26, 0x25dfdbff, {}, [{0x814, 0x1, [@m_bpf={0x94, 0x5, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x53, 0x6, "e97f44372ef72c206842007dd702aa0cf9350ce73b9c89e8f6edcc3d07a4c51dbc004e919b7c902fc802ce5e66e11e0bc2e0d1f6768f2b1c4af038daaad6ed1a9fb677cdb64a1dc3bd65c47ec45d25"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x9c, 0x10, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_LABELS_MASK={0x14, 0x8, "293dcdffd966537f253ae8af8e282602"}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ab341ee77bbc032981fbf083a9e386a5"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "c48bc8c6021e05276b2b7cb59b4fe2b0"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x1f, 0x6, "3c7789b8e9d555da57b107fd5cf9776bbda40b20c357dc267e1047"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x1e8, 0x7, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x10, 0x3, 0xee7, 0x200}, @broadcast, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x9f7f153cf505f7d4, 0x0, 0x7}, @multicast1, @rand_addr=0x64010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x4, 0x7f, 0x2}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x0, 0x4, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xb725, 0x7, 0xffffff43, 0x4}, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0xa19, 0x8, 0x5, 0x1e69}, @multicast2, @rand_addr=0x64010102, 0xffffff00, 0x1}}]}, {0xcd, 0x6, "dee003d78fd87affe36e942eb1609a0ca12d09c3b3c5951180943b0f768a56aa2c60e357232657787c90ceb491976dc5a50552956a233314b8801f2494b5d97732293abe0493af468327e05b2d79ed64886d42f96d8f5414993780f614a671e3ec3263e26cf232cca2e92bf9f83ee83a3ae4d8846c9c9f78596157ea6ea4ed851545f3af1d5ed3f2218c5e0f5c8b67d1191d32606711db2efd7b39731cb087105320d223f523c9627ad4c6d378d094cee98baf824d733bc33d8714c343f2efac96834dd3dd1ef39455"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x4f8, 0x8, 0x0, 0x0, {{0xb}, {0x48c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0xdaa7, 0x5, 0x80, 0x6, 0xe, 0x8, 0x6, 0xde, 0x200, 0x8, 0x10001, 0x68, 0x6, 0x6, 0x1, 0x1, 0x2, 0x8, 0x3, 0x855a, 0x1, 0x5, 0x8, 0x40, 0x34, 0x10, 0x1, 0x6, 0x4, 0xc, 0x3, 0x797, 0x3, 0xb, 0x100, 0x5, 0x820b, 0x400, 0x1, 0xfffffffd, 0xe, 0xfff, 0x7, 0xffff, 0x1ff, 0xd, 0x1000, 0x4, 0xe0d7, 0x5d3d, 0x7, 0x2, 0x1acb, 0xff, 0x0, 0x6, 0x10000, 0x9, 0x648, 0x5, 0x0, 0x6, 0x25, 0x5, 0x7, 0x0, 0x10, 0xea1, 0x0, 0x8, 0xff, 0xfffffff9, 0xffffffff, 0x200, 0x10000, 0x2, 0x3, 0x101, 0x6, 0x8448, 0x3, 0x0, 0x3, 0x0, 0x4, 0x5, 0xc, 0xffff, 0x6, 0x6, 0x8, 0x1000, 0x2, 0x2, 0x7, 0xe, 0x3, 0x7, 0x80, 0xba, 0x4, 0x40, 0x6, 0x1000, 0x6, 0x2, 0x8, 0x1000, 0x5, 0x4, 0x7, 0x4, 0x10001, 0x8, 0x240, 0x4, 0x1, 0xe, 0x10001, 0x10, 0x10000, 0x1, 0x7, 0xfffffff7, 0x8, 0x5, 0x3, 0x1, 0x8, 0xa, 0x3, 0x3, 0x4, 0x200, 0x1ba, 0x9a, 0x5, 0x8, 0xffff, 0x5, 0x9b14, 0x7, 0x2, 0x6, 0x3, 0x2, 0x3, 0x5, 0x66, 0x2, 0x344, 0xae, 0x400, 0x8, 0x7fff, 0x2f, 0x10000, 0x101, 0x80000001, 0x3, 0xb2, 0x1ff, 0x3e, 0x0, 0x37, 0x200000, 0xfffffff9, 0x7f, 0xf79, 0x9, 0x2, 0x0, 0x5, 0x0, 0x0, 0x9679, 0x8, 0x9, 0x4, 0x1, 0x6, 0xee, 0xffffffff, 0xffff, 0x401, 0x80000000, 0x0, 0x49, 0x27ae, 0x6, 0x1e9, 0x7fff, 0x3ff, 0x2, 0xfffffffe, 0x5, 0x9, 0x4fc, 0x7, 0x8, 0x1, 0x5, 0x4, 0x6, 0x0, 0x1000, 0xffff8001, 0x4, 0x40, 0x7f, 0x200, 0x7, 0x2, 0x10001, 0x400, 0x920, 0x1, 0x1, 0x9, 0x0, 0x4, 0x5, 0xdd, 0x1, 0x1000, 0xbf, 0xfffffd3e, 0xfa5, 0x0, 0x4, 0x101, 0x2, 0x3, 0x0, 0x76, 0x0, 0x8b9, 0x6, 0xffffff76, 0x4, 0x993, 0xf, 0xffff, 0x9, 0x1, 0x6, 0x8, 0x1, 0x5442, 0x3, 0x10, 0x41, 0x6, 0xd]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff801}, @TCA_POLICE_RATE64={0xc, 0x8, 0x45e5df98}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x92f, 0x10000000, 0x5, 0xffffffff, 0xff, {0x2, 0x0, 0x1f4d, 0x8001, 0x3, 0xb248}, {0x5, 0x2, 0x1, 0x7, 0x5, 0x3}, 0x3, 0x4080, 0xfb24}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]]}, {0x44, 0x6, "e4e9b0d45688c8a9fcff400337333d2c8eda9495a18b2e526d991d460332853f0f067fd43aa28df66925132c7370323b3ed10aba9e687716b86f372f62d4cf27"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x828}}, 0x74000800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000a1400012cbd7000fedbdf250800010001fc0000"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20008055) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 0s ago: executing program 3 (id=2995): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x5, 0x0, &(0x7f0000bbdffc)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400f1ff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x85c7e72d5896b41, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095", @ANYRESHEX], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sync() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): urity_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 181.959908][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2403'. [ 181.969449][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2403'. [ 182.048115][T10833] Process accounting resumed [ 182.064860][T10839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.115294][T10839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.165959][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 182.166011][ T29] audit: type=1326 audit(184.148:16374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f460a2005 code=0x7ffc0000 [ 182.196595][ T29] audit: type=1326 audit(184.148:16373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 182.219746][ T29] audit: type=1326 audit(184.148:16375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 182.243448][ T29] audit: type=1326 audit(184.148:16376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 182.266648][ T29] audit: type=1326 audit(184.208:16377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f4600b829 code=0x7ffc0000 [ 182.290271][ T29] audit: type=1326 audit(184.208:16378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 182.314190][ T29] audit: type=1326 audit(184.208:16379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10840 comm="syz.0.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 182.340818][ T29] audit: type=1326 audit(184.318:16380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 182.371502][ T29] audit: type=1326 audit(184.318:16381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 182.395314][ T29] audit: type=1326 audit(184.318:16382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 182.411170][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 182.431754][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 182.528374][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 182.588467][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2418'. [ 182.597647][T10881] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2418'. [ 182.675035][T10890] loop5: detected capacity change from 0 to 512 [ 182.695209][T10890] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.710777][T10890] EXT4-fs (loop5): mount failed [ 182.964330][T10912] FAULT_INJECTION: forcing a failure. [ 182.964330][T10912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.977463][T10912] CPU: 1 UID: 0 PID: 10912 Comm: syz.4.2429 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.977545][T10912] Tainted: [W]=WARN [ 182.977552][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.977591][T10912] Call Trace: [ 182.977600][T10912] [ 182.977610][T10912] __dump_stack+0x1d/0x30 [ 182.977645][T10912] dump_stack_lvl+0xe8/0x140 [ 182.977676][T10912] dump_stack+0x15/0x1b [ 182.977701][T10912] should_fail_ex+0x265/0x280 [ 182.977766][T10912] should_fail+0xb/0x20 [ 182.977786][T10912] should_fail_usercopy+0x1a/0x20 [ 182.977814][T10912] _copy_from_user+0x1c/0xb0 [ 182.977903][T10912] __sys_bpf+0x183/0x7c0 [ 182.977943][T10912] __x64_sys_bpf+0x41/0x50 [ 182.977986][T10912] x64_sys_call+0x28e1/0x3000 [ 182.978019][T10912] do_syscall_64+0xd8/0x2c0 [ 182.978193][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.978223][T10912] RIP: 0033:0x7f06db37f749 [ 182.978303][T10912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.978321][T10912] RSP: 002b:00007f06d9de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.978342][T10912] RAX: ffffffffffffffda RBX: 00007f06db5d5fa0 RCX: 00007f06db37f749 [ 182.978360][T10912] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 182.978452][T10912] RBP: 00007f06d9de7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.978469][T10912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.978486][T10912] R13: 00007f06db5d6038 R14: 00007f06db5d5fa0 R15: 00007ffcc24b01e8 [ 182.978514][T10912] [ 183.430984][T10930] loop4: detected capacity change from 0 to 1024 [ 183.438172][T10930] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 183.523552][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 183.530048][ T3788] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.611831][T10938] loop3: detected capacity change from 0 to 1024 [ 183.619825][T10938] EXT4-fs (loop3): unable to read superblock [ 183.800149][T10930] loop4: detected capacity change from 0 to 32768 [ 184.193864][T10972] loop4: detected capacity change from 0 to 512 [ 184.234482][T10558] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.517472][T10983] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:1 [ 184.550558][T10986] loop5: detected capacity change from 0 to 1024 [ 184.557686][T10986] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 184.841463][T10986] loop5: detected capacity change from 0 to 32768 [ 184.942392][T11009] __nla_validate_parse: 3 callbacks suppressed [ 184.942413][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 184.964258][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2462'. [ 185.105771][T11013] FAULT_INJECTION: forcing a failure. [ 185.105771][T11013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.119011][T11013] CPU: 1 UID: 0 PID: 11013 Comm: syz.0.2464 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.119048][T11013] Tainted: [W]=WARN [ 185.119059][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.119082][T11013] Call Trace: [ 185.119089][T11013] [ 185.119099][T11013] __dump_stack+0x1d/0x30 [ 185.119200][T11013] dump_stack_lvl+0xe8/0x140 [ 185.119225][T11013] dump_stack+0x15/0x1b [ 185.119247][T11013] should_fail_ex+0x265/0x280 [ 185.119339][T11013] should_fail+0xb/0x20 [ 185.119366][T11013] should_fail_usercopy+0x1a/0x20 [ 185.119467][T11013] _copy_to_iter+0xd2/0xe70 [ 185.119504][T11013] ? chacha_block_generic+0x218/0x240 [ 185.119547][T11013] get_random_bytes_user+0x12d/0x290 [ 185.119605][T11013] ? import_ubuf+0xe8/0x120 [ 185.119694][T11013] __x64_sys_getrandom+0xcf/0x1a0 [ 185.119806][T11013] x64_sys_call+0x1beb/0x3000 [ 185.119839][T11013] do_syscall_64+0xd8/0x2c0 [ 185.119886][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.119915][T11013] RIP: 0033:0x7f7f4606f749 [ 185.119981][T11013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.120112][T11013] RSP: 002b:00007f7f44ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 185.120136][T11013] RAX: ffffffffffffffda RBX: 00007f7f462c5fa0 RCX: 00007f7f4606f749 [ 185.120209][T11013] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 185.120225][T11013] RBP: 00007f7f44ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.120240][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.120255][T11013] R13: 00007f7f462c6038 R14: 00007f7f462c5fa0 R15: 00007ffec571a2b8 [ 185.120279][T11013] [ 185.408945][T11033] loop5: detected capacity change from 0 to 2048 [ 185.436740][T11033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.483566][ T6217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.509378][T11043] loop5: detected capacity change from 0 to 1024 [ 185.517108][T11043] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 185.530924][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2474'. [ 185.616538][T11052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2476'. [ 185.677925][T11054] pim6reg1: entered promiscuous mode [ 185.683480][T11054] pim6reg1: entered allmulticast mode [ 185.781531][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 185.791439][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 185.801849][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 185.845708][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 185.855852][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 185.923384][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'. [ 185.950681][T11073] loop3: detected capacity change from 0 to 8192 [ 185.972526][T11043] loop5: detected capacity change from 0 to 32768 [ 186.227313][T11097] Alternate GPT is invalid, using primary GPT. [ 186.233714][T11097] loop5: p1 p2 p3 [ 186.237444][T11097] loop5: partition table partially beyond EOD, truncated [ 186.252011][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 186.254317][ T3788] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.270601][T11097] x_tables: unsorted underflow at hook 2 [ 186.301904][T11097] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 186.420354][T11117] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 186.446302][T11119] EXT4-fs (loop5): unable to read superblock [ 186.922831][T11134] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 187.202853][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 187.209172][ T29] audit: type=1326 audit(189.178:17051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 187.232782][ T29] audit: type=1326 audit(189.178:17052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 187.261669][ T29] audit: type=1326 audit(189.238:17053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11165 comm="syz.4.2517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06db37f749 code=0x7ffc0000 [ 187.298660][ T29] audit: type=1326 audit(189.238:17054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 187.321723][ T29] audit: type=1326 audit(189.238:17055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 187.344785][ T29] audit: type=1326 audit(189.238:17056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 187.367900][ T29] audit: type=1326 audit(189.238:17057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 187.390918][ T29] audit: type=1326 audit(189.238:17058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 187.401921][T11169] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 187.414099][ T29] audit: type=1326 audit(189.238:17059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11156 comm="syz.0.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7f4606f749 code=0x7ffc0000 [ 187.447637][T11169] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2513: Failed to acquire dquot type 0 [ 187.517462][T11169] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 187.572962][T11169] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2513: corrupted inode contents [ 187.639648][T11169] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.2513: mark_inode_dirty error [ 187.768807][T11184] FAULT_INJECTION: forcing a failure. [ 187.768807][T11184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.781980][T11184] CPU: 1 UID: 0 PID: 11184 Comm: syz.2.2522 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.782115][T11184] Tainted: [W]=WARN [ 187.782125][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.782204][T11184] Call Trace: [ 187.782214][T11184] [ 187.782223][T11184] __dump_stack+0x1d/0x30 [ 187.782299][T11184] dump_stack_lvl+0xe8/0x140 [ 187.782323][T11184] dump_stack+0x15/0x1b [ 187.782349][T11184] should_fail_ex+0x265/0x280 [ 187.782381][T11184] should_fail+0xb/0x20 [ 187.782425][T11184] should_fail_usercopy+0x1a/0x20 [ 187.782457][T11184] _copy_from_user+0x1c/0xb0 [ 187.782545][T11184] ___sys_sendmsg+0xc1/0x1d0 [ 187.782647][T11184] __x64_sys_sendmsg+0xd4/0x160 [ 187.782691][T11184] x64_sys_call+0x17ba/0x3000 [ 187.782723][T11184] do_syscall_64+0xd8/0x2c0 [ 187.782805][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.782834][T11184] RIP: 0033:0x7f4afc6bf749 [ 187.782880][T11184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.782905][T11184] RSP: 002b:00007f4afb11f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.782929][T11184] RAX: ffffffffffffffda RBX: 00007f4afc915fa0 RCX: 00007f4afc6bf749 [ 187.782994][T11184] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 187.783007][T11184] RBP: 00007f4afb11f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.783021][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.783115][T11184] R13: 00007f4afc916038 R14: 00007f4afc915fa0 R15: 00007ffd41af3db8 [ 187.783142][T11184] [ 187.957239][T11169] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2513: corrupted inode contents [ 187.970159][T11169] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.2513: mark_inode_dirty error [ 187.993168][T11169] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2513: corrupted inode contents [ 188.009792][T11169] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 188.019773][T11169] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.2513: corrupted inode contents [ 188.032875][T11169] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.2513: mark_inode_dirty error [ 188.053420][T11169] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 188.054336][T11191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.074824][T11188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.097559][T11169] EXT4-fs (loop3): 1 truncate cleaned up [ 188.109923][T11191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.111164][T11169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.131245][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.749662][T11239] set_capacity_and_notify: 7 callbacks suppressed [ 188.749747][T11239] loop5: detected capacity change from 0 to 1024 [ 188.783581][T11239] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 188.885097][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.125370][T11239] loop5: detected capacity change from 0 to 32768 [ 189.196023][T11264] loop4: detected capacity change from 0 to 1024 [ 189.204284][T11264] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 189.215393][T11264] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 189.225913][T11264] JBD2: no valid journal superblock found [ 189.231785][T11264] EXT4-fs (loop4): Could not load journal inode [ 189.246140][T11268] syzkaller0: entered promiscuous mode [ 189.251971][T11268] syzkaller0: entered allmulticast mode [ 189.361494][T11273] netlink: 'syz.0.2554': attribute type 3 has an invalid length. [ 189.369328][T11273] netlink: 'syz.0.2554': attribute type 1 has an invalid length. [ 189.407169][T11275] bond0: entered promiscuous mode [ 189.412351][T11275] bond_slave_0: entered promiscuous mode [ 189.418895][T11275] bond_slave_1: entered promiscuous mode [ 189.449440][T11275] batadv0: entered promiscuous mode [ 189.463733][T11275] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 189.473291][T11275] bond0: left promiscuous mode [ 189.478151][T11275] bond_slave_0: left promiscuous mode [ 189.483919][T11275] bond_slave_1: left promiscuous mode [ 189.490103][T11275] batadv0: left promiscuous mode [ 189.605145][T11297] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 189.645006][T11295] loop5: detected capacity change from 0 to 8192 [ 189.649876][T11301] syzkaller0: entered promiscuous mode [ 189.656953][T11301] syzkaller0: entered allmulticast mode [ 189.689673][ T6217] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 189.689827][ T6217] FAT-fs (loop5): Filesystem has been set read-only [ 189.818715][T11307] loop4: detected capacity change from 0 to 512 [ 189.863959][T11307] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.884579][T11309] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 189.891134][T11309] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.898883][T11309] vhci_hcd vhci_hcd.0: Device attached [ 189.915361][T11307] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.2566: invalid indirect mapped block 4294967295 (level 0) [ 189.939554][T11307] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.2566: invalid indirect mapped block 4294967295 (level 1) [ 189.966959][T11311] vhci_hcd: connection closed [ 189.972421][T11307] EXT4-fs (loop4): 1 orphan inode deleted [ 189.983198][T11307] EXT4-fs (loop4): 1 truncate cleaned up [ 189.988973][ T9602] vhci_hcd vhci_hcd.3: stop threads [ 189.994252][ T9602] vhci_hcd vhci_hcd.3: release socket [ 189.999833][ T9602] vhci_hcd vhci_hcd.3: disconnect device [ 190.015480][T11307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.274277][T11326] __nla_validate_parse: 8 callbacks suppressed [ 190.274296][T11326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2571'. [ 190.320603][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.346549][T11333] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 190.429370][T11343] syzkaller0: entered promiscuous mode [ 190.434989][T11343] syzkaller0: entered allmulticast mode [ 190.448695][T11328] Process accounting resumed [ 190.516967][T11349] syzkaller0: entered promiscuous mode [ 190.522565][T11349] syzkaller0: entered allmulticast mode [ 190.585770][T11351] tipc: Enabling of bearer rejected, failed to enable media [ 190.805696][T11363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11363 comm=syz.3.2584 [ 190.838796][T11363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11363 comm=syz.3.2584 [ 190.875829][T11363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11363 comm=syz.3.2584 [ 191.282288][T11376] syzkaller0: entered promiscuous mode [ 191.288038][T11376] syzkaller0: entered allmulticast mode [ 191.328556][T11378] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2590'. [ 191.338382][T11378] tipc: Started in network mode [ 191.343435][T11378] tipc: Node identity ac1414aa, cluster identity 4711 [ 191.350557][T11378] tipc: Enabled bearer , priority 10 [ 191.357864][T11378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2590'. [ 191.446294][T11384] loop5: detected capacity change from 0 to 512 [ 191.468614][T11384] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.484667][T11384] EXT4-fs (loop5): mount failed [ 191.809546][T11408] loop4: detected capacity change from 0 to 8192 [ 191.833202][ T3322] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 191.841168][ T3322] FAT-fs (loop4): Filesystem has been set read-only [ 192.027104][T11415] syzkaller0: entered promiscuous mode [ 192.033036][T11415] syzkaller0: entered allmulticast mode [ 192.151223][T11422] loop5: detected capacity change from 0 to 512 [ 192.154953][T11417] macvtap2: entered promiscuous mode [ 192.163746][T11417] macvtap2: entered allmulticast mode [ 192.254192][T11429] loop5: detected capacity change from 0 to 2048 [ 192.298110][T11429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.327837][ T6217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.343812][ T3734] tipc: Node number set to 2886997162 [ 192.414620][T11405] syz.0.2598 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 192.428957][T11405] CPU: 1 UID: 0 PID: 11405 Comm: syz.0.2598 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.429000][T11405] Tainted: [W]=WARN [ 192.429007][T11405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.429021][T11405] Call Trace: [ 192.429028][T11405] [ 192.429066][T11405] __dump_stack+0x1d/0x30 [ 192.429100][T11405] dump_stack_lvl+0xe8/0x140 [ 192.429133][T11405] dump_stack+0x15/0x1b [ 192.429162][T11405] dump_header+0x81/0x240 [ 192.429257][T11405] oom_kill_process+0x295/0x350 [ 192.429393][T11405] out_of_memory+0x97b/0xb80 [ 192.429434][T11405] try_charge_memcg+0x610/0xa10 [ 192.429474][T11405] obj_cgroup_charge_pages+0xa6/0x150 [ 192.429555][T11405] __memcg_kmem_charge_page+0x9f/0x170 [ 192.429600][T11405] __alloc_frozen_pages_noprof+0x18f/0x360 [ 192.429647][T11405] alloc_pages_mpol+0xb3/0x260 [ 192.429746][T11405] alloc_pages_noprof+0x90/0x130 [ 192.429788][T11405] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 192.429834][T11405] __kvmalloc_node_noprof+0x492/0x6b0 [ 192.429928][T11405] ? ip_set_alloc+0x24/0x30 [ 192.429969][T11405] ? ip_set_alloc+0x24/0x30 [ 192.430045][T11405] ip_set_alloc+0x24/0x30 [ 192.430163][T11405] hash_netiface_create+0x282/0x740 [ 192.430208][T11405] ? __pfx_hash_netiface_create+0x10/0x10 [ 192.430253][T11405] ip_set_create+0x3cc/0x970 [ 192.430291][T11405] ? __nla_parse+0x40/0x60 [ 192.430406][T11405] nfnetlink_rcv_msg+0x4c6/0x590 [ 192.430466][T11405] netlink_rcv_skb+0x123/0x220 [ 192.430507][T11405] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 192.430623][T11405] nfnetlink_rcv+0x167/0x16c0 [ 192.430730][T11405] ? free_frozen_page_commit+0x79/0x3b0 [ 192.430765][T11405] ? _raw_spin_unlock+0x26/0x50 [ 192.430857][T11405] ? __free_frozen_pages+0x288/0x510 [ 192.430890][T11405] ? bpf_check+0x9d67/0xc860 [ 192.431006][T11405] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 192.431109][T11405] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 192.431195][T11405] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 192.431221][T11405] ? should_fail_ex+0x30/0x280 [ 192.431246][T11405] ? selinux_nlmsg_lookup+0x99/0x890 [ 192.431273][T11405] ? __rcu_read_unlock+0x34/0x70 [ 192.431299][T11405] netlink_unicast+0x5c0/0x690 [ 192.431406][T11405] netlink_sendmsg+0x58b/0x6b0 [ 192.431446][T11405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.431555][T11405] __sock_sendmsg+0x145/0x180 [ 192.431584][T11405] ____sys_sendmsg+0x31e/0x4a0 [ 192.431623][T11405] ___sys_sendmsg+0x17b/0x1d0 [ 192.431715][T11405] __x64_sys_sendmsg+0xd4/0x160 [ 192.431758][T11405] x64_sys_call+0x17ba/0x3000 [ 192.431789][T11405] do_syscall_64+0xd8/0x2c0 [ 192.431904][T11405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.431928][T11405] RIP: 0033:0x7f7f4606f749 [ 192.431944][T11405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.431962][T11405] RSP: 002b:00007f7f44ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.432059][T11405] RAX: ffffffffffffffda RBX: 00007f7f462c5fa0 RCX: 00007f7f4606f749 [ 192.432075][T11405] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 192.432090][T11405] RBP: 00007f7f460f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 192.432105][T11405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.432119][T11405] R13: 00007f7f462c6038 R14: 00007f7f462c5fa0 R15: 00007ffec571a2b8 [ 192.432143][T11405] [ 192.432151][T11405] memory: usage 307200kB, limit 307200kB, failcnt 400 [ 192.529153][T11447] loop4: detected capacity change from 0 to 8192 [ 192.533646][T11405] memory+swap: usage 307840kB, limit 9007199254740988kB, failcnt 0 [ 192.533693][T11405] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 192.533711][T11405] Memory cgroup stats for /syz0: [ 192.534065][T11405] cache 0 [ 192.534075][T11405] rss 0 [ 192.534083][T11405] shmem 0 [ 192.534092][T11405] mapped_file 0 [ 192.534101][T11405] dirty 0 [ 192.534110][T11405] writeback 0 [ 192.534120][T11405] workingset_refault_anon 15 [ 192.534180][T11405] workingset_refault_file 297 [ 192.534191][T11405] swap 655360 [ 192.534201][T11405] swapcached 12288 [ 192.534210][T11405] pgpgin 279343 [ 192.534220][T11405] pgpgout 279339 [ 192.534227][T11405] pgfault 302742 [ 192.534260][T11405] pgmajfault 13 [ 192.534270][T11405] inactive_anon 16384 [ 192.534280][T11405] active_anon 0 [ 192.534287][T11405] inactive_file 0 [ 192.534294][T11405] active_file 0 [ 192.534364][T11405] unevictable 0 [ 192.559575][ T3322] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 192.563630][T11405] hierarchical_memory_limit 314572800 [ 192.563647][T11405] hierarchical_memsw_limit 9223372036854771712 [ 192.563660][T11405] total_cache 0 [ 192.563669][T11405] total_rss 0 [ 192.563679][T11405] total_shmem 0 [ 192.563688][T11405] total_mapped_file 0 [ 192.563698][T11405] total_dirty 0 [ 192.563708][T11405] total_writeback 0 [ 192.563716][T11405] total_workingset_refault_anon 15 [ 192.563777][T11405] total_workingset_refault_file 297 [ 192.563789][T11405] total_swap 655360 [ 192.563799][T11405] total_swapcached 12288 [ 192.563810][T11405] total_pgpgin 279343 [ 192.563820][T11405] total_pgpgout 279339 [ 192.563828][T11405] total_pgfault 302742 [ 192.563836][T11405] total_pgmajfault 13 [ 192.563846][T11405] total_inactive_anon 16384 [ 192.563857][T11405] total_active_anon 0 [ 192.563866][T11405] total_inactive_file 0 [ 192.563882][T11405] total_active_file 0 [ 192.563893][T11405] total_unevictable 0 [ 192.563904][T11405] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2598,pid=11404,uid=0 [ 192.564078][T11405] Memory cgroup out of memory: Killed process 11404 (syz.0.2598) total-vm:85776kB, anon-rss:1140kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 192.594510][T11405] syz.0.2598 (11405) used greatest stack depth: 6200 bytes left [ 192.808534][T11450] syzkaller0: entered promiscuous mode [ 192.809698][ T3322] FAT-fs (loop4): Filesystem has been set read-only [ 192.812494][T11450] syzkaller0: entered allmulticast mode [ 192.834758][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 192.834780][ T29] audit: type=1326 audit(194.808:17565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.063330][ T29] audit: type=1326 audit(194.808:17566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.086630][ T29] audit: type=1326 audit(194.808:17567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.086668][ T29] audit: type=1326 audit(194.808:17568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.086837][ T29] audit: type=1326 audit(194.808:17569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.086870][ T29] audit: type=1326 audit(194.808:17570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.086928][ T29] audit: type=1326 audit(194.808:17571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.086968][ T29] audit: type=1326 audit(194.808:17572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.087007][ T29] audit: type=1326 audit(194.808:17573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.087118][ T29] audit: type=1326 audit(194.808:17574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11438 comm="syz.5.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 193.404697][T11475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.456067][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.593679][T11495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.602263][T11495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.790486][T11502] syzkaller0: entered promiscuous mode [ 193.796229][T11502] syzkaller0: entered allmulticast mode [ 194.614101][T11528] set_capacity_and_notify: 1 callbacks suppressed [ 194.614195][T11528] loop4: detected capacity change from 0 to 8192 [ 194.653615][T11538] syzkaller0: entered promiscuous mode [ 194.659157][T11538] syzkaller0: entered allmulticast mode [ 194.712591][ T3322] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 194.721200][ T3322] FAT-fs (loop4): Filesystem has been set read-only [ 194.752071][T11537] Process accounting resumed [ 194.958391][T11546] loop5: detected capacity change from 0 to 1024 [ 194.959094][T11542] Process accounting resumed [ 194.981259][T11546] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2641: Failed to acquire dquot type 0 [ 195.033923][T11546] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 195.128946][T11546] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2641: corrupted inode contents [ 195.183213][T11546] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.2641: mark_inode_dirty error [ 195.233292][T11546] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2641: corrupted inode contents [ 195.275421][T11546] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2641: mark_inode_dirty error [ 195.326406][T11546] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2641: corrupted inode contents [ 195.357057][T11546] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 195.381265][T11546] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2641: corrupted inode contents [ 195.435515][T11546] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.2641: mark_inode_dirty error [ 195.484970][T11546] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 195.517912][T11546] EXT4-fs (loop5): 1 truncate cleaned up [ 195.556842][T11546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.733106][T11545] syz.0.2644 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 195.748197][T11545] CPU: 0 UID: 0 PID: 11545 Comm: syz.0.2644 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.748266][T11545] Tainted: [W]=WARN [ 195.748274][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.748287][T11545] Call Trace: [ 195.748295][T11545] [ 195.748306][T11545] __dump_stack+0x1d/0x30 [ 195.748341][T11545] dump_stack_lvl+0xe8/0x140 [ 195.748390][T11545] dump_stack+0x15/0x1b [ 195.748425][T11545] dump_header+0x81/0x240 [ 195.748523][T11545] oom_kill_process+0x295/0x350 [ 195.748553][T11545] out_of_memory+0x97b/0xb80 [ 195.748663][T11545] try_charge_memcg+0x610/0xa10 [ 195.748703][T11545] obj_cgroup_charge_pages+0xa6/0x150 [ 195.748788][T11545] __memcg_kmem_charge_page+0x9f/0x170 [ 195.748820][T11545] __alloc_frozen_pages_noprof+0x18f/0x360 [ 195.748866][T11545] alloc_pages_mpol+0xb3/0x260 [ 195.748949][T11545] alloc_pages_noprof+0x90/0x130 [ 195.749059][T11545] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 195.749115][T11545] __kvmalloc_node_noprof+0x492/0x6b0 [ 195.749183][T11545] ? ip_set_alloc+0x24/0x30 [ 195.749217][T11545] ? ip_set_alloc+0x24/0x30 [ 195.749297][T11545] ip_set_alloc+0x24/0x30 [ 195.749327][T11545] hash_netiface_create+0x282/0x740 [ 195.749429][T11545] ? __pfx_hash_netiface_create+0x10/0x10 [ 195.749468][T11545] ip_set_create+0x3cc/0x970 [ 195.749508][T11545] ? __nla_parse+0x40/0x60 [ 195.749612][T11545] nfnetlink_rcv_msg+0x4c6/0x590 [ 195.749679][T11545] netlink_rcv_skb+0x123/0x220 [ 195.749710][T11545] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 195.749811][T11545] nfnetlink_rcv+0x167/0x16c0 [ 195.749875][T11545] ? free_frozen_page_commit+0x79/0x3b0 [ 195.749984][T11545] ? _raw_spin_unlock+0x26/0x50 [ 195.750007][T11545] ? __free_frozen_pages+0x288/0x510 [ 195.750045][T11545] ? bpf_check+0x9d67/0xc860 [ 195.750093][T11545] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 195.750185][T11545] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 195.750224][T11545] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 195.750277][T11545] ? should_fail_ex+0x30/0x280 [ 195.750312][T11545] ? selinux_nlmsg_lookup+0x99/0x890 [ 195.750350][T11545] ? __rcu_read_unlock+0x34/0x70 [ 195.750433][T11545] ? __netlink_lookup+0x266/0x2a0 [ 195.750482][T11545] netlink_unicast+0x5c0/0x690 [ 195.750603][T11545] netlink_sendmsg+0x58b/0x6b0 [ 195.750654][T11545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.750696][T11545] __sock_sendmsg+0x145/0x180 [ 195.750802][T11545] ____sys_sendmsg+0x31e/0x4a0 [ 195.750844][T11545] ___sys_sendmsg+0x17b/0x1d0 [ 195.750919][T11545] __x64_sys_sendmsg+0xd4/0x160 [ 195.750965][T11545] x64_sys_call+0x17ba/0x3000 [ 195.750991][T11545] do_syscall_64+0xd8/0x2c0 [ 195.751111][T11545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.751140][T11545] RIP: 0033:0x7f7f4606f749 [ 195.751160][T11545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.751189][T11545] RSP: 002b:00007f7f44ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.751216][T11545] RAX: ffffffffffffffda RBX: 00007f7f462c5fa0 RCX: 00007f7f4606f749 [ 195.751360][T11545] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 195.751377][T11545] RBP: 00007f7f460f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 195.751390][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.751403][T11545] R13: 00007f7f462c6038 R14: 00007f7f462c5fa0 R15: 00007ffec571a2b8 [ 195.751425][T11545] [ 195.751432][T11545] memory: usage 307200kB, limit 307200kB, failcnt 731 [ 196.108163][T11545] memory+swap: usage 307836kB, limit 9007199254740988kB, failcnt 0 [ 196.116175][T11545] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 196.123502][T11545] Memory cgroup stats for /syz0: [ 196.141000][T11545] cache 4096 [ 196.149573][T11545] rss 4096 [ 196.152636][T11545] shmem 0 [ 196.155619][T11545] mapped_file 4096 [ 196.159357][T11545] dirty 0 [ 196.162306][T11545] writeback 0 [ 196.166409][T11545] workingset_refault_anon 40 [ 196.171092][T11545] workingset_refault_file 1015 [ 196.175902][T11545] swap 663552 [ 196.179255][T11545] swapcached 4096 [ 196.182920][T11545] pgpgin 282224 [ 196.186409][T11545] pgpgout 282221 [ 196.189959][T11545] pgfault 305645 [ 196.194189][T11545] pgmajfault 41 [ 196.197680][T11545] inactive_anon 0 [ 196.201349][T11545] active_anon 8192 [ 196.205163][T11545] inactive_file 0 [ 196.208807][T11545] active_file 4096 [ 196.212535][T11545] unevictable 0 [ 196.216020][T11545] hierarchical_memory_limit 314572800 [ 196.221421][T11545] hierarchical_memsw_limit 9223372036854771712 [ 196.232132][T11545] total_cache 4096 [ 196.235913][T11545] total_rss 4096 [ 196.239497][T11545] total_shmem 0 [ 196.242984][T11545] total_mapped_file 4096 [ 196.247241][T11545] total_dirty 0 [ 196.250781][T11545] total_writeback 0 [ 196.255337][T11545] total_workingset_refault_anon 40 [ 196.260466][T11545] total_workingset_refault_file 1015 [ 196.265810][T11545] total_swap 663552 [ 196.269643][T11545] total_swapcached 4096 [ 196.273832][T11545] total_pgpgin 282224 [ 196.277829][T11545] total_pgpgout 282221 [ 196.281910][T11545] total_pgfault 305645 [ 196.286815][T11545] total_pgmajfault 41 [ 196.290887][T11545] total_inactive_anon 0 [ 196.295160][T11545] total_active_anon 8192 [ 196.299435][T11545] total_inactive_file 0 [ 196.303639][T11545] total_active_file 4096 [ 196.307917][T11545] total_unevictable 0 [ 196.311910][T11545] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2644,pid=11544,uid=0 [ 196.327568][T11545] Memory cgroup out of memory: Killed process 11544 (syz.0.2644) total-vm:85776kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 196.855099][ T6217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.149201][T11600] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11600 comm=syz.5.2662 [ 197.266019][T11605] loop4: detected capacity change from 0 to 512 [ 197.540213][T11624] lo speed is unknown, defaulting to 1000 [ 197.616453][T11591] syz.0.2659 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 197.631468][T11591] CPU: 0 UID: 0 PID: 11591 Comm: syz.0.2659 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.631514][T11591] Tainted: [W]=WARN [ 197.631524][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.631539][T11591] Call Trace: [ 197.631563][T11591] [ 197.631571][T11591] __dump_stack+0x1d/0x30 [ 197.631633][T11591] dump_stack_lvl+0xe8/0x140 [ 197.631665][T11591] dump_stack+0x15/0x1b [ 197.631687][T11591] dump_header+0x81/0x240 [ 197.631709][T11591] oom_kill_process+0x295/0x350 [ 197.631733][T11591] out_of_memory+0x97b/0xb80 [ 197.631795][T11591] try_charge_memcg+0x610/0xa10 [ 197.631835][T11591] obj_cgroup_charge_pages+0xa6/0x150 [ 197.631952][T11591] __memcg_kmem_charge_page+0x9f/0x170 [ 197.631997][T11591] __alloc_frozen_pages_noprof+0x18f/0x360 [ 197.632060][T11591] alloc_pages_mpol+0xb3/0x260 [ 197.632102][T11591] alloc_pages_noprof+0x90/0x130 [ 197.632206][T11591] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 197.632271][T11591] __kvmalloc_node_noprof+0x492/0x6b0 [ 197.632308][T11591] ? ip_set_alloc+0x24/0x30 [ 197.632341][T11591] ? ip_set_alloc+0x24/0x30 [ 197.632371][T11591] ? __kmalloc_cache_noprof+0x3e5/0x4c0 [ 197.632454][T11591] ip_set_alloc+0x24/0x30 [ 197.632493][T11591] hash_netiface_create+0x282/0x740 [ 197.632529][T11591] ? __pfx_hash_netiface_create+0x10/0x10 [ 197.632637][T11591] ip_set_create+0x3cc/0x970 [ 197.632677][T11591] ? __nla_parse+0x40/0x60 [ 197.632760][T11591] nfnetlink_rcv_msg+0x4c6/0x590 [ 197.632826][T11591] netlink_rcv_skb+0x123/0x220 [ 197.632863][T11591] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 197.632985][T11591] nfnetlink_rcv+0x167/0x16c0 [ 197.633011][T11591] ? search_extable+0x53/0x80 [ 197.633036][T11591] ? strncpy_from_user+0x183/0x260 [ 197.633124][T11591] ? fixup_exception+0x742/0xcf0 [ 197.633166][T11591] ? __free_frozen_pages+0x288/0x510 [ 197.633193][T11591] ? do_user_addr_fault+0xd9e/0x1080 [ 197.633249][T11591] ? bpf_check+0x9d67/0xc860 [ 197.633294][T11591] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 197.633338][T11591] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 197.633384][T11591] ? ___slab_alloc+0xc6/0xb60 [ 197.633473][T11591] ? kmalloc_reserve+0x84/0x190 [ 197.633509][T11591] ? selinux_nlmsg_lookup+0x99/0x890 [ 197.633546][T11591] ? __rcu_read_unlock+0x34/0x70 [ 197.633591][T11591] ? __netlink_lookup+0x266/0x2a0 [ 197.633713][T11591] netlink_unicast+0x5c0/0x690 [ 197.633754][T11591] netlink_sendmsg+0x58b/0x6b0 [ 197.633838][T11591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.633877][T11591] __sock_sendmsg+0x145/0x180 [ 197.633898][T11591] ____sys_sendmsg+0x31e/0x4a0 [ 197.633933][T11591] ___sys_sendmsg+0x17b/0x1d0 [ 197.634048][T11591] __x64_sys_sendmsg+0xd4/0x160 [ 197.634089][T11591] x64_sys_call+0x17ba/0x3000 [ 197.634122][T11591] do_syscall_64+0xd8/0x2c0 [ 197.634184][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.634215][T11591] RIP: 0033:0x7f7f4606f749 [ 197.634237][T11591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.634262][T11591] RSP: 002b:00007f7f44ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.634291][T11591] RAX: ffffffffffffffda RBX: 00007f7f462c5fa0 RCX: 00007f7f4606f749 [ 197.634343][T11591] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 197.634359][T11591] RBP: 00007f7f460f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 197.634376][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.634393][T11591] R13: 00007f7f462c6038 R14: 00007f7f462c5fa0 R15: 00007ffec571a2b8 [ 197.634421][T11591] [ 197.986196][T11591] memory: usage 307200kB, limit 307200kB, failcnt 1163 [ 197.993286][T11591] memory+swap: usage 307824kB, limit 9007199254740988kB, failcnt 0 [ 197.993779][T11624] lo speed is unknown, defaulting to 1000 [ 198.001193][T11591] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 198.001238][T11591] Memory cgroup stats for /syz0: [ 198.018509][T11631] bridge0: entered promiscuous mode [ 198.040094][T11630] bridge0: left promiscuous mode [ 198.062986][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 198.063012][ T29] audit: type=1400 audit(200.018:17790): avc: denied { bind } for pid=11630 comm="syz.2.2674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.185929][T10571] Bluetooth: hci0: Frame reassembly failed (-84) [ 198.233836][T11591] cache 0 [ 198.236825][T11591] rss 16384 [ 198.240043][T11591] shmem 0 [ 198.243032][T11591] mapped_file 0 [ 198.246516][T11591] dirty 0 [ 198.249459][T11591] writeback 0 [ 198.252915][T11591] workingset_refault_anon 179 [ 198.258129][T11591] workingset_refault_file 1273 [ 198.263689][T11591] swap 638976 [ 198.267017][T11591] swapcached 28672 [ 198.270742][T11591] pgpgin 282853 [ 198.274340][T11591] pgpgout 282845 [ 198.277898][T11591] pgfault 306291 [ 198.281497][T11591] pgmajfault 137 [ 198.285107][T11591] inactive_anon 24576 [ 198.289100][T11591] active_anon 8192 [ 198.292827][T11591] inactive_file 0 [ 198.297364][T11591] active_file 0 [ 198.300833][T11591] unevictable 0 [ 198.304327][T11591] hierarchical_memory_limit 314572800 [ 198.309710][T11591] hierarchical_memsw_limit 9223372036854771712 [ 198.315943][T11591] total_cache 0 [ 198.319493][T11591] total_rss 16384 [ 198.323794][T11591] total_shmem 0 [ 198.327310][T11591] total_mapped_file 0 [ 198.331305][T11591] total_dirty 0 [ 198.334800][T11591] total_writeback 0 [ 198.338635][T11591] total_workingset_refault_anon 179 [ 198.343919][T11591] total_workingset_refault_file 1273 [ 198.349219][T11591] total_swap 638976 [ 198.353738][T11591] total_swapcached 28672 [ 198.358042][T11591] total_pgpgin 282853 [ 198.362077][T11591] total_pgpgout 282845 [ 198.366189][T11591] total_pgfault 306291 [ 198.370327][T11591] total_pgmajfault 137 [ 198.374557][T11591] total_inactive_anon 24576 [ 198.379082][T11591] total_active_anon 8192 [ 198.384079][T11591] total_inactive_file 0 [ 198.388256][T11591] total_active_file 0 [ 198.392256][T11591] total_unevictable 0 [ 198.396393][T11591] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2659,pid=11590,uid=0 [ 198.411296][T11591] Memory cgroup out of memory: Killed process 11590 (syz.0.2659) total-vm:85776kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 198.431731][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2676'. [ 198.462643][ T29] audit: type=1326 audit(200.438:17791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.5.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 198.555052][ T29] audit: type=1326 audit(200.468:17792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.5.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 198.578222][ T29] audit: type=1326 audit(200.468:17793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.5.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 198.601361][ T29] audit: type=1326 audit(200.478:17794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.5.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 198.624387][ T29] audit: type=1326 audit(200.478:17795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.5.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 198.647467][ T29] audit: type=1326 audit(200.478:17796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.5.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 198.670636][ T29] audit: type=1326 audit(200.478:17797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.5.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 198.693596][ T29] audit: type=1326 audit(200.478:17798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.5.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 198.716628][ T29] audit: type=1326 audit(200.478:17799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.5.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fcac829f749 code=0x7ffc0000 [ 198.976991][T11664] xt_hashlimit: size too large, truncated to 1048576 [ 199.243904][T11678] loop5: detected capacity change from 0 to 512 [ 199.255317][T11678] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.270731][T11678] EXT4-fs (loop5): mount failed [ 199.423335][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2688'. [ 199.560613][T11692] netlink: '+}[@': attribute type 7 has an invalid length. [ 199.567995][T11692] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 199.644757][T11696] loop5: detected capacity change from 0 to 2048 [ 199.665420][T11696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.696033][ T6217] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 199.711137][ T6217] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 199.725381][ T6217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.802917][T11711] SELinux: failed to load policy [ 199.883757][T11722] netlink: 'syz.5.2698': attribute type 3 has an invalid length. [ 199.891583][T11722] netlink: 'syz.5.2698': attribute type 1 has an invalid length. [ 199.899383][T11722] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.2698'. [ 200.242916][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 200.249004][ T3788] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 200.714517][T11730] lo speed is unknown, defaulting to 1000 [ 200.758414][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 200.811064][T11751] loop4: detected capacity change from 0 to 512 [ 200.838825][T11730] lo speed is unknown, defaulting to 1000 [ 200.846472][T11751] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 200.864030][T11751] EXT4-fs (loop4): invalid journal inode [ 200.889462][T11748] loop5: detected capacity change from 0 to 8192 [ 200.896130][T11751] EXT4-fs (loop4): can't get journal size [ 200.921205][T11751] EXT4-fs (loop4): 1 truncate cleaned up [ 200.947747][T11751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.955064][ T6217] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 200.968627][ T6217] FAT-fs (loop5): Filesystem has been set read-only [ 200.997067][T11730] chnl_net:caif_netlink_parms(): no params data found [ 201.086255][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.162208][T11730] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.169904][T11730] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.840348][T11730] bridge_slave_0: entered allmulticast mode [ 201.847297][T11730] bridge_slave_0: entered promiscuous mode [ 201.864130][T11730] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.871268][T11730] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.878831][T11730] bridge_slave_1: entered allmulticast mode [ 201.885606][T11730] bridge_slave_1: entered promiscuous mode [ 201.892501][T11769] syzkaller0: entered promiscuous mode [ 201.898807][T11769] syzkaller0: entered allmulticast mode [ 201.981132][T11730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.993261][T11730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.008900][T11780] syzkaller0: entered promiscuous mode [ 202.008920][T11780] syzkaller0: entered allmulticast mode [ 202.020523][T11730] team0: Port device team_slave_0 added [ 202.021921][T11730] team0: Port device team_slave_1 added [ 202.064218][T11730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.064236][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.064285][T11730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.064907][T11730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.064935][T11730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.064982][T11730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.205682][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 202.314222][T11730] hsr_slave_0: entered promiscuous mode [ 202.314798][T11730] hsr_slave_1: entered promiscuous mode [ 202.315214][T11730] debugfs: 'hsr0' already exists in 'hsr' [ 202.315229][T11730] Cannot create hsr debugfs directory [ 202.515402][T11796] SELinux: policydb version 0 does not match my version range 15-35 [ 202.545019][T11796] SELinux: failed to load policy [ 202.614301][T11801] loop5: detected capacity change from 0 to 2048 [ 202.624267][T11730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.641425][T11730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.656224][T11801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.669224][T11730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.705606][T11730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.738087][ T6217] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 202.825517][T11730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.833064][ T6217] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 202.878626][T11730] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.903906][ T6217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.922215][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.929345][T10571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.941291][T10571] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.948480][T10571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.985197][T11816] loop4: detected capacity change from 0 to 512 [ 203.011051][T11730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.021556][T11730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.109190][T11828] netlink: '+}[@': attribute type 7 has an invalid length. [ 203.116568][T11828] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 203.185186][T11836] syzkaller0: entered promiscuous mode [ 203.190825][T11836] syzkaller0: entered allmulticast mode [ 203.225891][T11730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.234954][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 203.234969][ T29] audit: type=1400 audit(205.218:17941): avc: denied { setopt } for pid=11841 comm="syz.5.2729" lport=52386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.235069][T11842] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 203.241408][ T29] audit: type=1400 audit(205.218:17942): avc: denied { ioctl } for pid=11841 comm="syz.5.2729" path="socket:[33181]" dev="sockfs" ino=33181 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.262322][T11842] IPVS: length: 118 != 24 [ 203.264013][ T29] audit: type=1400 audit(205.238:17943): avc: denied { getopt } for pid=11841 comm="syz.5.2729" lport=52386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.291535][ T29] audit: type=1400 audit(205.258:17944): avc: denied { bind } for pid=11841 comm="syz.5.2729" lport=52386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.291645][ T29] audit: type=1400 audit(205.258:17945): avc: denied { name_bind } for pid=11841 comm="syz.5.2729" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 203.291682][ T29] audit: type=1400 audit(205.258:17946): avc: denied { node_bind } for pid=11841 comm="syz.5.2729" saddr=172.20.20.20 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 203.298173][ T29] audit: type=1326 audit(205.278:17947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 203.298330][ T29] audit: type=1326 audit(205.278:17948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 203.298515][ T29] audit: type=1326 audit(205.278:17949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 203.298642][ T29] audit: type=1326 audit(205.278:17950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.2.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 203.396426][T11854] loop5: detected capacity change from 0 to 256 [ 203.420401][T11730] veth0_vlan: entered promiscuous mode [ 203.426198][T11730] veth1_vlan: entered promiscuous mode [ 203.434422][T11854] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2731'. [ 203.448326][T11730] veth0_macvtap: entered promiscuous mode [ 203.450325][T11730] veth1_macvtap: entered promiscuous mode [ 203.475081][T11730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.477057][T11730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.486305][T10571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.486366][T10571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.486483][T10571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.486628][T10571] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.488333][T11854] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 203.488385][T11854] FAT-fs (loop5): Filesystem has been set read-only [ 203.510795][T11854] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 203.678873][T11861] loop5: detected capacity change from 0 to 256 [ 203.681469][T11861] FAULT_INJECTION: forcing a failure. [ 203.681469][T11861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.681503][T11861] CPU: 1 UID: 0 PID: 11861 Comm: syz.5.2732 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.681618][T11861] Tainted: [W]=WARN [ 203.681639][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.681654][T11861] Call Trace: [ 203.681663][T11861] [ 203.681675][T11861] __dump_stack+0x1d/0x30 [ 203.681702][T11861] dump_stack_lvl+0xe8/0x140 [ 203.681728][T11861] dump_stack+0x15/0x1b [ 203.681750][T11861] should_fail_ex+0x265/0x280 [ 203.681813][T11861] should_fail+0xb/0x20 [ 203.681910][T11861] should_fail_usercopy+0x1a/0x20 [ 203.681945][T11861] _copy_to_user+0x20/0xa0 [ 203.681979][T11861] simple_read_from_buffer+0xb5/0x130 [ 203.682002][T11861] proc_fail_nth_read+0x10e/0x150 [ 203.682125][T11861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.682205][T11861] vfs_read+0x1a8/0x770 [ 203.682223][T11861] ? __rcu_read_unlock+0x4f/0x70 [ 203.682284][T11861] ? __fget_files+0x184/0x1c0 [ 203.682316][T11861] ? mutex_lock+0x58/0x90 [ 203.682355][T11861] ksys_read+0xda/0x1a0 [ 203.682382][T11861] __x64_sys_read+0x40/0x50 [ 203.682446][T11861] x64_sys_call+0x2889/0x3000 [ 203.682481][T11861] do_syscall_64+0xd8/0x2c0 [ 203.682593][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.682623][T11861] RIP: 0033:0x7fcac829e15c [ 203.682708][T11861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.682731][T11861] RSP: 002b:00007fcac6cff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.682756][T11861] RAX: ffffffffffffffda RBX: 00007fcac84f5fa0 RCX: 00007fcac829e15c [ 203.682772][T11861] RDX: 000000000000000f RSI: 00007fcac6cff0a0 RDI: 0000000000000005 [ 203.682844][T11861] RBP: 00007fcac6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 203.682862][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.682878][T11861] R13: 00007fcac84f6038 R14: 00007fcac84f5fa0 R15: 00007ffc40b07278 [ 203.682906][T11861] [ 203.820432][T11867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.820523][T11867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.873405][T11868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2734'. [ 204.125237][T11826] syz.4.2724 (11826) used greatest stack depth: 5944 bytes left [ 204.217649][ T7421] hid_parser_main: 44 callbacks suppressed [ 204.217673][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.217718][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.217747][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.217809][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.217832][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.217854][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.217879][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.217912][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.217934][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.217960][ T7421] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 204.218823][ T7421] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v100.02 Device [syz0] on syz1 [ 204.606632][T11882] loop4: detected capacity change from 0 to 1024 [ 204.628409][T11884] FAULT_INJECTION: forcing a failure. [ 204.628409][T11884] name failslab, interval 1, probability 0, space 0, times 0 [ 204.628450][T11884] CPU: 1 UID: 0 PID: 11884 Comm: syz.5.2741 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.628562][T11884] Tainted: [W]=WARN [ 204.628572][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.628591][T11884] Call Trace: [ 204.628600][T11884] [ 204.628611][T11884] __dump_stack+0x1d/0x30 [ 204.628650][T11884] dump_stack_lvl+0xe8/0x140 [ 204.628758][T11884] dump_stack+0x15/0x1b [ 204.628794][T11884] should_fail_ex+0x265/0x280 [ 204.628828][T11884] should_failslab+0x8c/0xb0 [ 204.628879][T11884] kmem_cache_alloc_noprof+0x69/0x4b0 [ 204.628911][T11884] ? skb_clone+0x151/0x1f0 [ 204.628954][T11884] skb_clone+0x151/0x1f0 [ 204.629065][T11884] __netlink_deliver_tap+0x2c9/0x500 [ 204.629132][T11884] netlink_unicast+0x66b/0x690 [ 204.629176][T11884] netlink_sendmsg+0x58b/0x6b0 [ 204.629225][T11884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.629322][T11884] __sock_sendmsg+0x145/0x180 [ 204.629350][T11884] ____sys_sendmsg+0x31e/0x4a0 [ 204.629397][T11884] ___sys_sendmsg+0x17b/0x1d0 [ 204.629460][T11884] __x64_sys_sendmsg+0xd4/0x160 [ 204.629533][T11884] x64_sys_call+0x17ba/0x3000 [ 204.629616][T11884] do_syscall_64+0xd8/0x2c0 [ 204.629667][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.629697][T11884] RIP: 0033:0x7fcac829f749 [ 204.629719][T11884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.629746][T11884] RSP: 002b:00007fcac6cff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.629841][T11884] RAX: ffffffffffffffda RBX: 00007fcac84f5fa0 RCX: 00007fcac829f749 [ 204.629860][T11884] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 204.629937][T11884] RBP: 00007fcac6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 204.629954][T11884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.629972][T11884] R13: 00007fcac84f6038 R14: 00007fcac84f5fa0 R15: 00007ffc40b07278 [ 204.630001][T11884] [ 204.630099][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2741'. [ 204.663557][T11882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.707331][T11892] FAULT_INJECTION: forcing a failure. [ 204.707331][T11892] name failslab, interval 1, probability 0, space 0, times 0 [ 204.707370][T11892] CPU: 1 UID: 0 PID: 11892 Comm: syz.5.2743 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.707456][T11892] Tainted: [W]=WARN [ 204.707465][T11892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.707488][T11892] Call Trace: [ 204.707497][T11892] [ 204.707581][T11892] __dump_stack+0x1d/0x30 [ 204.707619][T11892] dump_stack_lvl+0xe8/0x140 [ 204.707652][T11892] dump_stack+0x15/0x1b [ 204.707681][T11892] should_fail_ex+0x265/0x280 [ 204.707717][T11892] should_failslab+0x8c/0xb0 [ 204.707775][T11892] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 204.707847][T11892] ? __d_alloc+0x37/0x340 [ 204.707885][T11892] ? inode_set_ctime_to_ts+0x84/0x170 [ 204.707935][T11892] __d_alloc+0x37/0x340 [ 204.708022][T11892] ? from_vfsgid+0x70/0xa0 [ 204.708062][T11892] d_alloc_pseudo+0x1e/0x80 [ 204.708091][T11892] alloc_file_pseudo+0x71/0x160 [ 204.708199][T11892] ? hugetlbfs_get_inode+0x267/0x370 [ 204.708323][T11892] hugetlb_file_setup+0x2a6/0x3d0 [ 204.708378][T11892] ksys_mmap_pgoff+0x157/0x310 [ 204.708418][T11892] x64_sys_call+0x16bb/0x3000 [ 204.708453][T11892] do_syscall_64+0xd8/0x2c0 [ 204.708512][T11892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.708583][T11892] RIP: 0033:0x7fcac829f749 [ 204.708606][T11892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.708702][T11892] RSP: 002b:00007fcac6cff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 204.708730][T11892] RAX: ffffffffffffffda RBX: 00007fcac84f5fa0 RCX: 00007fcac829f749 [ 204.708746][T11892] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 204.708770][T11892] RBP: 00007fcac6cff090 R08: ffffffffffffffff R09: 0000000000000000 [ 204.708788][T11892] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000001 [ 204.708805][T11892] R13: 00007fcac84f6038 R14: 00007fcac84f5fa0 R15: 00007ffc40b07278 [ 204.708856][T11892] [ 204.819788][T11896] loop5: detected capacity change from 0 to 512 [ 205.082087][T11896] ext4: Bad value for 'stripe' [ 205.315554][T11900] syz.2.2745 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 205.329971][T11900] CPU: 1 UID: 0 PID: 11900 Comm: syz.2.2745 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.330012][T11900] Tainted: [W]=WARN [ 205.330021][T11900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.330035][T11900] Call Trace: [ 205.330073][T11900] [ 205.330128][T11900] __dump_stack+0x1d/0x30 [ 205.330163][T11900] dump_stack_lvl+0xe8/0x140 [ 205.330189][T11900] dump_stack+0x15/0x1b [ 205.330209][T11900] dump_header+0x81/0x240 [ 205.330233][T11900] oom_kill_process+0x295/0x350 [ 205.330310][T11900] out_of_memory+0x97b/0xb80 [ 205.330416][T11900] try_charge_memcg+0x610/0xa10 [ 205.330456][T11900] obj_cgroup_charge_pages+0xa6/0x150 [ 205.330568][T11900] __memcg_kmem_charge_page+0x9f/0x170 [ 205.330600][T11900] __alloc_frozen_pages_noprof+0x18f/0x360 [ 205.330710][T11900] alloc_pages_mpol+0xb3/0x260 [ 205.330743][T11900] alloc_pages_noprof+0x90/0x130 [ 205.330802][T11900] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 205.330858][T11900] __kvmalloc_node_noprof+0x492/0x6b0 [ 205.330911][T11900] ? ip_set_alloc+0x24/0x30 [ 205.330953][T11900] ? ip_set_alloc+0x24/0x30 [ 205.331053][T11900] ip_set_alloc+0x24/0x30 [ 205.331090][T11900] hash_netiface_create+0x282/0x740 [ 205.331149][T11900] ? __pfx_hash_netiface_create+0x10/0x10 [ 205.331189][T11900] ip_set_create+0x3cc/0x970 [ 205.331230][T11900] ? __nla_parse+0x40/0x60 [ 205.331310][T11900] nfnetlink_rcv_msg+0x4c6/0x590 [ 205.331379][T11900] netlink_rcv_skb+0x123/0x220 [ 205.331423][T11900] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 205.331532][T11900] nfnetlink_rcv+0x167/0x16c0 [ 205.331566][T11900] ? kmem_cache_free+0xe3/0x3a0 [ 205.331608][T11900] ? __kfree_skb+0x109/0x150 [ 205.331682][T11900] ? nlmon_xmit+0x4f/0x60 [ 205.331704][T11900] ? consume_skb+0x49/0x150 [ 205.331730][T11900] ? nlmon_xmit+0x4f/0x60 [ 205.331766][T11900] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 205.331849][T11900] ? __dev_queue_xmit+0x138d/0x1ec0 [ 205.331888][T11900] ? __dev_queue_xmit+0x148/0x1ec0 [ 205.331930][T11900] ? ref_tracker_free+0x37d/0x3e0 [ 205.331982][T11900] ? __netlink_deliver_tap+0x4dc/0x500 [ 205.332024][T11900] netlink_unicast+0x5c0/0x690 [ 205.332069][T11900] netlink_sendmsg+0x58b/0x6b0 [ 205.332160][T11900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.332207][T11900] __sock_sendmsg+0x145/0x180 [ 205.332236][T11900] ____sys_sendmsg+0x31e/0x4a0 [ 205.332321][T11900] ___sys_sendmsg+0x17b/0x1d0 [ 205.332381][T11900] __x64_sys_sendmsg+0xd4/0x160 [ 205.332496][T11900] x64_sys_call+0x17ba/0x3000 [ 205.332596][T11900] do_syscall_64+0xd8/0x2c0 [ 205.332647][T11900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.332686][T11900] RIP: 0033:0x7f4afc6bf749 [ 205.332707][T11900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.332725][T11900] RSP: 002b:00007f4afb11f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.332754][T11900] RAX: ffffffffffffffda RBX: 00007f4afc915fa0 RCX: 00007f4afc6bf749 [ 205.332772][T11900] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 205.332789][T11900] RBP: 00007f4afc743f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.332804][T11900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.332816][T11900] R13: 00007f4afc916038 R14: 00007f4afc915fa0 R15: 00007ffd41af3db8 [ 205.332837][T11900] [ 205.332844][T11900] memory: usage 307200kB, limit 307200kB, failcnt 705 [ 205.444605][T11917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2752'. [ 205.505886][T11915] Process accounting resumed [ 205.510085][T11900] memory+swap: usage 311660kB, limit 9007199254740988kB, failcnt 0 [ 205.690026][T11900] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 205.697494][T11900] Memory cgroup stats for /syz2: [ 205.698326][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.700166][T11900] cache 0 [ 205.715332][T11900] rss 28672 [ 205.718558][T11900] shmem 0 [ 205.721515][T11900] mapped_file 0 [ 205.725093][T11900] dirty 0 [ 205.728052][T11900] writeback 0 [ 205.731348][T11900] workingset_refault_anon 781 [ 205.736061][T11900] workingset_refault_file 1927 [ 205.740862][T11900] swap 4567040 [ 205.744300][T11900] swapcached 12288 [ 205.748032][T11900] pgpgin 225113 [ 205.751500][T11900] pgpgout 225098 [ 205.755142][T11900] pgfault 256907 [ 205.758700][T11900] pgmajfault 174 [ 205.762252][T11900] inactive_anon 28672 [ 205.766287][T11900] active_anon 0 [ 205.769763][T11900] inactive_file 32768 [ 205.773803][T11900] active_file 0 [ 205.777302][T11900] unevictable 0 [ 205.780772][T11900] hierarchical_memory_limit 314572800 [ 205.786209][T11900] hierarchical_memsw_limit 9223372036854771712 [ 205.792385][T11900] total_cache 0 [ 205.795906][T11900] total_rss 28672 [ 205.799636][T11900] total_shmem 0 [ 205.803154][T11900] total_mapped_file 0 [ 205.807218][T11900] total_dirty 0 [ 205.810694][T11900] total_writeback 0 [ 205.814540][T11900] total_workingset_refault_anon 781 [ 205.819817][T11900] total_workingset_refault_file 1927 [ 205.825153][T11900] total_swap 4567040 [ 205.829058][T11900] total_swapcached 12288 [ 205.833342][T11900] total_pgpgin 225113 [ 205.837337][T11900] total_pgpgout 225098 [ 205.841419][T11900] total_pgfault 256907 [ 205.845550][T11900] total_pgmajfault 174 [ 205.849644][T11900] total_inactive_anon 28672 [ 205.854187][T11900] total_active_anon 0 [ 205.858184][T11900] total_inactive_file 32768 [ 205.862699][T11900] total_active_file 0 [ 205.866750][T11900] total_unevictable 0 [ 205.870748][T11900] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2745,pid=11899,uid=0 [ 205.885619][T11900] Memory cgroup out of memory: Killed process 11899 (syz.2.2745) total-vm:85776kB, anon-rss:1260kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 205.938136][T11927] netlink: '+}[@': attribute type 7 has an invalid length. [ 205.945458][T11927] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 206.018665][T11931] syzkaller0: entered promiscuous mode [ 206.024931][T11931] syzkaller0: entered allmulticast mode [ 206.120903][T11937] netlink: 'syz.0.2757': attribute type 6 has an invalid length. [ 206.197766][T11939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2758'. [ 206.223356][T11943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.224630][T11939] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2758'. [ 206.251490][T11943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.344374][T11951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2763'. [ 206.450435][ T7421] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v100.02 Device [syz0] on syz1 [ 206.664504][T11961] Process accounting resumed [ 206.857457][T11967] syzkaller0: entered promiscuous mode [ 206.863010][T11967] syzkaller0: entered allmulticast mode [ 206.901514][T11971] FAULT_INJECTION: forcing a failure. [ 206.901514][T11971] name failslab, interval 1, probability 0, space 0, times 0 [ 206.914274][T11971] CPU: 1 UID: 0 PID: 11971 Comm: syz.2.2769 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.914466][T11971] Tainted: [W]=WARN [ 206.914476][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.914535][T11971] Call Trace: [ 206.914542][T11971] [ 206.914551][T11971] __dump_stack+0x1d/0x30 [ 206.914621][T11971] dump_stack_lvl+0xe8/0x140 [ 206.914655][T11971] dump_stack+0x15/0x1b [ 206.914730][T11971] should_fail_ex+0x265/0x280 [ 206.914763][T11971] should_failslab+0x8c/0xb0 [ 206.914796][T11971] kmem_cache_alloc_noprof+0x69/0x4b0 [ 206.914908][T11971] ? skb_clone+0x151/0x1f0 [ 206.915000][T11971] skb_clone+0x151/0x1f0 [ 206.915041][T11971] __netlink_deliver_tap+0x2c9/0x500 [ 206.915129][T11971] netlink_unicast+0x66b/0x690 [ 206.915172][T11971] netlink_sendmsg+0x58b/0x6b0 [ 206.915220][T11971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.915293][T11971] __sock_sendmsg+0x145/0x180 [ 206.915316][T11971] ____sys_sendmsg+0x31e/0x4a0 [ 206.915359][T11971] ___sys_sendmsg+0x17b/0x1d0 [ 206.915419][T11971] __x64_sys_sendmsg+0xd4/0x160 [ 206.915502][T11971] x64_sys_call+0x17ba/0x3000 [ 206.915538][T11971] do_syscall_64+0xd8/0x2c0 [ 206.915629][T11971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.915705][T11971] RIP: 0033:0x7f4afc6bf749 [ 206.915727][T11971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.915752][T11971] RSP: 002b:00007f4afb11f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.915833][T11971] RAX: ffffffffffffffda RBX: 00007f4afc915fa0 RCX: 00007f4afc6bf749 [ 206.915847][T11971] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000006 [ 206.915865][T11971] RBP: 00007f4afb11f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.915883][T11971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.915901][T11971] R13: 00007f4afc916038 R14: 00007f4afc915fa0 R15: 00007ffd41af3db8 [ 206.915988][T11971] [ 206.916010][T11971] netlink: 'syz.2.2769': attribute type 6 has an invalid length. [ 207.287522][T11976] syzkaller1: entered promiscuous mode [ 207.293367][T11976] syzkaller1: entered allmulticast mode [ 207.358795][T11982] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2774'. [ 207.388459][T11984] capability: warning: `syz.5.2776' uses 32-bit capabilities (legacy support in use) [ 207.445284][T11988] loop5: detected capacity change from 0 to 512 [ 207.454946][T11988] EXT4-fs (loop5): 1 orphan inode deleted [ 207.461315][T11988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.485536][ T6217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.506254][T11991] atomic_op ffff88813b7b2d28 conn xmit_atomic 0000000000000000 [ 207.508346][T11992] random: crng reseeded on system resumption [ 207.526087][T11992] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 207.611984][T11997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.634114][T11997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.809334][T12001] Process accounting resumed [ 208.308063][T12012] loop5: detected capacity change from 0 to 512 [ 208.328001][T12012] journal_path: Non-blockdev passed as './file0' [ 208.334503][T12012] EXT4-fs: error: could not find journal device path [ 208.531126][T12017] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2786'. [ 208.576211][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 208.576228][ T29] audit: type=1400 audit(210.558:18286): avc: denied { connect } for pid=12018 comm="syz.4.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.633574][T12019] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2787'. [ 208.661726][ T29] audit: type=1400 audit(210.588:18287): avc: denied { create } for pid=12020 comm="syz.5.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 208.681783][ T29] audit: type=1400 audit(210.598:18288): avc: denied { getopt } for pid=12020 comm="syz.5.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 208.701035][ T29] audit: type=1400 audit(210.608:18289): avc: denied { nlmsg_write } for pid=12018 comm="syz.4.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.849023][T12031] syzkaller0: entered promiscuous mode [ 208.854640][T12031] syzkaller0: entered allmulticast mode [ 208.866360][ T29] audit: type=1400 audit(210.848:18290): avc: denied { relabelfrom } for pid=12032 comm="syz.4.2793" name="" dev="pipefs" ino=33528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 208.943924][ T29] audit: type=1326 audit(210.918:18291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24a0bf749 code=0x7ffc0000 [ 208.967871][ T29] audit: type=1326 audit(210.918:18292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24a0bf749 code=0x7ffc0000 [ 208.991314][ T29] audit: type=1326 audit(210.918:18293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fc24a0bf749 code=0x7ffc0000 [ 209.015130][ T29] audit: type=1326 audit(210.918:18294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24a0bf749 code=0x7ffc0000 [ 209.038112][ T29] audit: type=1326 audit(210.928:18295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24a0bf749 code=0x7ffc0000 [ 209.075934][T12040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.117905][T12040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.194527][T12048] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 209.213585][T12045] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2798'. [ 209.329294][T12054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.359738][T12061] loop5: detected capacity change from 0 to 128 [ 209.380169][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2805'. [ 209.403830][T12066] FAULT_INJECTION: forcing a failure. [ 209.403830][T12066] name failslab, interval 1, probability 0, space 0, times 0 [ 209.416624][T12066] CPU: 1 UID: 0 PID: 12066 Comm: syz.3.2806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 209.416761][T12066] Tainted: [W]=WARN [ 209.416772][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.416790][T12066] Call Trace: [ 209.416799][T12066] [ 209.416809][T12066] __dump_stack+0x1d/0x30 [ 209.416843][T12066] dump_stack_lvl+0xe8/0x140 [ 209.416883][T12066] dump_stack+0x15/0x1b [ 209.416910][T12066] should_fail_ex+0x265/0x280 [ 209.416944][T12066] should_failslab+0x8c/0xb0 [ 209.416975][T12066] __kvmalloc_node_noprof+0x149/0x6b0 [ 209.417023][T12066] ? vmemdup_user+0x2b/0xd0 [ 209.417049][T12066] ? should_fail_usercopy+0x1a/0x20 [ 209.417085][T12066] vmemdup_user+0x2b/0xd0 [ 209.417115][T12066] path_setxattrat+0x1b6/0x310 [ 209.417173][T12066] __x64_sys_fsetxattr+0x6b/0x80 [ 209.417206][T12066] x64_sys_call+0x23c4/0x3000 [ 209.417234][T12066] do_syscall_64+0xd8/0x2c0 [ 209.417333][T12066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.417359][T12066] RIP: 0033:0x7f8cb397f749 [ 209.417380][T12066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.417436][T12066] RSP: 002b:00007f8cb23df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 209.417468][T12066] RAX: ffffffffffffffda RBX: 00007f8cb3bd5fa0 RCX: 00007f8cb397f749 [ 209.417484][T12066] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000005 [ 209.417500][T12066] RBP: 00007f8cb23df090 R08: 0000000000000000 R09: 0000000000000000 [ 209.417514][T12066] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 209.417526][T12066] R13: 00007f8cb3bd6038 R14: 00007f8cb3bd5fa0 R15: 00007ffe416bd828 [ 209.417567][T12066] [ 209.602266][T12068] wg2: entered promiscuous mode [ 209.607313][T12068] wg2: entered allmulticast mode [ 209.619104][T12071] syzkaller0: entered promiscuous mode [ 209.624780][T12071] syzkaller0: entered allmulticast mode [ 209.707920][T12081] 9pnet_virtio: no channels available for device syz [ 209.725379][T12085] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 209.747788][T12080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2811'. [ 210.010934][T12106] netlink: 'syz.3.2820': attribute type 7 has an invalid length. [ 210.019172][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 210.033844][T12110] netlink: 'syz.2.2819': attribute type 10 has an invalid length. [ 210.074131][T12113] netlink: 'syz.2.2819': attribute type 3 has an invalid length. [ 210.081975][T12113] netlink: 'syz.2.2819': attribute type 1 has an invalid length. [ 210.089838][T12113] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2819'. [ 210.104951][T12112] syzkaller0: entered promiscuous mode [ 210.110522][T12112] syzkaller0: entered allmulticast mode [ 210.157039][T12110] syz_tun: entered promiscuous mode [ 210.159539][T12116] loop4: detected capacity change from 0 to 128 [ 210.194740][T12110] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 210.204708][T12116] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2823'. [ 210.272370][T12122] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 210.380797][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.434933][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.473082][T12130] netlink: 380 bytes leftover after parsing attributes in process `syz.3.2828'. [ 210.648151][T12150] bond0: entered promiscuous mode [ 210.653316][T12150] bond_slave_0: entered promiscuous mode [ 210.659200][T12150] bond_slave_1: entered promiscuous mode [ 210.670285][T12150] batadv0: entered promiscuous mode [ 210.677800][T12150] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 210.687430][T12150] bond0: left promiscuous mode [ 210.692290][T12150] bond_slave_0: left promiscuous mode [ 210.698236][T12150] bond_slave_1: left promiscuous mode [ 210.712462][T12150] batadv0: left promiscuous mode [ 210.737971][ T3734] hid_parser_main: 26 callbacks suppressed [ 210.737995][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.751815][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.759344][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.767397][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.774842][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.782226][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.789864][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.798167][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.805757][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.813284][ T3734] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 210.821487][ T3734] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v100.02 Device [syz0] on syz1 [ 210.855114][T12160] syzkaller0: entered promiscuous mode [ 210.860733][T12160] syzkaller0: entered allmulticast mode [ 210.923622][T12165] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 210.950682][T12167] netlink: '+}[@': attribute type 7 has an invalid length. [ 210.958751][T12167] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 211.114981][T12174] 9pnet_virtio: no channels available for device syz [ 211.679006][T12191] loop5: detected capacity change from 0 to 512 [ 211.692696][T12193] 9pnet_virtio: no channels available for device syz [ 211.719810][T12191] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.748300][T12191] EXT4-fs (loop5): mount failed [ 211.860456][T12207] syzkaller0: entered promiscuous mode [ 211.866120][T12207] syzkaller0: entered allmulticast mode [ 212.104503][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.123093][ T3734] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v100.02 Device [syz0] on syz1 [ 212.172416][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.221754][T12223] FAULT_INJECTION: forcing a failure. [ 212.221754][T12223] name failslab, interval 1, probability 0, space 0, times 0 [ 212.234547][T12223] CPU: 1 UID: 0 PID: 12223 Comm: syz.4.2856 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.234586][T12223] Tainted: [W]=WARN [ 212.234596][T12223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.234677][T12223] Call Trace: [ 212.234683][T12223] [ 212.234691][T12223] __dump_stack+0x1d/0x30 [ 212.234721][T12223] dump_stack_lvl+0xe8/0x140 [ 212.234800][T12223] dump_stack+0x15/0x1b [ 212.234834][T12223] should_fail_ex+0x265/0x280 [ 212.234865][T12223] should_failslab+0x8c/0xb0 [ 212.234891][T12223] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 212.234918][T12223] ? __alloc_skb+0x324/0x4d0 [ 212.235026][T12223] __alloc_skb+0x324/0x4d0 [ 212.235058][T12223] ? __alloc_skb+0x24d/0x4d0 [ 212.235102][T12223] netlink_alloc_large_skb+0xbf/0xf0 [ 212.235141][T12223] netlink_sendmsg+0x3cf/0x6b0 [ 212.235252][T12223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.235296][T12223] __sock_sendmsg+0x145/0x180 [ 212.235388][T12223] sock_write_iter+0x1a7/0x1f0 [ 212.235441][T12223] do_iter_readv_writev+0x4a1/0x540 [ 212.235547][T12223] vfs_writev+0x2df/0x8b0 [ 212.235594][T12223] do_writev+0xe7/0x210 [ 212.235621][T12223] __x64_sys_writev+0x45/0x50 [ 212.235663][T12223] x64_sys_call+0x1ba5/0x3000 [ 212.235692][T12223] do_syscall_64+0xd8/0x2c0 [ 212.235733][T12223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.235763][T12223] RIP: 0033:0x7f06db37f749 [ 212.235782][T12223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.235888][T12223] RSP: 002b:00007f06d9de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 212.235942][T12223] RAX: ffffffffffffffda RBX: 00007f06db5d5fa0 RCX: 00007f06db37f749 [ 212.235985][T12223] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 212.236027][T12223] RBP: 00007f06d9de7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.236044][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.236061][T12223] R13: 00007f06db5d6038 R14: 00007f06db5d5fa0 R15: 00007ffcc24b01e8 [ 212.236119][T12223] [ 212.464023][ T3404] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v100.02 Device [syz0] on syz1 [ 212.500497][T12234] netlink: '+}[@': attribute type 7 has an invalid length. [ 212.617126][T12240] bond0: entered promiscuous mode [ 212.622339][T12240] bond_slave_0: entered promiscuous mode [ 212.628896][T12240] bond_slave_1: entered promiscuous mode [ 212.645103][T12240] batadv0: entered promiscuous mode [ 212.651234][T12240] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 212.661574][T12240] bond0: left promiscuous mode [ 212.666463][T12240] bond_slave_0: left promiscuous mode [ 212.672003][T12240] bond_slave_1: left promiscuous mode [ 212.678447][T12240] batadv0: left promiscuous mode [ 212.739535][T12243] tmpfs: Bad value for 'mpol' [ 212.748085][T12243] hsr0: entered promiscuous mode [ 212.760116][T12245] 9pnet_virtio: no channels available for device syz [ 212.856454][T12252] syzkaller0: entered promiscuous mode [ 212.861991][T12252] syzkaller0: entered allmulticast mode [ 213.222558][T12264] geneve2: entered promiscuous mode [ 213.382267][T12269] 9p: Bad value for 'wfdno' [ 213.492741][T12271] loop5: detected capacity change from 0 to 512 [ 213.578396][T12281] program syz.2.2876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.588836][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 213.588906][ T29] audit: type=1326 audit(215.558:18396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 213.618797][ T29] audit: type=1326 audit(215.558:18397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 213.641939][ T29] audit: type=1326 audit(215.558:18398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 213.665571][ T29] audit: type=1326 audit(215.558:18399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 213.688714][ T29] audit: type=1326 audit(215.558:18400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 213.712396][ T29] audit: type=1326 audit(215.558:18401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 213.736062][ T29] audit: type=1326 audit(215.558:18402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4afc6bdf90 code=0x7ffc0000 [ 213.759061][ T29] audit: type=1400 audit(215.558:18403): avc: denied { write } for pid=12279 comm="syz.2.2876" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.783001][ T29] audit: type=1326 audit(215.558:18404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 213.790826][T12271] EXT4-fs (loop5): too many log groups per flexible block group [ 213.806205][ T29] audit: type=1326 audit(215.558:18405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12279 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc6bf749 code=0x7ffc0000 [ 213.845507][T12271] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 213.854058][T12287] syzkaller0: entered promiscuous mode [ 213.859569][T12287] syzkaller0: entered allmulticast mode [ 213.879908][T12271] EXT4-fs (loop5): mount failed [ 214.015158][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.093819][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.134745][T12310] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 214.157265][T12271] loop5: detected capacity change from 0 to 512 [ 214.248913][T12303] syz.3.2884 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 214.259971][T12303] CPU: 1 UID: 0 PID: 12303 Comm: syz.3.2884 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.260011][T12303] Tainted: [W]=WARN [ 214.260018][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.260035][T12303] Call Trace: [ 214.260045][T12303] [ 214.260112][T12303] __dump_stack+0x1d/0x30 [ 214.260138][T12303] dump_stack_lvl+0xe8/0x140 [ 214.260161][T12303] dump_stack+0x15/0x1b [ 214.260187][T12303] dump_header+0x81/0x240 [ 214.260245][T12303] oom_kill_process+0x295/0x350 [ 214.260269][T12303] out_of_memory+0x97b/0xb80 [ 214.260295][T12303] try_charge_memcg+0x610/0xa10 [ 214.260334][T12303] charge_memcg+0x51/0xc0 [ 214.260377][T12303] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 214.260475][T12303] __read_swap_cache_async+0x17b/0x2d0 [ 214.260519][T12303] swap_cluster_readahead+0x262/0x3c0 [ 214.260611][T12303] swapin_readahead+0xde/0x820 [ 214.260645][T12303] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 214.260703][T12303] ? __rcu_read_unlock+0x34/0x70 [ 214.260729][T12303] ? __rcu_read_unlock+0x4f/0x70 [ 214.260834][T12303] ? swap_cache_get_folio+0x277/0x280 [ 214.260868][T12303] do_swap_page+0x2b4/0x21e0 [ 214.260963][T12303] ? __pfx_default_wake_function+0x10/0x10 [ 214.261011][T12303] handle_mm_fault+0x9d8/0x2c60 [ 214.261073][T12303] do_user_addr_fault+0x630/0x1080 [ 214.261195][T12303] exc_page_fault+0x62/0xa0 [ 214.261299][T12303] asm_exc_page_fault+0x26/0x30 [ 214.261319][T12303] RIP: 0033:0x7f8cb38559ec [ 214.261336][T12303] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 214.261359][T12303] RSP: 002b:00007ffe416bd990 EFLAGS: 00010287 [ 214.261381][T12303] RAX: 0000000000000000 RBX: 00007f8cb3bd6090 RCX: 0000000000000000 [ 214.261399][T12303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557cd9b808 [ 214.261416][T12303] RBP: 00007f8cb3bd7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 214.261488][T12303] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003474b [ 214.261503][T12303] R13: 00007f8cb3bd6090 R14: ffffffffffffffff R15: 00007ffe416bdaa0 [ 214.261529][T12303] [ 214.261538][T12303] memory: usage 307200kB, limit 307200kB, failcnt 1148 [ 214.315389][T12271] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 214.316118][T12303] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 214.316140][T12303] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 214.316201][T12303] Memory cgroup stats for /syz3: [ 214.445626][T12319] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:1 [ 214.519727][T12303] cache 0 [ 214.604217][T12303] rss 24576 [ 214.607344][T12303] shmem 0 [ 214.610336][T12303] mapped_file 0 [ 214.613943][T12303] dirty 0 [ 214.616887][T12303] writeback 4096 [ 214.620457][T12303] workingset_refault_anon 161 [ 214.625186][T12303] workingset_refault_file 1562 [ 214.629970][T12303] swap 348160 [ 214.633624][T12303] swapcached 49152 [ 214.637364][T12303] pgpgin 268325 [ 214.640926][T12303] pgpgout 268303 [ 214.644547][T12303] pgfault 275902 [ 214.648105][T12303] pgmajfault 104 [ 214.651677][T12303] inactive_anon 32768 [ 214.655196][T12322] syzkaller1: entered promiscuous mode [ 214.655720][T12303] active_anon 24576 [ 214.661164][T12322] syzkaller1: entered allmulticast mode [ 214.670598][T12303] inactive_file 32768 [ 214.674674][T12303] active_file 0 [ 214.678149][T12303] unevictable 0 [ 214.681614][T12303] hierarchical_memory_limit 314572800 [ 214.687034][T12303] hierarchical_memsw_limit 9223372036854771712 [ 214.693277][T12303] total_cache 0 [ 214.696759][T12303] total_rss 24576 [ 214.700406][T12303] total_shmem 0 [ 214.703975][T12303] total_mapped_file 0 [ 214.707968][T12303] total_dirty 0 [ 214.711492][T12303] total_writeback 4096 [ 214.715629][T12303] total_workingset_refault_anon 161 [ 214.716013][T12271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 214.720859][T12303] total_workingset_refault_file 1562 [ 214.720953][T12303] total_swap 348160 [ 214.720964][T12303] total_swapcached 49152 [ 214.720974][T12303] total_pgpgin 268325 [ 214.720984][T12303] total_pgpgout 268303 [ 214.720994][T12303] total_pgfault 275902 [ 214.721001][T12303] total_pgmajfault 104 [ 214.721012][T12303] total_inactive_anon 32768 [ 214.721037][T12303] total_active_anon 24576 [ 214.721049][T12303] total_inactive_file 32768 [ 214.721059][T12303] total_active_file 0 [ 214.721069][T12303] total_unevictable 0 [ 214.721081][T12303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2884,pid=12303,uid=0 [ 214.721188][T12303] Memory cgroup out of memory: Killed process 12303 (syz.3.2884) total-vm:96016kB, anon-rss:1140kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 214.840094][T12324] 9pnet_virtio: no channels available for device syz [ 214.863734][T12271] System zones: 1-12 [ 214.906413][T12271] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2873: corrupted in-inode xattr: e_value size too large [ 214.941847][T12271] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2873: couldn't read orphan inode 15 (err -117) [ 215.059033][T12335] syzkaller0: entered promiscuous mode [ 215.065284][T12335] syzkaller0: entered allmulticast mode [ 215.094500][T12271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.228612][ T6217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.305449][T12350] __nla_validate_parse: 4 callbacks suppressed [ 215.305467][T12350] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2899'. [ 215.376873][T12356] netlink: '+}[@': attribute type 7 has an invalid length. [ 215.384918][T12356] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 215.466249][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'. [ 215.547557][T12368] sctp: [Deprecated]: syz.0.2902 (pid 12368) Use of int in maxseg socket option. [ 215.547557][T12368] Use struct sctp_assoc_value instead [ 216.185813][T12382] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:1 [ 216.273688][ T3322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 216.284715][ T3322] CPU: 1 UID: 0 PID: 3322 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.284792][ T3322] Tainted: [W]=WARN [ 216.284800][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.284822][ T3322] Call Trace: [ 216.284830][ T3322] [ 216.284897][ T3322] __dump_stack+0x1d/0x30 [ 216.284928][ T3322] dump_stack_lvl+0xe8/0x140 [ 216.284957][ T3322] dump_stack+0x15/0x1b [ 216.285033][ T3322] dump_header+0x81/0x240 [ 216.285061][ T3322] oom_kill_process+0x295/0x350 [ 216.285092][ T3322] out_of_memory+0x97b/0xb80 [ 216.285120][ T3322] try_charge_memcg+0x610/0xa10 [ 216.285155][ T3322] charge_memcg+0x51/0xc0 [ 216.285221][ T3322] __mem_cgroup_charge+0x28/0xb0 [ 216.285262][ T3322] filemap_add_folio+0x111/0x360 [ 216.285287][ T3322] __filemap_get_folio_mpol+0x326/0x650 [ 216.285355][ T3322] filemap_fault+0x44d/0xb70 [ 216.285391][ T3322] __do_fault+0xbc/0x200 [ 216.285468][ T3322] handle_mm_fault+0xfab/0x2c60 [ 216.285528][ T3322] do_user_addr_fault+0x630/0x1080 [ 216.285573][ T3322] exc_page_fault+0x62/0xa0 [ 216.285681][ T3322] asm_exc_page_fault+0x26/0x30 [ 216.285707][ T3322] RIP: 0033:0x7f06db255fd4 [ 216.285807][ T3322] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 216.285837][ T3322] RSP: 002b:00007ffcc24b0570 EFLAGS: 00010206 [ 216.285858][ T3322] RAX: 0000001b33f24000 RBX: 00000000000005db RCX: 0000000000034bc0 [ 216.285872][ T3322] RDX: 00000000033b4781 RSI: 00007ffcc24b0600 RDI: 0000000000000001 [ 216.285889][ T3322] RBP: 00007ffcc24b05ac R08: 000000000c53d1f6 R09: 7fffffffffffffff [ 216.285975][ T3322] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 216.285992][ T3322] R13: 00000000000927c0 R14: 0000000000034a74 R15: 00007ffcc24b0600 [ 216.286019][ T3322] [ 216.286027][ T3322] memory: usage 307200kB, limit 307200kB, failcnt 735 [ 216.478657][ T3322] memory+swap: usage 379268kB, limit 9007199254740988kB, failcnt 0 [ 216.478675][ T3322] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 216.478687][ T3322] Memory cgroup stats for /syz4: [ 216.478984][ T3322] cache 0 [ 216.502099][ T3322] rss 0 [ 216.504907][ T3322] shmem 0 [ 216.507850][ T3322] mapped_file 0 [ 216.511312][ T3322] dirty 0 [ 216.514371][ T3322] writeback 28672 [ 216.518009][ T3322] workingset_refault_anon 101 [ 216.522698][ T3322] workingset_refault_file 11728 [ 216.527660][ T3322] swap 73797632 [ 216.531146][ T3322] swapcached 28672 [ 216.534948][ T3322] pgpgin 264986 [ 216.538430][ T3322] pgpgout 264968 [ 216.542038][ T3322] pgfault 241249 [ 216.545751][ T3322] pgmajfault 75 [ 216.549229][ T3322] inactive_anon 28672 [ 216.553266][ T3322] active_anon 0 [ 216.556807][ T3322] inactive_file 45056 [ 216.560826][ T3322] active_file 0 [ 216.564351][ T3322] unevictable 0 [ 216.567825][ T3322] hierarchical_memory_limit 314572800 [ 216.573254][ T3322] hierarchical_memsw_limit 9223372036854771712 [ 216.579497][ T3322] total_cache 0 [ 216.583048][ T3322] total_rss 0 [ 216.586433][ T3322] total_shmem 0 [ 216.589914][ T3322] total_mapped_file 0 [ 216.593941][ T3322] total_dirty 0 [ 216.597460][ T3322] total_writeback 28672 [ 216.601616][ T3322] total_workingset_refault_anon 101 [ 216.606860][ T3322] total_workingset_refault_file 11728 [ 216.612281][ T3322] total_swap 73797632 [ 216.616349][ T3322] total_swapcached 28672 [ 216.620609][ T3322] total_pgpgin 264986 [ 216.624641][ T3322] total_pgpgout 264968 [ 216.628720][ T3322] total_pgfault 241249 [ 216.632807][ T3322] total_pgmajfault 75 [ 216.636856][ T3322] total_inactive_anon 28672 [ 216.641374][ T3322] total_active_anon 0 [ 216.645421][ T3322] total_inactive_file 45056 [ 216.649973][ T3322] total_active_file 0 [ 216.654015][ T3322] total_unevictable 0 [ 216.658004][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2906,pid=12370,uid=0 [ 216.672835][ T3322] Memory cgroup out of memory: Killed process 12370 (syz.4.2906) total-vm:93968kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 216.808998][T12394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2914'. [ 216.833032][T12399] FAULT_INJECTION: forcing a failure. [ 216.833032][T12399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.846974][T12399] CPU: 0 UID: 0 PID: 12399 Comm: syz.2.2917 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.847017][T12399] Tainted: [W]=WARN [ 216.847024][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.847077][T12399] Call Trace: [ 216.847085][T12399] [ 216.847094][T12399] __dump_stack+0x1d/0x30 [ 216.847121][T12399] dump_stack_lvl+0xe8/0x140 [ 216.847148][T12399] dump_stack+0x15/0x1b [ 216.847175][T12399] should_fail_ex+0x265/0x280 [ 216.847280][T12399] should_fail+0xb/0x20 [ 216.847305][T12399] should_fail_usercopy+0x1a/0x20 [ 216.847340][T12399] _copy_from_iter+0xcf/0xe70 [ 216.847373][T12399] ? __alloc_skb+0x3bb/0x4d0 [ 216.847397][T12399] ? __alloc_skb+0x24d/0x4d0 [ 216.847455][T12399] netlink_sendmsg+0x471/0x6b0 [ 216.847492][T12399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.847557][T12399] __sock_sendmsg+0x145/0x180 [ 216.847577][T12399] ____sys_sendmsg+0x31e/0x4a0 [ 216.847613][T12399] ___sys_sendmsg+0x17b/0x1d0 [ 216.847706][T12399] __x64_sys_sendmsg+0xd4/0x160 [ 216.847827][T12399] x64_sys_call+0x17ba/0x3000 [ 216.847859][T12399] do_syscall_64+0xd8/0x2c0 [ 216.847939][T12399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.847969][T12399] RIP: 0033:0x7f4afc6bf749 [ 216.847989][T12399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.848049][T12399] RSP: 002b:00007f4afb11f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.848075][T12399] RAX: ffffffffffffffda RBX: 00007f4afc915fa0 RCX: 00007f4afc6bf749 [ 216.848092][T12399] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000005 [ 216.848106][T12399] RBP: 00007f4afb11f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.848118][T12399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.848130][T12399] R13: 00007f4afc916038 R14: 00007f4afc915fa0 R15: 00007ffd41af3db8 [ 216.848149][T12399] [ 217.194175][T12404] random: crng reseeded on system resumption [ 217.205914][T12409] netlink: '+}[@': attribute type 7 has an invalid length. [ 217.213430][T12409] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 217.351295][T12414] loop5: detected capacity change from 0 to 1024 [ 217.360427][T12414] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2916: Failed to acquire dquot type 0 [ 217.372690][T12414] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 217.387856][T12414] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2916: corrupted inode contents [ 217.429913][T12414] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.2916: mark_inode_dirty error [ 217.430810][T12417] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:1 [ 217.448844][T12414] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2916: corrupted inode contents [ 217.472392][T12414] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2916: mark_inode_dirty error [ 217.503122][T12414] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2916: corrupted inode contents [ 217.537401][T12414] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 217.585400][T12414] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.2916: corrupted inode contents [ 217.767411][T12414] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.2916: mark_inode_dirty error [ 217.805172][T12414] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 217.872424][T12414] EXT4-fs (loop5): 1 truncate cleaned up [ 217.923947][T12414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.057451][T12426] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 218.742365][T12441] loop4: detected capacity change from 0 to 1024 [ 218.840027][T12441] __quota_error: 351 callbacks suppressed [ 218.840044][T12441] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 218.855243][T12441] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 218.864674][T12441] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2931: Failed to acquire dquot type 0 [ 218.876650][T12441] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 218.956370][T12441] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2931: corrupted inode contents [ 219.035545][T12441] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #13: comm syz.4.2931: mark_inode_dirty error [ 219.073835][T12441] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2931: corrupted inode contents [ 219.123372][T12441] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2931: mark_inode_dirty error [ 219.144704][T12446] syzkaller1: entered promiscuous mode [ 219.150210][T12446] syzkaller1: entered allmulticast mode [ 219.153143][T12441] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2931: corrupted inode contents [ 219.186970][ T29] audit: type=1326 audit(221.168:18755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb397f749 code=0x7ffc0000 [ 219.210103][ T29] audit: type=1326 audit(221.168:18756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb397f749 code=0x7ffc0000 [ 219.233180][ T29] audit: type=1326 audit(221.168:18757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb397f749 code=0x7ffc0000 [ 219.244185][T12441] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2931: mark_inode_dirty error [ 219.256261][ T29] audit: type=1326 audit(221.168:18758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb397f749 code=0x7ffc0000 [ 219.290468][ T29] audit: type=1326 audit(221.168:18759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb397f749 code=0x7ffc0000 [ 219.313556][ T29] audit: type=1326 audit(221.168:18760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb397f749 code=0x7ffc0000 [ 219.336582][ T29] audit: type=1326 audit(221.168:18761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb397f749 code=0x7ffc0000 [ 219.366931][T12441] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2931: corrupted inode contents [ 219.393211][T12441] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 219.434407][T12441] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.2931: corrupted inode contents [ 219.484109][T12441] EXT4-fs error (device loop4): ext4_truncate:4635: inode #13: comm syz.4.2931: mark_inode_dirty error [ 219.503630][T12441] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 219.542228][T12441] EXT4-fs (loop4): 1 truncate cleaned up [ 219.552334][T12441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.562937][ T29] audit: type=1326 audit(221.338:18762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.3.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb397f749 code=0x7ffc0000 [ 219.636275][T12449] 9pnet_virtio: no channels available for device syz [ 219.695863][T12440] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2931: Failed to acquire dquot type 0 [ 219.731808][ T6217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.748414][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.778675][T12452] netlink: '+}[@': attribute type 7 has an invalid length. [ 219.786563][T12452] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 220.393656][T12468] Process accounting resumed [ 220.740360][T12481] loop4: detected capacity change from 0 to 512 [ 220.788560][T12481] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 220.916336][T12494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2947'. [ 220.964848][T12481] EXT4-fs (loop4): mount failed [ 221.051486][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2949'. [ 221.166306][T12509] 9pnet_virtio: no channels available for device syz [ 221.264559][T12514] netlink: 'syz.5.2953': attribute type 7 has an invalid length. [ 221.272392][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2953'. [ 221.674846][T12530] syzkaller0: entered promiscuous mode [ 221.680419][T12530] syzkaller0: entered allmulticast mode [ 221.796784][T12535] syzkaller0: entered promiscuous mode [ 221.802341][T12535] syzkaller0: entered allmulticast mode [ 221.915912][T12533] Process accounting resumed [ 222.034918][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 222.104970][T12550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.163426][T12550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.319125][T12553] Process accounting resumed [ 222.464898][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2967'. [ 222.572734][T12568] loop5: detected capacity change from 0 to 8192 [ 222.619421][T12575] 9pnet_virtio: no channels available for device syz [ 222.648419][ T6217] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 222.656347][ T6217] FAT-fs (loop5): Filesystem has been set read-only [ 222.820210][T12582] bond0: entered promiscuous mode [ 222.825812][T12582] bond_slave_0: entered promiscuous mode [ 222.832590][T12582] bond_slave_1: entered promiscuous mode [ 222.850005][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2977'. [ 222.873710][T12582] batadv0: entered promiscuous mode [ 222.891744][T12582] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 222.930133][T12582] bond0: left promiscuous mode [ 222.935050][T12582] bond_slave_0: left promiscuous mode [ 222.940729][T12582] bond_slave_1: left promiscuous mode [ 222.950319][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2977'. [ 222.980365][T12582] batadv0: left promiscuous mode [ 222.998372][T12585] netlink: 'syz.3.2978': attribute type 7 has an invalid length. [ 223.006955][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 223.828997][T12614] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 223.851311][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 223.863372][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2985'. [ 223.957007][T12620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.014666][T12620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.055311][T12607] syz.4.2984 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 224.069546][T12607] CPU: 0 UID: 0 PID: 12607 Comm: syz.4.2984 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.069592][T12607] Tainted: [W]=WARN [ 224.069599][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.069613][T12607] Call Trace: [ 224.069620][T12607] [ 224.069629][T12607] __dump_stack+0x1d/0x30 [ 224.069658][T12607] dump_stack_lvl+0xe8/0x140 [ 224.069687][T12607] dump_stack+0x15/0x1b [ 224.069727][T12607] dump_header+0x81/0x240 [ 224.069757][T12607] oom_kill_process+0x295/0x350 [ 224.069792][T12607] out_of_memory+0x97b/0xb80 [ 224.069849][T12607] try_charge_memcg+0x610/0xa10 [ 224.069888][T12607] obj_cgroup_charge_pages+0xa6/0x150 [ 224.069961][T12607] __memcg_kmem_charge_page+0x9f/0x170 [ 224.070005][T12607] __alloc_frozen_pages_noprof+0x18f/0x360 [ 224.070052][T12607] alloc_pages_mpol+0xb3/0x260 [ 224.070140][T12607] alloc_pages_noprof+0x90/0x130 [ 224.070183][T12607] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 224.070249][T12607] __kvmalloc_node_noprof+0x492/0x6b0 [ 224.070292][T12607] ? ip_set_alloc+0x24/0x30 [ 224.070326][T12607] ? ip_set_alloc+0x24/0x30 [ 224.070424][T12607] ip_set_alloc+0x24/0x30 [ 224.070470][T12607] hash_netiface_create+0x282/0x740 [ 224.070585][T12607] ? __pfx_hash_netiface_create+0x10/0x10 [ 224.070632][T12607] ip_set_create+0x3cc/0x970 [ 224.070699][T12607] ? __nla_parse+0x40/0x60 [ 224.070730][T12607] nfnetlink_rcv_msg+0x4c6/0x590 [ 224.070800][T12607] netlink_rcv_skb+0x123/0x220 [ 224.070867][T12607] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 224.070904][T12607] nfnetlink_rcv+0x167/0x16c0 [ 224.070946][T12607] ? free_frozen_page_commit+0x79/0x3b0 [ 224.070981][T12607] ? _raw_spin_unlock+0x26/0x50 [ 224.071013][T12607] ? __free_frozen_pages+0x288/0x510 [ 224.071149][T12607] ? bpf_check+0x9d67/0xc860 [ 224.071196][T12607] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 224.071242][T12607] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 224.071345][T12607] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 224.071377][T12607] ? should_fail_ex+0x30/0x280 [ 224.071402][T12607] ? selinux_nlmsg_lookup+0x99/0x890 [ 224.071434][T12607] ? __rcu_read_unlock+0x34/0x70 [ 224.071530][T12607] ? __netlink_lookup+0x266/0x2a0 [ 224.071582][T12607] netlink_unicast+0x5c0/0x690 [ 224.071623][T12607] netlink_sendmsg+0x58b/0x6b0 [ 224.071731][T12607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.071770][T12607] __sock_sendmsg+0x145/0x180 [ 224.071800][T12607] ____sys_sendmsg+0x31e/0x4a0 [ 224.071924][T12607] ___sys_sendmsg+0x17b/0x1d0 [ 224.071989][T12607] __x64_sys_sendmsg+0xd4/0x160 [ 224.072037][T12607] x64_sys_call+0x17ba/0x3000 [ 224.072073][T12607] do_syscall_64+0xd8/0x2c0 [ 224.072126][T12607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.072151][T12607] RIP: 0033:0x7f06db37f749 [ 224.072172][T12607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.072196][T12607] RSP: 002b:00007f06d9de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.072297][T12607] RAX: ffffffffffffffda RBX: 00007f06db5d5fa0 RCX: 00007f06db37f749 [ 224.072315][T12607] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 224.072378][T12607] RBP: 00007f06db403f91 R08: 0000000000000000 R09: 0000000000000000 [ 224.072391][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.072404][T12607] R13: 00007f06db5d6038 R14: 00007f06db5d5fa0 R15: 00007ffcc24b01e8 [ 224.072427][T12607] [ 224.072436][T12607] memory: usage 307200kB, limit 307200kB, failcnt 953 [ 224.426668][T12607] memory+swap: usage 379272kB, limit 9007199254740988kB, failcnt 0 [ 224.434615][T12607] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 224.441936][T12607] Memory cgroup stats for /syz4: [ 224.485363][T12577] bond0: (slave syz_tun): Releasing backup interface [ 224.497074][T12607] cache 524288 [ 224.500579][T12607] rss 0 [ 224.503471][T12607] shmem 0 [ 224.506427][T12607] mapped_file 0 [ 224.509908][T12607] dirty 0 [ 224.513573][T12607] writeback 0 [ 224.516902][T12607] workingset_refault_anon 167 [ 224.521601][T12607] workingset_refault_file 12241 [ 224.526549][T12607] swap 73809920 [ 224.530021][T12607] swapcached 16384 [ 224.533947][T12607] pgpgin 269423 [ 224.537475][T12607] pgpgout 269280 [ 224.541043][T12607] pgfault 246363 [ 224.545351][T12607] pgmajfault 116 [ 224.548926][T12607] inactive_anon 16384 [ 224.553007][T12607] active_anon 0 [ 224.556483][T12607] inactive_file 36864 [ 224.560509][T12607] active_file 499712 [ 224.564569][T12607] unevictable 0 [ 224.568044][T12607] hierarchical_memory_limit 314572800 [ 224.574209][T12607] hierarchical_memsw_limit 9223372036854771712 [ 224.580386][T12607] total_cache 524288 [ 224.584316][T12607] total_rss 0 [ 224.587614][T12607] total_shmem 0 [ 224.591102][T12607] total_mapped_file 0 [ 224.595149][T12607] total_dirty 0 [ 224.598622][T12607] total_writeback 0 [ 224.602425][T12607] total_workingset_refault_anon 167 [ 224.608282][T12607] total_workingset_refault_file 12241 [ 224.613670][T12607] total_swap 73809920 [ 224.617651][T12607] total_swapcached 16384 [ 224.621903][T12607] total_pgpgin 269423 [ 224.625906][T12607] total_pgpgout 269280 [ 224.629969][T12607] total_pgfault 246363 [ 224.634656][T12607] total_pgmajfault 116 [ 224.638832][T12607] total_inactive_anon 16384 [ 224.643383][T12607] total_active_anon 0 [ 224.647375][T12607] total_inactive_file 36864 [ 224.651975][T12607] total_active_file 499712 [ 224.656627][T12607] total_unevictable 0 [ 224.660673][T12607] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2984,pid=12606,uid=0 [ 224.676057][T12607] Memory cgroup out of memory: Killed process 12607 (syz.4.2984) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 224.793980][T10559] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 224.804664][T10559] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.847859][T12623] lo speed is unknown, defaulting to 1000 [ 224.872584][T10559] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 224.882761][T10559] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.893899][ T9602] ================================================================== [ 224.902025][ T9602] BUG: KCSAN: data-race in wb_wait_for_completion / writeback_sb_inodes [ 224.905244][T12643] Process accounting resumed [ 224.910664][ T9602] [ 224.910674][ T9602] write to 0xffffc90001edbde8 of 8 bytes by task 12648 on cpu 1: [ 224.925309][ T9602] wb_wait_for_completion+0x1b9/0x360 [ 224.930719][ T9602] sync_inodes_sb+0x120/0x460 [ 224.935442][ T9602] sync_inodes_one_sb+0x3d/0x50 [ 224.940324][ T9602] __iterate_supers+0x110/0x220 [ 224.945343][ T9602] iterate_supers+0x1f/0x30 [ 224.949897][ T9602] ksys_sync+0x5c/0xe0 [ 224.953999][ T9602] __ia32_sys_sync+0xe/0x20 [ 224.958543][ T9602] x64_sys_call+0x29b2/0x3000 [ 224.963344][ T9602] do_syscall_64+0xd8/0x2c0 [ 224.967893][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.973816][ T9602] [ 224.976168][ T9602] read to 0xffffc90001edbde8 of 8 bytes by task 9602 on cpu 0: [ 224.983733][ T9602] writeback_sb_inodes+0x4ce/0xb20 [ 224.988884][ T9602] wb_writeback+0x252/0x5c0 [ 224.993423][ T9602] wb_workfn+0x194/0x910 [ 224.997743][ T9602] process_scheduled_works+0x4ce/0x9d0 [ 225.003232][ T9602] worker_thread+0x582/0x770 [ 225.007862][ T9602] kthread+0x489/0x510 [ 225.011976][ T9602] ret_from_fork+0x149/0x290 [ 225.013028][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 225.013046][ T29] audit: type=1326 audit(226.908:19152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.3.2995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cb397f749 code=0x0 [ 225.016595][ T9602] ret_from_fork_asm+0x1a/0x30 [ 225.016632][ T9602] [ 225.016637][ T9602] value changed: 0x00000000ffffe26f -> 0x00000000ffffe271 [ 225.059568][ T9602] [ 225.061904][ T9602] Reported by Kernel Concurrency Sanitizer on: [ 225.068071][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.079644][ T9602] Tainted: [W]=WARN [ 225.083456][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 225.093718][ T9602] Workqueue: writeback wb_workfn (flush-8:0) [ 225.099740][ T9602] ================================================================== [ 225.111000][T12649] bond0: entered promiscuous mode [ 225.116137][T12649] bond_slave_0: entered promiscuous mode [ 225.122093][T12649] bond_slave_1: entered promiscuous mode [ 225.131580][ T29] audit: type=1400 audit(227.108:19153): avc: denied { write } for pid=3306 comm="syz-executor" path="pipe:[1550]" dev="pipefs" ino=1550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 225.164625][T12649] batadv0: entered promiscuous mode [ 225.170892][T12649] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 225.180530][ T29] audit: type=1400 audit(227.108:19154): avc: denied { recv } for pid=3734 comm="kworker/0:8" saddr=10.128.0.163 src=37854 daddr=10.128.10.6 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 225.250147][T12649] bond0: left promiscuous mode [ 225.254995][T12649] bond_slave_0: left promiscuous mode [ 225.260522][T12649] bond_slave_1: left promiscuous mode [ 225.312981][T12649] batadv0: left promiscuous mode [ 225.337638][T12623] lo speed is unknown, defaulting to 1000 [ 225.345261][T10559] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 225.355161][T10559] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.436143][T10559] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 225.446058][T10559] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.580565][T10559] bridge_slave_1: left allmulticast mode [ 225.586394][T10559] bridge_slave_1: left promiscuous mode [ 225.592144][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.624197][T10559] bridge_slave_0: left allmulticast mode [ 225.629885][T10559] bridge_slave_0: left promiscuous mode [ 225.636373][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.005730][T10559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.015443][T10559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.026703][T10559] bond0 (unregistering): Released all slaves [ 226.077788][T10559] tipc: Disabling bearer [ 226.083187][T10559] tipc: Left network mode [ 226.114549][T10559] hsr_slave_0: left promiscuous mode [ 226.120505][T10559] hsr_slave_1: left promiscuous mode [ 226.129032][T10559] veth1_macvtap: left promiscuous mode [ 226.134552][T10559] veth0_macvtap: left promiscuous mode [ 226.140100][T10559] veth1_vlan: left promiscuous mode [ 226.146303][T10559] veth0_vlan: left promiscuous mode [ 226.209900][T10559] team0 (unregistering): Port device team_slave_0 removed [ 226.539860][T10559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.586271][T10559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.645519][T10559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.705630][T10559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.937845][T10559] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.984667][T10559] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.024780][T10559] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.074567][T10559] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.150081][T10559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.175760][T10559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.235695][T10559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.296500][T10559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.359310][T10559] dummy0: left allmulticast mode [ 227.364432][T10559] bridge0: port 3(dummy0) entered disabled state [ 227.371593][T10559] bridge_slave_1: left allmulticast mode [ 227.377420][T10559] bridge_slave_1: left promiscuous mode [ 227.383169][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.391281][T10559] bridge_slave_0: left allmulticast mode [ 227.396992][T10559] bridge_slave_0: left promiscuous mode [ 227.402716][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.414884][T10559] bridge_slave_1: left allmulticast mode [ 227.420572][T10559] bridge_slave_1: left promiscuous mode [ 227.426344][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.434203][T10559] bridge_slave_0: left allmulticast mode [ 227.439906][T10559] bridge_slave_0: left promiscuous mode [ 227.445633][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.457762][T10559] bridge_slave_1: left allmulticast mode [ 227.463463][T10559] bridge_slave_1: left promiscuous mode [ 227.469149][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.477111][T10559] bridge_slave_0: left allmulticast mode [ 227.482779][T10559] bridge_slave_0: left promiscuous mode [ 227.488456][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.499923][T10559] bridge_slave_1: left allmulticast mode [ 227.505634][T10559] bridge_slave_1: left promiscuous mode [ 227.511299][T10559] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.519227][T10559] bridge_slave_0: left allmulticast mode [ 227.524969][T10559] bridge_slave_0: left promiscuous mode [ 227.530654][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.074886][T10559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.085185][T10559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.094670][T10559] bond0 (unregistering): Released all slaves [ 228.565081][T10559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.574455][T10559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.583546][T10559] bond0 (unregistering): Released all slaves [ 228.592316][T10559] bond1 (unregistering): Released all slaves [ 228.600784][T10559] bond2 (unregistering): Released all slaves [ 228.610427][T10559] bond3 (unregistering): (slave veth3): Releasing active interface [ 228.618958][T10559] bond3 (unregistering): Released all slaves [ 228.995582][T10559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.005952][T10559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.016192][T10559] bond0 (unregistering): Released all slaves [ 229.115821][T10559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.126170][T10559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.136364][T10559] bond0 (unregistering): Released all slaves [ 229.254409][T10559] hsr_slave_0: left promiscuous mode [ 229.260120][T10559] hsr_slave_1: left promiscuous mode [ 229.268590][T10559] hsr_slave_0: left promiscuous mode [ 229.274815][T10559] hsr_slave_1: left promiscuous mode [ 229.281587][T10559] hsr_slave_0: left promiscuous mode [ 229.287239][T10559] hsr_slave_1: left promiscuous mode [ 229.292803][T10559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.300396][T10559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.307975][T10559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.315525][T10559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.324995][T10559] hsr_slave_0: left promiscuous mode [ 229.330714][T10559] hsr_slave_1: left promiscuous mode [ 229.336537][T10559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.343986][T10559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.351535][T10559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.358942][T10559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.378262][T10559] veth1_macvtap: left promiscuous mode [ 229.383797][T10559] veth0_macvtap: left promiscuous mode [ 229.389448][T10559] veth1_vlan: left promiscuous mode [ 229.394695][T10559] veth0_vlan: left promiscuous mode [ 229.400533][T10559] veth1_vlan: left promiscuous mode [ 229.405826][T10559] veth0_vlan: left promiscuous mode [ 229.411417][T10559] veth1_macvtap: left promiscuous mode [ 229.417314][T10559] veth0_macvtap: left promiscuous mode [ 229.422833][T10559] veth1_vlan: left promiscuous mode [ 229.428209][T10559] veth0_vlan: left promiscuous mode [ 229.611292][T10559] team0 (unregistering): Port device team_slave_1 removed [ 229.620848][T10559] team0 (unregistering): Port device team_slave_0 removed [ 229.675848][T10559] team0 (unregistering): Port device team_slave_1 removed [ 229.685623][T10559] team0 (unregistering): Port device C removed [ 229.742746][T10559] team0 (unregistering): Port device team_slave_1 removed [ 229.752449][T10559] team0 (unregistering): Port device team_slave_0 removed [ 229.786795][ T3391] lo speed is unknown, defaulting to 1000 [ 229.792554][ T3391] infiniband syz0: ib_query_port failed (-19)