last executing test programs: 3.876394327s ago: executing program 3 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (fail_nth: 1) 3.640801366s ago: executing program 3 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095", @ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r4], &(0x7f00000001c0)='GPL\x00', 0x1, 0x4b, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r6, &(0x7f0000001440)=""/126, 0xb, 0x35) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000004c0)=0x1a865, 0x4) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x9) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010810180090001006d657461000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8050) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00'}, 0x10) 3.59055863s ago: executing program 3 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r0}, 0x18) r1 = inotify_init() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000240), 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) listen(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r7 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r7) 3.447775072s ago: executing program 3 (id=327): r0 = syz_usb_connect(0x0, 0x4bc, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r1, 0x89f2, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="00069e0000009efc7e467a669d072e74668ec5c8ecee0875aa18055abf56961941b2a4ff16b56e8d8c746bc2ab2953847e831468776e464d93bd2eaf493bb1771b810c961badbbb7161586f1da080013ee55078e5f04b0b50862d6f8e6b60d489c4c39a22be57d382e229976c4ee0b03c73ffa493f79bd9e25068ac04af51cd6374b0811e2fc8000af3982a7ce3df52d31dc0c2a366e0cfcd9ad238d2651e72a0893d2f66f"], &(0x7f00000001c0)=ANY=[@ANYBLOB="00a10400000500000034"]}, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="200548000000a3ed3f5fb370ae9b3889ffffff7fd07ca622c192030322e77a35dc9f1e746a6d11daf85770077eb3860a8b3725b56e0bc4cb13f6c1dc501b68a5d546a8457ce06f863d58da9fd614"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0xc0, 0x5, 0x3, "d914b1"}, &(0x7f0000000400)=ANY=[@ANYBLOB="400506000500881db73dd330"]}) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x200000) read$hiddev(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x8000, 0x0) getdents(r4, 0xfffffffffffffffd, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={'\x00', 0x84, 0x3, 0x0, 0xe, 0xa2, 0x0}) getpgid(r5) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r6, @ANYRESOCT=r4], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet(0x2, 0x801, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) r11 = epoll_create1(0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r12, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x1a) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f00000002c0)={0x60000002}) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz73JAkEQBuDZ7xtlwb8rwURsxtQS7OPAXgwswMDUfszEUOE8FMxFhOdhg315h4EJvmzylq+zTb1F1FOfc3l5fEbdi6jP0Wznq//t7i+jZGSMo+2LaROL18ZhlGYQGYeuPx9rKX2z3n/uLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HfcAAAD//+Z7C4o=") openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 2.119100249s ago: executing program 1 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) io_submit(r1, 0x0, 0x0) 1.951963613s ago: executing program 1 (id=362): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x400, 0x9}, 0x10) write(r0, &(0x7f00000001c0)="240000001e005f0214ffffff030000f9c772f3b85737d2eb00000000080008001d000000", 0x24) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@oldalloc}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) r7 = io_uring_setup(0x483e, &(0x7f00000006c0)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) 1.723032331s ago: executing program 2 (id=366): mbind(&(0x7f0000cd7000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x7e, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xa, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = semget$private(0x0, 0x0, 0x0) semtimedop(r2, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x77359400}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000680)='P', 0x1}], 0x1, 0x800004, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsuid(0x0) 1.718776561s ago: executing program 1 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) (fail_nth: 5) 1.446934113s ago: executing program 2 (id=368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.418785186s ago: executing program 1 (id=369): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) r1 = msgget$private(0x0, 0x0) unshare(0xd99bce925ef7aa7b) msgsnd(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r1, &(0x7f00000004c0)={0x0, ""/14}, 0x16, 0x0, 0x3000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x7fffffff, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000001680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="00022abd7000fbdbdf2503000000080002000600000008000200ff0000000400040005000600ff000000050005000300000008000400b0000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x80) 1.417667606s ago: executing program 1 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000018c0)={'syztnl1\x00', &(0x7f0000001840)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0xc4, 0x9, 0x1, @private1, @local, 0x0, 0x80, 0x40, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001900)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={&(0x7f0000000680)="cca783805752f632bcf01baffc1eae242c4672e1263284f7c79df9a9b7ffafdbe6d3beba527fa516724d9936f19fe773433359aaacab4b6e102296123fb7f5bd66cadfb0a7de1895d05d1a3f42ade00871de7ab4966426b1ffa9cf318a04c3551bbe735f3fc4a1f7ba00761461af01", &(0x7f0000001e80)=""/139, &(0x7f0000001f40)="e17b5185e04055e648260736013025b091ac629059c386207dfd0d3d3e82d33e1dbb064885bd06a3fad65fd61622246c5c8a808b45292fffae692d0ba7bc430658488729f7a4243a217c89f22f1e0ff647109cf8fbc4ec13585fb0050014e61ea88da7a9ea11616706830b5abd1ee516ebae6a0415a1a8f08fa520f4e1860285e9220db7768ef66b04642b64130b633247c05b7742bdf2f82fa236f3bac076f8407afd39cb1689fbffd553085b72c203e07f140350eb12dc1450c9c0d5bd8df0049cda69ed8cfe", &(0x7f0000000240)="96d8189bdd03fe6079b5f7c5aff4113ba6a630e6f7", 0x2, r1, 0x4}, 0x38) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x814) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6gre0\x00', &(0x7f0000001940)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x7, 0xffffffff, 0xbe, @mcast2, @private1, 0x40, 0x8000, 0x1, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001a00)={0x3dc, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x100, 0xfc, 0x9}, {0x5, 0x2, 0x8, 0x6}, {0x1, 0x0, 0x2, 0x8000}, {0x697, 0xd, 0xfb, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3b, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044800) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r14, &(0x7f0000002c40)=[{{0x0, 0xfffffffffffffcad, &(0x7f0000000880)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}, {&(0x7f0000000440)="cb5c65f1ff6b063b3dc141018540b12c9d740a6107a6ade5d1f49dd3c7beea4f4c50fa1d1c98287c19e34c0bf83c344fec6f39174dfc2a98a078fd95e1e8af24709df773b556ab4c6ab8fad10fa2c0d1117ccf79c2015e59b82ab006ac5d98fb8534c744a5e782a94e9789eb57580d34b7ba332231a55485bb759921f714e6d7c098957df016a2fec2bfe220ed2bfedc5fe570f3a61a50128dcefd187c1d438adee0f7905cedd199368ebc09cefb0f7b939541cd5ee6604f66020f3a97b6925e2a62bba1b093ad701d70bccbf45431ac7c527e3f51d3ea5cc04e198f9b6bdfa6981f73ae"}, {&(0x7f0000000580)="fc31c902a3070c0857e8e9f0949181bda02638a89d59c725dd779291401f90f1c3e0099f89c6b63a8cb41719df13e5f88a7cc590a6471d32f83a7aa428f0090ace56708aa8126b79d9e51def1e76798106600a3169100f7c2e53eef03e8868b96fb03d9184ec6feb0f8e96977267a9dca797022b12a0c2f0e7d8bc3bc62d00b01a208a61652d546ce8cbe61c8d8c423be5f9c44d937802a5a191608a02427686876ad7a22fbe806bc04d0d8d3c4bea4abf5d74881e36a2f9280c4472f518929647e57a18af9ee0c9832d03c5aa8a362e79da036e29010dc67dfc3ad3fd7fa7135fb14716040e7e2915102c40ff6a60f4f696e4f23d"}, {&(0x7f0000000900)="39fd469b98fd36a917df9b445beb3a63dd01e0e4ee30c3bb66c437693f3fcaa5d24cb8b7c933dbbb022697208c53e1e791485c1917de48f4df6f4d8f2c800c957e4e7cd0a5d2663d7061334eb13dd4605fe98e05546b33037bc3176332e047395dc7af70b39d333e71c6a3b75defaec555c62b5fbf294f55fa44ee5558911554b66bf38796dd6ee41a69d903b15352ee8e5ce21e436ddbe5820fbd5e282418a3b839c5033926b5bf55c945d045d0ad529111ca77d7ff6d0e26"}, {&(0x7f0000000800)="83186ea4dc5d44804293f637b478584697c0f7730ba4dbbd34f776ec4e719680c50d37dc4fb7f4476b910ce07d1064eec6810e417d382f5d04a3d42dced44a680e19f455e9ada6aa31150c5fb7b57804e0692ffb191e6e3a41b34e4836e6ddb4c0792ec542bef87041dc015df1"}, {&(0x7f0000000280)="373b4e4638688e8616af942b210436d2b743e54012f304fdcaab8bb8124f2b188380b1b812d1ccbc2278bdc3fdbe7ac3ea1c1d7af87e5c3df53660303544c6bb"}], 0x1}}], 0x400000000000292, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="20f2"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000180)="e3c461836b4868ef92f04d846b90dd6b8ff47c080a5a87c80000000000000000000000000065a08264e262c910d966c78da16096f8301a1e9b546ae56a2ec33dcd0884961f181de40330aa9e53965ce31c262fc0c46883c61605065db7e64ece778e92960d04b9b398d16eec371e42b41c7c88605761ec0db1c4bffea7d1e592482c378b2c426b5a6bf663d3a2276ff9a7af3b15", &(0x7f0000000300)=""/188, &(0x7f0000000100)="bb9a945bee193afbe684fa1669", &(0x7f0000000840)="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", 0x8, r1}, 0x38) 1.313189274s ago: executing program 2 (id=371): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa01aaaa08004500001c0000000000029078e00000017f00000111009078000000009b81bc284ac6b3f373a36d107eef0405e25f0e978874ebe3d5b7d105ac14563a51f78258a2df74bb"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009b0"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000480)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\x1b\xfe\xe0\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87f\xac\x06\x14\xf7\xc2\xd6iPN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0xaf, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = getpid() fcntl$setownex(r10, 0xf, &(0x7f0000000100)={0x2, r11}) ioctl$sock_FIOGETOWN(r10, 0x8903, 0x0) syz_open_dev$vcsn(&(0x7f00000008c0), 0xc93c, 0x482000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r12}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r13, 0x29, 0x49, &(0x7f0000004240)=0x40000006, 0x4) 1.191271874s ago: executing program 2 (id=375): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000100)='/|$^{&@\x00', &(0x7f0000000580)="6c49384c9543664ff9a7ca060ad1312fba751c362b84c50deac5dd8842a14641df62932f381b4962b609b4d6b9ee9a35b149443ba26513180047b246e5c46d78c27aaf4f4fc44692dc0713e8d8c36835e89ca570fbc875c0fe103d6da683cf25254e5a5b26c8fd02d211f7f37240bc9f3f556ad6090471721740e8b3225ed8fdb02c0ca091be297003cfd4e4c6e429e9072aa3649800c56e72a44042e13d3c2660e8a125c6c07c3417e3486f331b55c7782e4ba8d2e02bd4c8f098141b163b2d898a75ffd2a9dbcc5c4456c76a", 0xcd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7}, 0x18) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000840)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4044840) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x120805, 0x0, 0xa, 0x410001, 0x0, 0x800, 0x0, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) 1.138179338s ago: executing program 2 (id=377): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000000c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x10001}}, {@mblk_io_submit}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$eJzs3d9rW20dAPDvSX9u62ynXsyBc+ikG7ikXd1WvJgVRK8Gznlfa5uW0rQpbbqtZUiHf4Ag/kKvvPJG8FoE2Z8gwkDvRUQZus0LL973zUuSk3ddlrYpa5q2+Xzg6XnOj57v90k4T/LkHM4JoGtdiYipiOiJiOsRMZwuz6Qltmulst2rl09mKyWJcvnBf5JI0mX1fSXp9Fz6b4MR8d1vR/wgeTfu+ubW0kyhkF9L53Ol5dXc+ubWjcXlmYX8Qn5lamL89uSdyVuTY4fW1rvf/OfPf/zbb93901ce/X3639d+WElrKF23sx2t2G5xu1rT+6qvRV1vRKwdJNgx1pO2p6/TiQAA0JLKd/xPR8QXI+L1rzqdDQAAANAO5a8PxQdJRBkAAAA4tTLVa2CTTDa9FmAoMplstnYN72fjbKbQHxHzxY2Vudq1siPRl5lfLOTH0muFR6IvqcyPV+tv5m82zE9ExIWI+Onwmep8drZYmOv0jx8AAADQJc41jP//N1wb/wMAAACnzMgBtm1yLy8AAADgBDjI+B8AAAA4mXYd/ye9R5sIAAAA0A7fuXevUsr151/PPdzcWCo+vDGXX1/KLm/MZmeLa6vZhWJxoXrPvuX99lcoFle/Gisbj3Ol/Hopt765Nb1c3FgpTVef6z2d95xoAAAAOHoXvvDsb0lEbH/tTLVU9KfrWhirT7U3O6CdMgfb3N0/4BTp6XQCQMc0XODb36k8gKPnfDywz8D+Zw3zB/zZAAAAOA5GP/de5/+dD4QTzEAeupfz/9C93OALupfz/9DlBvbfZHC3FX8+5FwAAIC2GaqWJJNNzwUORSaTzUacrz4WoC+ZXyzkxyLiUxHx1+G+gcr8eKeTBgAAAAAAAAAAAAAAAAAAAAAAAIATplxOogwAAACcahGZfyXpg/xHh68ONf4+0J/8f7g6jYhHv37wi8czpdLaeGX5fz9ZXvpluvxmfQkAAADQSfVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH6dXLJ7P1cpRxX3wjIkaaxe+Nwep08A/DEXH2dRK9O/4viYieQ4i//TQiLr4dvyeNMFJNrZZFY/xMRJxpU/xoMf65Q4gP3exZpf+Zqhx/fQ3HXyauVKfNj7/etLyvF1d26/8y9f6v2s816//O773rwXrl0vPf53aN/zTiUm/z/qceP3nP/vf739va2m1d+TcRo/t8/lRi5UrLq7n1za0bi8szC/mF/MrExPjtyTuTtybHcvOLhXz6t2mMn3z+jx/t1f6zTePX+t+92n/13d0NNIvx4fPHLz+zR/xrX2r+/l/cI37ltf9y+jlQWT9ar2/X6jtd/t1fLu/V/rld2r/f+39tt502uH7/R/9ocVMA4Aisb24tzRQK+bWTUYmofSs/Lvl0tnI+jkUaKq1VhtJjbseqnrYHvf9u0NYqneuTAACA9njzpb/TmQAAAAAAAAAAAAAAAAAAAED3avudzwbevrPAYOeaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwp48DAAD//85EyV0=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103440, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)=0x8) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000004c0)='\x00P\x00\x00\x01\x00\xbd\x03', &(0x7f0000000a40)="b3", 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRESHEX=r0, @ANYRES8=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x1}, 0x18) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000280)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) close(r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8080c61) 790.878776ms ago: executing program 2 (id=383): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x40080) socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0], 0x1c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) 562.595305ms ago: executing program 4 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r5 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffffe, 0x200800) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, &(0x7f0000000340)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) lseek(r4, 0xfffffffffffff800, 0x2) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x30d02, 0x0) chmod(0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_make_fs_call\x00', r6, 0x0, 0x4}, 0x18) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r12, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r13 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r13, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d48", 0x3}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 507.433259ms ago: executing program 1 (id=389): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x5685309a33fbb733, &(0x7f0000000040)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009530d8527f07a0412193056221a254b24ed8bfa40bc06914b01da5ab7fe5005e48b0a8a55c4719ab342bb398"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x4, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x81) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 454.270764ms ago: executing program 4 (id=390): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x20}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r7 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 453.223944ms ago: executing program 0 (id=400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) io_submit(r1, 0x0, &(0x7f00000001c0)) 393.366589ms ago: executing program 3 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 391.645009ms ago: executing program 4 (id=392): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x20, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) 331.649954ms ago: executing program 4 (id=393): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) (async) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r6, 0x10, &(0x7f0000000300)) (async) fcntl$getownex(r6, 0x10, &(0x7f0000000300)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r8 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r10, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) (async) preadv2(r10, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async) write$P9_RVERSION(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r12) (async) r13 = dup(r12) write$P9_RLERRORu(r13, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r13, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r13]) write$UHID_CREATE2(r13, &(0x7f0000000c00)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1000, 0xbdc, 0x5, 0x5, 0xea, 0x10, "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"}}, 0x1118) (async) write$UHID_CREATE2(r13, &(0x7f0000000c00)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1000, 0xbdc, 0x5, 0x5, 0xea, 0x10, "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"}}, 0x1118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) 330.776414ms ago: executing program 0 (id=394): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000001c0)=""/103, 0x67, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x0, &(0x7f0000005140)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000780)=""/104, 0x68}, {&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000880)=""/114, 0x72}, {&(0x7f0000000700)=""/37, 0x25}, {&(0x7f0000001e00)=""/202, 0xca}], 0x6, &(0x7f0000001f80)=""/232, 0xe8}, 0xa3}, {{&(0x7f0000002080)=@l2, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002100)=""/176, 0xb0}, {&(0x7f00000021c0)=""/155, 0x9b}, {&(0x7f0000002280)}, {&(0x7f00000022c0)=""/174, 0xae}, {&(0x7f0000002380)=""/55, 0x37}, {&(0x7f00000023c0)=""/254, 0xfe}, {&(0x7f00000024c0)=""/249, 0xf9}], 0x7}, 0x6}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002640)=""/231, 0xe7}], 0x1, &(0x7f0000002780)=""/135, 0x87}, 0xcb5}, {{&(0x7f0000002840)=@llc, 0x80, &(0x7f0000003b40)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/49, 0x31}, {&(0x7f0000003900)=""/132, 0x84}, {&(0x7f00000039c0)=""/116, 0x74}, {&(0x7f0000003a40)=""/249, 0xf9}], 0x5, &(0x7f0000003bc0)=""/89, 0x59}, 0x177}, {{&(0x7f0000003c40)=@nl, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003cc0)=""/51, 0x33}, {&(0x7f0000003d00)=""/86, 0x56}, {&(0x7f0000003d80)=""/189, 0xbd}, {&(0x7f0000003e40)=""/138, 0x8a}, {&(0x7f0000003f00)=""/38, 0x26}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/52, 0x34}], 0x7}, 0xf01}], 0x5, 0x0, &(0x7f0000005180)={r4, r5+60000000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0xe8, 0x238, 0xffffffff, 0xe8, 0x190, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f0000000340), {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x4, 0x0, 0x2, 0x6, 0x4], 0x4, 0x9}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @rand_addr=0x64010101, @local, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @multicast1, @remote, @gre_key=0x7, @gre_key=0xc}}}}, {{@ip={@multicast1, @loopback, 0x0, 0xff, 'netpci0\x00', 'syzkaller0\x00', {0xff}, {}, 0x33, 0x1, 0x69}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @private=0xa010102, @port=0x4e23, @gre_key=0x6e}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x4, 0x1}}, @common=@icmp={{0x28}, {0xc, "5fc8", 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @broadcast, @empty, @icmp_id=0x68, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) r8 = dup(r1) ioctl$USBDEVFS_FORBID_SUSPEND(r8, 0x5521) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10801, 0x0) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x5) 325.546994ms ago: executing program 3 (id=395): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r1}) keyctl$update(0x2, r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='rxrpc_propose_ack\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x1006, 0x1, 0x0, 0x7ffc0002}]}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="3204138abe8e5204f7a303ea7119e6fffefac6509c37fbd0046bf97153f4b67107d572c7317337a09d82981fb355eb5a772fb85a70be516359efc00ddd46959b34455e26cf5c83d3119597c355cce0b888556d", 0x53, 0xfffffffffffffffb) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x40, &(0x7f0000000700)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB=',wIdno=', @ANYRESHEX=r4, @ANYRESOCT]) r5 = msgget$private(0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) msgrcv(r5, 0x0, 0x0, 0x1, 0x0) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0100140800000000"], 0x8, 0x0) msgrcv(r5, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getgroups(0x41, &(0x7f0000000440)=[0xee01, 0xffffffffffffffff, r9]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000680)={{0x3, r8, r10, 0x0, r11, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r12}) keyctl$unlink(0x9, r3, r1) set_tid_address(0x0) 312.190605ms ago: executing program 0 (id=396): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 294.437427ms ago: executing program 0 (id=397): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) (fail_nth: 1) 255.74067ms ago: executing program 0 (id=398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000ffffffffffff00000000000000ff020000000000000000000000000001"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1101020000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4], 0x4c}, 0x1, 0xba01}, 0x8810) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x2, 0x884, 0xd9b5, 0x4, 0x89, "64e4119b7973832a30d7f46d249058b2f15e4b", 0x7fffffff, 0xa0d}) 52.664436ms ago: executing program 4 (id=399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8000000020000000040000000800040001000000", 0x24) 51.983116ms ago: executing program 4 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r5 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffffe, 0x200800) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, &(0x7f0000000340)) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) lseek(r4, 0xfffffffffffff800, 0x2) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x30d02, 0x0) chmod(&(0x7f0000000a00)='./file0\x00', 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r12 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r12, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d48", 0x3}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 0s ago: executing program 0 (id=402): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40047211, &(0x7f0000000080)={0xe, 0x7, 0x769, 0x0, 0x9, 0x4, 0x2401}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8540, 0x4d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x29}, 0x18) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r1, r2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 27.727452][ T29] audit: type=1400 audit(1755818134.723:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.728671][ T3292] cgroup: Unknown subsys name 'net' [ 27.750212][ T29] audit: type=1400 audit(1755818134.733:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.777575][ T29] audit: type=1400 audit(1755818134.753:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.918358][ T3292] cgroup: Unknown subsys name 'cpuset' [ 27.924629][ T3292] cgroup: Unknown subsys name 'rlimit' [ 28.036242][ T29] audit: type=1400 audit(1755818135.033:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.062642][ T29] audit: type=1400 audit(1755818135.033:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.083105][ T29] audit: type=1400 audit(1755818135.033:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.098952][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.103460][ T29] audit: type=1400 audit(1755818135.033:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.132414][ T29] audit: type=1400 audit(1755818135.033:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.157222][ T29] audit: type=1400 audit(1755818135.033:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.180436][ T29] audit: type=1400 audit(1755818135.113:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.262024][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.230659][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 30.334936][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 30.345484][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 30.380118][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 30.390928][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 30.422903][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.430033][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.437142][ T3310] bridge_slave_0: entered allmulticast mode [ 30.443791][ T3310] bridge_slave_0: entered promiscuous mode [ 30.450441][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.457491][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.464738][ T3310] bridge_slave_1: entered allmulticast mode [ 30.471237][ T3310] bridge_slave_1: entered promiscuous mode [ 30.511337][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.518506][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.525606][ T3306] bridge_slave_0: entered allmulticast mode [ 30.532078][ T3306] bridge_slave_0: entered promiscuous mode [ 30.547260][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.564027][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.571203][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.578488][ T3306] bridge_slave_1: entered allmulticast mode [ 30.584854][ T3306] bridge_slave_1: entered promiscuous mode [ 30.594648][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.626457][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.633559][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.640782][ T3303] bridge_slave_0: entered allmulticast mode [ 30.647183][ T3303] bridge_slave_0: entered promiscuous mode [ 30.674217][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.681332][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.688493][ T3303] bridge_slave_1: entered allmulticast mode [ 30.694993][ T3303] bridge_slave_1: entered promiscuous mode [ 30.702437][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.721546][ T3310] team0: Port device team_slave_0 added [ 30.727316][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.734475][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.741606][ T3311] bridge_slave_0: entered allmulticast mode [ 30.748147][ T3311] bridge_slave_0: entered promiscuous mode [ 30.760196][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.767251][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.774393][ T3302] bridge_slave_0: entered allmulticast mode [ 30.780919][ T3302] bridge_slave_0: entered promiscuous mode [ 30.788470][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.803414][ T3310] team0: Port device team_slave_1 added [ 30.809716][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.816762][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.823979][ T3311] bridge_slave_1: entered allmulticast mode [ 30.830445][ T3311] bridge_slave_1: entered promiscuous mode [ 30.842103][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.849212][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.856401][ T3302] bridge_slave_1: entered allmulticast mode [ 30.862989][ T3302] bridge_slave_1: entered promiscuous mode [ 30.875134][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.885633][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.929792][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.936828][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.962914][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.975007][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.984416][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.991423][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.017450][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.033563][ T3306] team0: Port device team_slave_0 added [ 31.041199][ T3303] team0: Port device team_slave_0 added [ 31.048018][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.060727][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.070641][ T3306] team0: Port device team_slave_1 added [ 31.077014][ T3303] team0: Port device team_slave_1 added [ 31.099912][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.119211][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.126164][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.152411][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.163848][ T3311] team0: Port device team_slave_0 added [ 31.170658][ T3311] team0: Port device team_slave_1 added [ 31.191073][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.198078][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.224111][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.245654][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.252654][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.278735][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.304623][ T3302] team0: Port device team_slave_0 added [ 31.316934][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.323941][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.349877][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.365358][ T3310] hsr_slave_0: entered promiscuous mode [ 31.371312][ T3310] hsr_slave_1: entered promiscuous mode [ 31.378437][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.385376][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.411303][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.422758][ T3302] team0: Port device team_slave_1 added [ 31.439979][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.446998][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.472950][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.495587][ T3303] hsr_slave_0: entered promiscuous mode [ 31.502887][ T3303] hsr_slave_1: entered promiscuous mode [ 31.508892][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.514625][ T3303] Cannot create hsr debugfs directory [ 31.539296][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.546263][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.572303][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.589632][ T3306] hsr_slave_0: entered promiscuous mode [ 31.595554][ T3306] hsr_slave_1: entered promiscuous mode [ 31.601497][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 31.607218][ T3306] Cannot create hsr debugfs directory [ 31.626738][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.633734][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.659736][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.689201][ T3311] hsr_slave_0: entered promiscuous mode [ 31.695245][ T3311] hsr_slave_1: entered promiscuous mode [ 31.701132][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 31.706869][ T3311] Cannot create hsr debugfs directory [ 31.782219][ T3302] hsr_slave_0: entered promiscuous mode [ 31.788259][ T3302] hsr_slave_1: entered promiscuous mode [ 31.794158][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 31.799927][ T3302] Cannot create hsr debugfs directory [ 31.931768][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.949224][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.957929][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.969441][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.986995][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.996609][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.009287][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.017995][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.046257][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.061748][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.076834][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.088271][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.126013][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.135685][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.154541][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.175430][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.187598][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.199743][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.208888][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.218392][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.233430][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.243914][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.282444][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.291376][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.307799][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.321730][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.328828][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.343377][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.350461][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.359326][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.366405][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.382534][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.389770][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.413997][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.437227][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.444388][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.455177][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.477696][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.484837][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.515648][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.532513][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.548761][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.561140][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.580060][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.587178][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.596701][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.603907][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.623807][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.630937][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.659831][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.666982][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.682590][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.694164][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.735824][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.806157][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.855023][ T3303] veth0_vlan: entered promiscuous mode [ 32.882786][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.900138][ T3303] veth1_vlan: entered promiscuous mode [ 32.911931][ T3310] veth0_vlan: entered promiscuous mode [ 32.931602][ T3310] veth1_vlan: entered promiscuous mode [ 32.944078][ T3303] veth0_macvtap: entered promiscuous mode [ 32.970231][ T3303] veth1_macvtap: entered promiscuous mode [ 32.984583][ T3310] veth0_macvtap: entered promiscuous mode [ 32.997884][ T3311] veth0_vlan: entered promiscuous mode [ 33.006502][ T3310] veth1_macvtap: entered promiscuous mode [ 33.015939][ T3311] veth1_vlan: entered promiscuous mode [ 33.028522][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.049321][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.058171][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.066936][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.083449][ T3311] veth0_macvtap: entered promiscuous mode [ 33.094823][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.112205][ T3311] veth1_macvtap: entered promiscuous mode [ 33.124411][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.146370][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.157967][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.172414][ T3306] veth0_vlan: entered promiscuous mode [ 33.178195][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.178209][ T29] audit: type=1400 audit(1755818140.173:81): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.RUUQrW/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.181466][ T3306] veth1_vlan: entered promiscuous mode [ 33.184219][ T29] audit: type=1400 audit(1755818140.173:82): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.219074][ T3302] veth0_vlan: entered promiscuous mode [ 33.235932][ T29] audit: type=1400 audit(1755818140.173:83): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.RUUQrW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.243489][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.266531][ T29] audit: type=1400 audit(1755818140.173:84): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.284218][ T3302] veth1_vlan: entered promiscuous mode [ 33.296993][ T29] audit: type=1400 audit(1755818140.173:85): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.RUUQrW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.329378][ T29] audit: type=1400 audit(1755818140.173:86): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.RUUQrW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.358155][ T29] audit: type=1400 audit(1755818140.183:87): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.360826][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.389066][ T29] audit: type=1400 audit(1755818140.393:88): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.395308][ T3306] veth0_macvtap: entered promiscuous mode [ 33.411911][ T29] audit: type=1400 audit(1755818140.393:89): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=3772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.433224][ T3306] veth1_macvtap: entered promiscuous mode [ 33.449616][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.458758][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.472599][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.489705][ T29] audit: type=1400 audit(1755818140.493:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.520179][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.533747][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.541176][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.572987][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.574080][ T3472] loop0: detected capacity change from 0 to 512 [ 33.590852][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.602300][ T3302] veth0_macvtap: entered promiscuous mode [ 33.625103][ T3302] veth1_macvtap: entered promiscuous mode [ 33.632770][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642411][ T3472] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.670650][ T3472] EXT4-fs (loop0): mount failed [ 33.676497][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.683883][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.716775][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.725894][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.736420][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.753365][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.762834][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.815716][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.837945][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.861385][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.882243][ T3485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.883435][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.925774][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.956628][ T3472] syz.0.1 (3472) used greatest stack depth: 10176 bytes left [ 33.996978][ T3492] IPVS: stopping master sync thread 3494 ... [ 33.999065][ T3494] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 34.045377][ T3495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.060586][ T3492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.143003][ T3502] syzkaller0: refused to change device tx_queue_len [ 34.216850][ T3505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'. [ 34.256141][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 34.264849][ T3502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'. [ 34.276187][ T3502] Zero length message leads to an empty skb [ 34.418593][ T3511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13'. [ 35.021756][ T3492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.138624][ T3523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'. [ 35.147551][ T3523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17'. [ 35.156416][ T3523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'. [ 35.165331][ T3523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'. [ 35.188121][ T3525] ======================================================= [ 35.188121][ T3525] WARNING: The mand mount option has been deprecated and [ 35.188121][ T3525] and is ignored by this kernel. Remove the mand [ 35.188121][ T3525] option from the mount to silence this warning. [ 35.188121][ T3525] ======================================================= [ 36.151506][ T3492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.176112][ T3589] tipc: Started in network mode [ 36.181123][ T3589] tipc: Node identity , cluster identity 4711 [ 36.187260][ T3589] tipc: Failed to set node id, please configure manually [ 36.194380][ T3589] tipc: Enabling of bearer rejected, failed to enable media [ 36.259516][ T3589] loop1: detected capacity change from 0 to 256 [ 36.363104][ T3600] FAULT_INJECTION: forcing a failure. [ 36.363104][ T3600] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.376427][ T3600] CPU: 1 UID: 0 PID: 3600 Comm: syz.4.49 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.376463][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.376479][ T3600] Call Trace: [ 36.376486][ T3600] [ 36.376493][ T3600] __dump_stack+0x1d/0x30 [ 36.376514][ T3600] dump_stack_lvl+0xe8/0x140 [ 36.376533][ T3600] dump_stack+0x15/0x1b [ 36.376628][ T3600] should_fail_ex+0x265/0x280 [ 36.376654][ T3600] should_fail+0xb/0x20 [ 36.376706][ T3600] should_fail_usercopy+0x1a/0x20 [ 36.376734][ T3600] _copy_from_user+0x1c/0xb0 [ 36.376797][ T3600] sk_setsockopt+0x1fa/0x20e0 [ 36.376840][ T3600] sock_setsockopt+0x40/0x50 [ 36.376862][ T3600] __sys_setsockopt+0x13a/0x200 [ 36.376954][ T3600] __x64_sys_setsockopt+0x64/0x80 [ 36.376981][ T3600] x64_sys_call+0x20ec/0x2ff0 [ 36.377007][ T3600] do_syscall_64+0xd2/0x200 [ 36.377039][ T3600] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.377108][ T3600] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.377138][ T3600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.377193][ T3600] RIP: 0033:0x7f9f6419ebe9 [ 36.377211][ T3600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.377232][ T3600] RSP: 002b:00007f9f62c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 36.377261][ T3600] RAX: ffffffffffffffda RBX: 00007f9f643c5fa0 RCX: 00007f9f6419ebe9 [ 36.377273][ T3600] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000006 [ 36.377284][ T3600] RBP: 00007f9f62c07090 R08: 0000000000000010 R09: 0000000000000000 [ 36.377297][ T3600] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 36.377319][ T3600] R13: 00007f9f643c6038 R14: 00007f9f643c5fa0 R15: 00007ffd12f126b8 [ 36.377416][ T3600] [ 36.568002][ T3604] loop1: detected capacity change from 0 to 512 [ 36.580276][ T3604] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.593458][ T3604] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.614447][ T3604] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.50: invalid indirect mapped block 4294967295 (level 0) [ 36.630070][ T3604] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.50: invalid indirect mapped block 4294967295 (level 1) [ 36.645105][ T3604] EXT4-fs (loop1): 1 orphan inode deleted [ 36.651144][ T3604] EXT4-fs (loop1): 1 truncate cleaned up [ 36.661360][ T3604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.682087][ T3602] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.50: iget: bad extra_isize 46 (inode size 256) [ 36.702736][ T3602] can0: slcan on ttyS3. [ 36.747703][ T3601] can0 (unregistered): slcan off ttyS3. [ 36.760614][ T3492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.789991][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.822541][ T1780] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.834695][ T1780] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.846401][ T1780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.857528][ T1780] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.909129][ C0] hrtimer: interrupt took 38798 ns [ 36.911112][ T3619] syzkaller0: refused to change device tx_queue_len [ 37.060918][ T3627] hub 6-0:1.0: USB hub found [ 37.065839][ T3627] hub 6-0:1.0: 8 ports detected [ 37.084005][ T3627] loop0: detected capacity change from 0 to 2048 [ 37.150044][ T3627] Alternate GPT is invalid, using primary GPT. [ 37.156554][ T3627] loop0: p2 p3 p7 [ 37.295868][ T3631] program syz.3.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.318515][ T3637] netlink: 'syz.0.59': attribute type 13 has an invalid length. [ 37.326294][ T3637] netlink: 'syz.0.59': attribute type 27 has an invalid length. [ 37.356620][ T3640] capability: warning: `}\)\' uses deprecated v2 capabilities in a way that may be insecure [ 38.208760][ T29] kauditd_printk_skb: 1306 callbacks suppressed [ 38.208773][ T29] audit: type=1326 audit(1755818145.213:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 38.238799][ T29] audit: type=1326 audit(1755818145.213:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3648 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 38.442588][ T29] audit: type=1400 audit(1755818145.443:1398): avc: denied { read write } for pid=3660 comm="syz.3.71" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.466710][ T29] audit: type=1400 audit(1755818145.443:1399): avc: denied { open } for pid=3660 comm="syz.3.71" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.657704][ T3627] syz.0.59 (3627) used greatest stack depth: 7096 bytes left [ 38.850352][ T3674] FAULT_INJECTION: forcing a failure. [ 38.850352][ T3674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.863640][ T3674] CPU: 0 UID: 0 PID: 3674 Comm: syz.0.77 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.863729][ T3674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.863742][ T3674] Call Trace: [ 38.863747][ T3674] [ 38.863769][ T3674] __dump_stack+0x1d/0x30 [ 38.863795][ T3674] dump_stack_lvl+0xe8/0x140 [ 38.863817][ T3674] dump_stack+0x15/0x1b [ 38.863837][ T3674] should_fail_ex+0x265/0x280 [ 38.863862][ T3674] should_fail+0xb/0x20 [ 38.863883][ T3674] should_fail_usercopy+0x1a/0x20 [ 38.863977][ T3674] _copy_from_iter+0xcf/0xe40 [ 38.864004][ T3674] ? __build_skb_around+0x1a0/0x200 [ 38.864102][ T3674] ? __alloc_skb+0x223/0x320 [ 38.864134][ T3674] netlink_sendmsg+0x471/0x6b0 [ 38.864194][ T3674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.864222][ T3674] __sock_sendmsg+0x142/0x180 [ 38.864250][ T3674] ____sys_sendmsg+0x31e/0x4e0 [ 38.864281][ T3674] ___sys_sendmsg+0x17b/0x1d0 [ 38.864324][ T3674] __x64_sys_sendmsg+0xd4/0x160 [ 38.864430][ T3674] x64_sys_call+0x191e/0x2ff0 [ 38.864534][ T3674] do_syscall_64+0xd2/0x200 [ 38.864563][ T3674] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.864660][ T3674] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.864694][ T3674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.864822][ T3674] RIP: 0033:0x7f671b45ebe9 [ 38.864839][ T3674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.864867][ T3674] RSP: 002b:00007f6719ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.864886][ T3674] RAX: ffffffffffffffda RBX: 00007f671b685fa0 RCX: 00007f671b45ebe9 [ 38.864898][ T3674] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 38.864911][ T3674] RBP: 00007f6719ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 38.864926][ T3674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.864940][ T3674] R13: 00007f671b686038 R14: 00007f671b685fa0 R15: 00007ffcca41e508 [ 38.864965][ T3674] [ 39.170951][ T29] audit: type=1400 audit(1755818146.173:1400): avc: denied { write } for pid=3679 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.212031][ T29] audit: type=1326 audit(1755818146.193:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 39.235503][ T29] audit: type=1326 audit(1755818146.193:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 39.258809][ T29] audit: type=1326 audit(1755818146.193:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 39.270430][ T3682] loop1: detected capacity change from 0 to 512 [ 39.282260][ T29] audit: type=1326 audit(1755818146.193:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 39.312855][ T29] audit: type=1326 audit(1755818146.193:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3683 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 39.369720][ T3682] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.404249][ T3682] EXT4-fs (loop1): mount failed [ 39.431675][ T3693] loop2: detected capacity change from 0 to 2048 [ 39.473331][ T3693] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.491158][ T3693] FAULT_INJECTION: forcing a failure. [ 39.491158][ T3693] name failslab, interval 1, probability 0, space 0, times 1 [ 39.503913][ T3693] CPU: 0 UID: 0 PID: 3693 Comm: syz.2.85 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.503947][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.503959][ T3693] Call Trace: [ 39.503964][ T3693] [ 39.503970][ T3693] __dump_stack+0x1d/0x30 [ 39.504036][ T3693] dump_stack_lvl+0xe8/0x140 [ 39.504060][ T3693] dump_stack+0x15/0x1b [ 39.504081][ T3693] should_fail_ex+0x265/0x280 [ 39.504159][ T3693] should_failslab+0x8c/0xb0 [ 39.504185][ T3693] __kmalloc_node_noprof+0xa9/0x410 [ 39.504222][ T3693] ? alloc_slab_obj_exts+0x31/0x80 [ 39.504310][ T3693] alloc_slab_obj_exts+0x31/0x80 [ 39.504394][ T3693] __memcg_slab_post_alloc_hook+0x23f/0x580 [ 39.504443][ T3693] kmem_cache_alloc_lru_noprof+0x229/0x310 [ 39.504479][ T3693] ? __d_alloc+0x3d/0x340 [ 39.504514][ T3693] __d_alloc+0x3d/0x340 [ 39.504596][ T3693] d_alloc+0x2e/0x100 [ 39.504629][ T3693] lookup_one_qstr_excl+0x99/0x250 [ 39.504758][ T3693] filename_create+0x149/0x230 [ 39.504782][ T3693] do_mkdirat+0x52/0x3f0 [ 39.504819][ T3693] __x64_sys_mkdirat+0x4c/0x60 [ 39.504846][ T3693] x64_sys_call+0x2b7/0x2ff0 [ 39.504913][ T3693] do_syscall_64+0xd2/0x200 [ 39.504943][ T3693] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.504977][ T3693] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.505006][ T3693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.505030][ T3693] RIP: 0033:0x7fee4b8aebe9 [ 39.505070][ T3693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.505095][ T3693] RSP: 002b:00007fee4a30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 39.505113][ T3693] RAX: ffffffffffffffda RBX: 00007fee4bad5fa0 RCX: 00007fee4b8aebe9 [ 39.505169][ T3693] RDX: 0000000000000008 RSI: 0000200000000400 RDI: 0000000000000004 [ 39.505265][ T3693] RBP: 00007fee4a30f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.505280][ T3693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.505295][ T3693] R13: 00007fee4bad6038 R14: 00007fee4bad5fa0 R15: 00007ffdf3da4438 [ 39.505317][ T3693] [ 39.506972][ T3693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.85: bg 0: block 120: padding at end of block bitmap is not set [ 39.563877][ T3703] syz.4.88 uses obsolete (PF_INET,SOCK_PACKET) [ 39.745942][ T3310] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 39.776685][ T3710] IPv6: Can't replace route, no match found [ 39.856850][ T3703] loop4: detected capacity change from 0 to 8192 [ 39.870956][ T3703] mmap: syz.4.88 (3703) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.982475][ T3730] loop1: detected capacity change from 0 to 2048 [ 40.000730][ T3730] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.015134][ T3730] FAULT_INJECTION: forcing a failure. [ 40.015134][ T3730] name failslab, interval 1, probability 0, space 0, times 0 [ 40.027914][ T3730] CPU: 1 UID: 0 PID: 3730 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.027945][ T3730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.027971][ T3730] Call Trace: [ 40.027978][ T3730] [ 40.027987][ T3730] __dump_stack+0x1d/0x30 [ 40.028013][ T3730] dump_stack_lvl+0xe8/0x140 [ 40.028038][ T3730] dump_stack+0x15/0x1b [ 40.028058][ T3730] should_fail_ex+0x265/0x280 [ 40.028085][ T3730] should_failslab+0x8c/0xb0 [ 40.028194][ T3730] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 40.028232][ T3730] ? sidtab_sid2str_get+0xa0/0x130 [ 40.028255][ T3730] kmemdup_noprof+0x2b/0x70 [ 40.028285][ T3730] sidtab_sid2str_get+0xa0/0x130 [ 40.028312][ T3730] security_sid_to_context_core+0x1eb/0x2e0 [ 40.028492][ T3730] security_sid_to_context+0x27/0x40 [ 40.028536][ T3730] selinux_lsmprop_to_secctx+0x67/0xf0 [ 40.028560][ T3730] security_lsmprop_to_secctx+0x43/0x80 [ 40.028607][ T3730] audit_log_task_context+0x77/0x190 [ 40.028647][ T3730] audit_log_task+0xf4/0x250 [ 40.028676][ T3730] audit_seccomp+0x61/0x100 [ 40.028701][ T3730] ? __seccomp_filter+0x68c/0x10d0 [ 40.028763][ T3730] __seccomp_filter+0x69d/0x10d0 [ 40.028792][ T3730] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 40.028825][ T3730] ? vfs_write+0x7e8/0x960 [ 40.028851][ T3730] ? __rcu_read_unlock+0x4f/0x70 [ 40.028874][ T3730] ? __fget_files+0x184/0x1c0 [ 40.028958][ T3730] __secure_computing+0x82/0x150 [ 40.028982][ T3730] syscall_trace_enter+0xcf/0x1e0 [ 40.029012][ T3730] do_syscall_64+0xac/0x200 [ 40.029120][ T3730] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.029144][ T3730] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.029172][ T3730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.029219][ T3730] RIP: 0033:0x7f6a1c9febe9 [ 40.029239][ T3730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.029261][ T3730] RSP: 002b:00007f6a1b467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 40.029284][ T3730] RAX: ffffffffffffffda RBX: 00007f6a1cc25fa0 RCX: 00007f6a1c9febe9 [ 40.029299][ T3730] RDX: 0000000000000008 RSI: 0000200000000400 RDI: 0000000000000007 [ 40.029312][ T3730] RBP: 00007f6a1b467090 R08: 0000000000000000 R09: 0000000000000000 [ 40.029330][ T3730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.029417][ T3730] R13: 00007f6a1cc26038 R14: 00007f6a1cc25fa0 R15: 00007fff6a565ee8 [ 40.029440][ T3730] [ 40.030071][ T3730] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.97: bg 0: block 120: padding at end of block bitmap is not set [ 40.045215][ T3732] FAULT_INJECTION: forcing a failure. [ 40.045215][ T3732] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 40.301762][ T3732] CPU: 0 UID: 0 PID: 3732 Comm: syz.2.98 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.301868][ T3732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.301882][ T3732] Call Trace: [ 40.301890][ T3732] [ 40.301898][ T3732] __dump_stack+0x1d/0x30 [ 40.301922][ T3732] dump_stack_lvl+0xe8/0x140 [ 40.301944][ T3732] dump_stack+0x15/0x1b [ 40.302039][ T3732] should_fail_ex+0x265/0x280 [ 40.302089][ T3732] should_fail_alloc_page+0xf2/0x100 [ 40.302156][ T3732] __alloc_frozen_pages_noprof+0xff/0x360 [ 40.302198][ T3732] alloc_pages_mpol+0xb3/0x250 [ 40.302238][ T3732] vma_alloc_folio_noprof+0x1aa/0x300 [ 40.302344][ T3732] handle_mm_fault+0xec2/0x2c20 [ 40.302401][ T3732] ? __rcu_read_unlock+0x4f/0x70 [ 40.302434][ T3732] do_user_addr_fault+0x3fe/0x1090 [ 40.302505][ T3732] exc_page_fault+0x62/0xa0 [ 40.302529][ T3732] asm_exc_page_fault+0x26/0x30 [ 40.302550][ T3732] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 40.302616][ T3732] Code: e9 c4 f6 01 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d f6 01 00 66 2e 0f 1f [ 40.302635][ T3732] RSP: 0018:ffffc90001267cf0 EFLAGS: 00050202 [ 40.302653][ T3732] RAX: ffff88811b264c20 RBX: 0000000000000004 RCX: 0000000000000004 [ 40.302667][ T3732] RDX: 0000000000000000 RSI: ffff888104682680 RDI: 0000200000002fc0 [ 40.302738][ T3732] RBP: 0000200000002fc0 R08: 00000000000007d9 R09: 0000000000000000 [ 40.302751][ T3732] R10: 0001888104682680 R11: 0001888104682683 R12: 0000200000002fc4 [ 40.302764][ T3732] R13: 00007ffffffff000 R14: 0000200000002fc0 R15: ffff888104682680 [ 40.302786][ T3732] _copy_to_user+0x7c/0xa0 [ 40.302818][ T3732] virtual_ncidev_read+0x1bf/0x2b0 [ 40.302855][ T3732] ? __pfx_autoremove_wake_function+0x10/0x10 [ 40.302893][ T3732] ? __pfx_virtual_ncidev_read+0x10/0x10 [ 40.302922][ T3732] vfs_readv+0x3fb/0x690 [ 40.303033][ T3732] __x64_sys_preadv+0xfd/0x1c0 [ 40.303168][ T3732] x64_sys_call+0x282a/0x2ff0 [ 40.303192][ T3732] do_syscall_64+0xd2/0x200 [ 40.303284][ T3732] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.303311][ T3732] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.303338][ T3732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.303407][ T3732] RIP: 0033:0x7fee4b8aebe9 [ 40.303424][ T3732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.303443][ T3732] RSP: 002b:00007fee4a30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 40.303463][ T3732] RAX: ffffffffffffffda RBX: 00007fee4bad5fa0 RCX: 00007fee4b8aebe9 [ 40.303476][ T3732] RDX: 0000000000000001 RSI: 00002000000019c0 RDI: 0000000000000006 [ 40.303566][ T3732] RBP: 00007fee4a30f090 R08: 0000000000000100 R09: 0000000000000000 [ 40.303579][ T3732] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 40.303592][ T3732] R13: 00007fee4bad6038 R14: 00007fee4bad5fa0 R15: 00007ffdf3da4438 [ 40.303613][ T3732] [ 40.800754][ T3756] FAULT_INJECTION: forcing a failure. [ 40.800754][ T3756] name failslab, interval 1, probability 0, space 0, times 0 [ 40.813999][ T3756] CPU: 1 UID: 0 PID: 3756 Comm: syz.4.103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.814026][ T3756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.814090][ T3756] Call Trace: [ 40.814098][ T3756] [ 40.814114][ T3756] __dump_stack+0x1d/0x30 [ 40.814180][ T3756] dump_stack_lvl+0xe8/0x140 [ 40.814204][ T3756] dump_stack+0x15/0x1b [ 40.814223][ T3756] should_fail_ex+0x265/0x280 [ 40.814249][ T3756] should_failslab+0x8c/0xb0 [ 40.814273][ T3756] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 40.814353][ T3756] ? sidtab_sid2str_get+0xa0/0x130 [ 40.814381][ T3756] kmemdup_noprof+0x2b/0x70 [ 40.814411][ T3756] sidtab_sid2str_get+0xa0/0x130 [ 40.814437][ T3756] security_sid_to_context_core+0x1eb/0x2e0 [ 40.814518][ T3756] security_sid_to_context+0x27/0x40 [ 40.814559][ T3756] selinux_lsmprop_to_secctx+0x67/0xf0 [ 40.814580][ T3756] security_lsmprop_to_secctx+0x43/0x80 [ 40.814618][ T3756] audit_log_task_context+0x77/0x190 [ 40.814668][ T3756] audit_log_task+0xf4/0x250 [ 40.814711][ T3756] audit_seccomp+0x61/0x100 [ 40.814798][ T3756] ? __seccomp_filter+0x68c/0x10d0 [ 40.814855][ T3756] __seccomp_filter+0x69d/0x10d0 [ 40.814877][ T3756] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 40.814914][ T3756] ? vfs_write+0x7e8/0x960 [ 40.815049][ T3756] __secure_computing+0x82/0x150 [ 40.815150][ T3756] syscall_trace_enter+0xcf/0x1e0 [ 40.815175][ T3756] do_syscall_64+0xac/0x200 [ 40.815254][ T3756] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.815298][ T3756] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.815346][ T3756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.815367][ T3756] RIP: 0033:0x7f9f6419ebe9 [ 40.815383][ T3756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.815461][ T3756] RSP: 002b:00007f9f62c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 40.815481][ T3756] RAX: ffffffffffffffda RBX: 00007f9f643c5fa0 RCX: 00007f9f6419ebe9 [ 40.815493][ T3756] RDX: 0000000000000017 RSI: 0000000000c00304 RDI: 0000200000000000 [ 40.815506][ T3756] RBP: 00007f9f62c07090 R08: 0000000000000000 R09: 0000000000000000 [ 40.815518][ T3756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.815595][ T3756] R13: 00007f9f643c6038 R14: 00007f9f643c5fa0 R15: 00007ffd12f126b8 [ 40.815614][ T3756] [ 41.075446][ T3311] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 41.080800][ T3758] FAULT_INJECTION: forcing a failure. [ 41.080800][ T3758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.097546][ T3758] CPU: 0 UID: 0 PID: 3758 Comm: syz.3.107 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.097573][ T3758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.097585][ T3758] Call Trace: [ 41.097593][ T3758] [ 41.097664][ T3758] __dump_stack+0x1d/0x30 [ 41.097689][ T3758] dump_stack_lvl+0xe8/0x140 [ 41.097715][ T3758] dump_stack+0x15/0x1b [ 41.097731][ T3758] should_fail_ex+0x265/0x280 [ 41.097749][ T3758] should_fail+0xb/0x20 [ 41.097811][ T3758] should_fail_usercopy+0x1a/0x20 [ 41.097830][ T3758] _copy_from_iter+0xcf/0xe40 [ 41.097872][ T3758] ? __build_skb_around+0x1a0/0x200 [ 41.097929][ T3758] ? __alloc_skb+0x223/0x320 [ 41.097957][ T3758] netlink_sendmsg+0x471/0x6b0 [ 41.097980][ T3758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.097999][ T3758] __sock_sendmsg+0x142/0x180 [ 41.098107][ T3758] ____sys_sendmsg+0x31e/0x4e0 [ 41.098128][ T3758] ___sys_sendmsg+0x17b/0x1d0 [ 41.098159][ T3758] __x64_sys_sendmsg+0xd4/0x160 [ 41.098185][ T3758] x64_sys_call+0x191e/0x2ff0 [ 41.098203][ T3758] do_syscall_64+0xd2/0x200 [ 41.098232][ T3758] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.098252][ T3758] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.098315][ T3758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.098333][ T3758] RIP: 0033:0x7f87e87debe9 [ 41.098346][ T3758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.098361][ T3758] RSP: 002b:00007f87e7247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.098392][ T3758] RAX: ffffffffffffffda RBX: 00007f87e8a05fa0 RCX: 00007f87e87debe9 [ 41.098403][ T3758] RDX: 00000000200008c2 RSI: 0000200000000180 RDI: 0000000000000004 [ 41.098419][ T3758] RBP: 00007f87e7247090 R08: 0000000000000000 R09: 0000000000000000 [ 41.098429][ T3758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.098439][ T3758] R13: 00007f87e8a06038 R14: 00007f87e8a05fa0 R15: 00007ffdde377328 [ 41.098455][ T3758] [ 41.406450][ T3777] program syz.3.112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.416331][ T3777] FAULT_INJECTION: forcing a failure. [ 41.416331][ T3777] name failslab, interval 1, probability 0, space 0, times 0 [ 41.429226][ T3777] CPU: 0 UID: 0 PID: 3777 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.429298][ T3777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.429311][ T3777] Call Trace: [ 41.429318][ T3777] [ 41.429325][ T3777] __dump_stack+0x1d/0x30 [ 41.429389][ T3777] dump_stack_lvl+0xe8/0x140 [ 41.429409][ T3777] dump_stack+0x15/0x1b [ 41.429425][ T3777] should_fail_ex+0x265/0x280 [ 41.429513][ T3777] should_failslab+0x8c/0xb0 [ 41.429538][ T3777] __kmalloc_noprof+0xa5/0x3e0 [ 41.429565][ T3777] ? bio_kmalloc+0x41/0x50 [ 41.429662][ T3777] bio_kmalloc+0x41/0x50 [ 41.429693][ T3777] blk_rq_map_kern+0x223/0x5c0 [ 41.429812][ T3777] scsi_ioctl+0x12c0/0x14d0 [ 41.429837][ T3777] ? avc_has_perm+0xf7/0x180 [ 41.429864][ T3777] ? file_has_perm+0x324/0x370 [ 41.429885][ T3777] ? do_vfs_ioctl+0x866/0xe10 [ 41.429915][ T3777] sg_ioctl+0xdf6/0x1360 [ 41.429949][ T3777] ? __pfx_sg_ioctl+0x10/0x10 [ 41.430050][ T3777] __se_sys_ioctl+0xce/0x140 [ 41.430084][ T3777] __x64_sys_ioctl+0x43/0x50 [ 41.430155][ T3777] x64_sys_call+0x1816/0x2ff0 [ 41.430184][ T3777] do_syscall_64+0xd2/0x200 [ 41.430211][ T3777] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.430240][ T3777] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.430265][ T3777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.430287][ T3777] RIP: 0033:0x7f87e87debe9 [ 41.430301][ T3777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.430354][ T3777] RSP: 002b:00007f87e7247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.430385][ T3777] RAX: ffffffffffffffda RBX: 00007f87e8a05fa0 RCX: 00007f87e87debe9 [ 41.430397][ T3777] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 41.430409][ T3777] RBP: 00007f87e7247090 R08: 0000000000000000 R09: 0000000000000000 [ 41.430420][ T3777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.430432][ T3777] R13: 00007f87e8a06038 R14: 00007f87e8a05fa0 R15: 00007ffdde377328 [ 41.430483][ T3777] [ 41.673352][ T3773] __nla_validate_parse: 5 callbacks suppressed [ 41.673367][ T3773] netlink: 48 bytes leftover after parsing attributes in process `syz.4.110'. [ 41.797477][ T3794] @ÿ: renamed from bond_slave_0 (while UP) [ 41.864186][ T3807] FAULT_INJECTION: forcing a failure. [ 41.864186][ T3807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.877393][ T3807] CPU: 0 UID: 0 PID: 3807 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.877499][ T3807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.877514][ T3807] Call Trace: [ 41.877522][ T3807] [ 41.877532][ T3807] __dump_stack+0x1d/0x30 [ 41.877558][ T3807] dump_stack_lvl+0xe8/0x140 [ 41.877654][ T3807] dump_stack+0x15/0x1b [ 41.877676][ T3807] should_fail_ex+0x265/0x280 [ 41.877703][ T3807] should_fail+0xb/0x20 [ 41.877725][ T3807] should_fail_usercopy+0x1a/0x20 [ 41.877806][ T3807] _copy_from_user+0x1c/0xb0 [ 41.877893][ T3807] snd_seq_ioctl+0x127/0x2e0 [ 41.877986][ T3807] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 41.878098][ T3807] __se_sys_ioctl+0xce/0x140 [ 41.878141][ T3807] __x64_sys_ioctl+0x43/0x50 [ 41.878243][ T3807] x64_sys_call+0x1816/0x2ff0 [ 41.878270][ T3807] do_syscall_64+0xd2/0x200 [ 41.878364][ T3807] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.878415][ T3807] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.878439][ T3807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.878467][ T3807] RIP: 0033:0x7f9f6419ebe9 [ 41.878486][ T3807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.878509][ T3807] RSP: 002b:00007f9f62c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.878604][ T3807] RAX: ffffffffffffffda RBX: 00007f9f643c5fa0 RCX: 00007f9f6419ebe9 [ 41.878620][ T3807] RDX: 00002000000004c0 RSI: 0000000040a85321 RDI: 0000000000000003 [ 41.878636][ T3807] RBP: 00007f9f62c07090 R08: 0000000000000000 R09: 0000000000000000 [ 41.878651][ T3807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.878734][ T3807] R13: 00007f9f643c6038 R14: 00007f9f643c5fa0 R15: 00007ffd12f126b8 [ 41.878759][ T3807] [ 42.085308][ T3810] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 42.441247][ T3826] loop1: detected capacity change from 0 to 32768 [ 42.480197][ T3826] loop1: p1 p2 p3 < p5 p6 > [ 42.491138][ T3826] loop1: p2 size 16775168 extends beyond EOD, truncated [ 42.514654][ T3826] loop1: p5 start 4294970168 is beyond EOD, truncated [ 42.622479][ T3826] capability: warning: `syz.1.131' uses 32-bit capabilities (legacy support in use) [ 42.633051][ T3826] netlink: 'syz.1.131': attribute type 298 has an invalid length. [ 42.751002][ T3838] hub 6-0:1.0: USB hub found [ 42.755870][ T3838] hub 6-0:1.0: 8 ports detected [ 42.776585][ T3840] loop1: detected capacity change from 0 to 2048 [ 42.783320][ T3838] loop0: detected capacity change from 0 to 2048 [ 42.819961][ T3840] Alternate GPT is invalid, using primary GPT. [ 42.826406][ T3840] loop1: p2 p3 p7 [ 42.837342][ T3844] FAULT_INJECTION: forcing a failure. [ 42.837342][ T3844] name failslab, interval 1, probability 0, space 0, times 0 [ 42.850054][ T3844] CPU: 1 UID: 0 PID: 3844 Comm: syz.2.139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.850120][ T3844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.850135][ T3844] Call Trace: [ 42.850143][ T3844] [ 42.850152][ T3844] __dump_stack+0x1d/0x30 [ 42.850178][ T3844] dump_stack_lvl+0xe8/0x140 [ 42.850201][ T3844] dump_stack+0x15/0x1b [ 42.850292][ T3844] should_fail_ex+0x265/0x280 [ 42.850318][ T3844] should_failslab+0x8c/0xb0 [ 42.850391][ T3844] kmem_cache_alloc_noprof+0x50/0x310 [ 42.850424][ T3844] ? audit_log_start+0x365/0x6c0 [ 42.850462][ T3844] audit_log_start+0x365/0x6c0 [ 42.850498][ T3844] audit_seccomp+0x48/0x100 [ 42.850528][ T3844] ? __seccomp_filter+0x68c/0x10d0 [ 42.850612][ T3844] __seccomp_filter+0x69d/0x10d0 [ 42.850640][ T3844] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.850671][ T3844] ? vfs_write+0x7e8/0x960 [ 42.850691][ T3844] ? __rcu_read_unlock+0x4f/0x70 [ 42.850711][ T3844] ? __fget_files+0x184/0x1c0 [ 42.850776][ T3844] __secure_computing+0x82/0x150 [ 42.850846][ T3844] syscall_trace_enter+0xcf/0x1e0 [ 42.850880][ T3844] do_syscall_64+0xac/0x200 [ 42.850909][ T3844] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.850952][ T3844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.850978][ T3844] RIP: 0033:0x7fee4b8aebe9 [ 42.850996][ T3844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.851058][ T3844] RSP: 002b:00007fee4a30f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 42.851079][ T3844] RAX: ffffffffffffffda RBX: 00007fee4bad5fa0 RCX: 00007fee4b8aebe9 [ 42.851170][ T3844] RDX: 0000000001000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.851186][ T3844] RBP: 00007fee4a30f090 R08: 0000000000000000 R09: 0000000000000000 [ 42.851201][ T3844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.851216][ T3844] R13: 00007fee4bad6038 R14: 00007fee4bad5fa0 R15: 00007ffdf3da4438 [ 42.851239][ T3844] [ 42.855588][ T3654] Alternate GPT is invalid, using primary GPT. [ 42.895202][ T3845] netlink: 'syz.1.136': attribute type 13 has an invalid length. [ 42.899837][ T3654] loop0: p2 p3 p7 [ 42.904314][ T3845] netlink: 'syz.1.136': attribute type 27 has an invalid length. [ 43.073785][ T3850] netlink: 'syz.0.137': attribute type 13 has an invalid length. [ 43.089517][ T3850] netlink: 'syz.0.137': attribute type 27 has an invalid length. [ 43.117887][ T3851] loop3: detected capacity change from 0 to 2048 [ 43.133525][ T3838] Alternate GPT is invalid, using primary GPT. [ 43.139995][ T3838] loop0: p2 p3 p7 [ 43.155158][ T3851] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.176172][ T3851] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.140: bg 0: block 120: padding at end of block bitmap is not set [ 43.266103][ T29] kauditd_printk_skb: 541 callbacks suppressed [ 43.266118][ T29] audit: type=1326 audit(1755818150.263:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 43.317653][ T29] audit: type=1326 audit(1755818150.263:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 43.341089][ T29] audit: type=1326 audit(1755818150.273:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 43.364443][ T29] audit: type=1326 audit(1755818150.273:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 43.379376][ T3654] udevd[3654]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 43.387906][ T29] audit: type=1326 audit(1755818150.273:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 43.400972][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 43.432274][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 43.457811][ T3654] udevd[3654]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 43.472510][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 43.485175][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 43.597788][ T29] audit: type=1400 audit(1755818150.593:1947): avc: denied { setopt } for pid=3869 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.617214][ T29] audit: type=1400 audit(1755818150.593:1948): avc: denied { write } for pid=3869 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.654161][ T29] audit: type=1400 audit(1755818150.643:1949): avc: denied { create } for pid=3869 comm="syz.0.148" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.675557][ T29] audit: type=1400 audit(1755818150.643:1950): avc: denied { map } for pid=3869 comm="syz.0.148" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.699682][ T29] audit: type=1400 audit(1755818150.643:1951): avc: denied { read write } for pid=3869 comm="syz.0.148" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.779988][ T3881] netlink: 'syz.2.150': attribute type 6 has an invalid length. [ 43.789076][ T3881] netlink: 'syz.2.150': attribute type 6 has an invalid length. [ 43.871840][ T3888] loop4: detected capacity change from 0 to 512 [ 43.910793][ T3888] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.953071][ T3888] EXT4-fs (loop4): mount failed [ 43.963037][ T3306] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 44.092852][ T3906] FAULT_INJECTION: forcing a failure. [ 44.092852][ T3906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.106086][ T3906] CPU: 0 UID: 0 PID: 3906 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.106111][ T3906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.106123][ T3906] Call Trace: [ 44.106129][ T3906] [ 44.106138][ T3906] __dump_stack+0x1d/0x30 [ 44.106160][ T3906] dump_stack_lvl+0xe8/0x140 [ 44.106261][ T3906] dump_stack+0x15/0x1b [ 44.106309][ T3906] should_fail_ex+0x265/0x280 [ 44.106335][ T3906] should_fail+0xb/0x20 [ 44.106357][ T3906] should_fail_usercopy+0x1a/0x20 [ 44.106381][ T3906] _copy_from_iter+0xcf/0xe40 [ 44.106405][ T3906] ? __build_skb_around+0x1a0/0x200 [ 44.106488][ T3906] ? __alloc_skb+0x223/0x320 [ 44.106569][ T3906] netlink_sendmsg+0x471/0x6b0 [ 44.106617][ T3906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.106639][ T3906] __sock_sendmsg+0x142/0x180 [ 44.106668][ T3906] ____sys_sendmsg+0x31e/0x4e0 [ 44.106692][ T3906] ___sys_sendmsg+0x17b/0x1d0 [ 44.106807][ T3906] __x64_sys_sendmsg+0xd4/0x160 [ 44.106839][ T3906] x64_sys_call+0x191e/0x2ff0 [ 44.106864][ T3906] do_syscall_64+0xd2/0x200 [ 44.106895][ T3906] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.106989][ T3906] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.107021][ T3906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.107048][ T3906] RIP: 0033:0x7fee4b8aebe9 [ 44.107079][ T3906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.107101][ T3906] RSP: 002b:00007fee4a30f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.107124][ T3906] RAX: ffffffffffffffda RBX: 00007fee4bad5fa0 RCX: 00007fee4b8aebe9 [ 44.107214][ T3906] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 44.107230][ T3906] RBP: 00007fee4a30f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.107245][ T3906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.107260][ T3906] R13: 00007fee4bad6038 R14: 00007fee4bad5fa0 R15: 00007ffdf3da4438 [ 44.107284][ T3906] [ 44.424108][ T3930] netlink: '+}[@': attribute type 20 has an invalid length. [ 44.431760][ T3930] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 44.495716][ T3938] loop3: detected capacity change from 0 to 512 [ 44.534340][ T3938] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.568058][ T3948] GUP no longer grows the stack in syz.2.176 (3948): 200000004000-200000008000 (200000002000) [ 44.578440][ T3948] CPU: 1 UID: 0 PID: 3948 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.578476][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.578520][ T3948] Call Trace: [ 44.578528][ T3948] [ 44.578538][ T3948] __dump_stack+0x1d/0x30 [ 44.578565][ T3948] dump_stack_lvl+0xe8/0x140 [ 44.578591][ T3948] dump_stack+0x15/0x1b [ 44.578611][ T3948] __get_user_pages+0x198d/0x1fa0 [ 44.578642][ T3948] ? __rcu_read_unlock+0x4f/0x70 [ 44.578670][ T3948] get_user_pages_remote+0x1d5/0x6d0 [ 44.578722][ T3948] __access_remote_vm+0x15c/0x590 [ 44.578825][ T3948] access_remote_vm+0x32/0x40 [ 44.578856][ T3948] proc_pid_cmdline_read+0x32b/0x6c0 [ 44.578914][ T3948] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 44.578947][ T3948] vfs_readv+0x3fb/0x690 [ 44.578986][ T3948] __x64_sys_preadv+0xfd/0x1c0 [ 44.579011][ T3948] x64_sys_call+0x282a/0x2ff0 [ 44.579106][ T3948] do_syscall_64+0xd2/0x200 [ 44.579140][ T3948] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.579169][ T3948] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.579201][ T3948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.579236][ T3948] RIP: 0033:0x7fee4b8aebe9 [ 44.579251][ T3948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.579268][ T3948] RSP: 002b:00007fee4a30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 44.579287][ T3948] RAX: ffffffffffffffda RBX: 00007fee4bad5fa0 RCX: 00007fee4b8aebe9 [ 44.579300][ T3948] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000006 [ 44.579315][ T3948] RBP: 00007fee4b931e19 R08: 0000000000000200 R09: 0000000000000000 [ 44.579330][ T3948] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 44.579345][ T3948] R13: 00007fee4bad6038 R14: 00007fee4bad5fa0 R15: 00007ffdf3da4438 [ 44.579417][ T3948] [ 44.775024][ T3938] EXT4-fs (loop3): mount failed [ 44.807480][ T3950] loop1: detected capacity change from 0 to 2048 [ 44.921736][ T3950] Alternate GPT is invalid, using primary GPT. [ 44.928246][ T3950] loop1: p2 p3 p7 [ 45.221472][ T3949] netlink: 'syz.1.170': attribute type 13 has an invalid length. [ 45.229293][ T3949] netlink: 'syz.1.170': attribute type 27 has an invalid length. [ 45.447790][ T2993] Alternate GPT is invalid, using primary GPT. [ 45.454415][ T2993] loop1: p2 p3 p7 [ 45.522367][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 45.532187][ T3970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 45.743943][ T1780] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.752942][ T3968] netem: incorrect ge model size [ 45.758954][ T3968] netem: change failed [ 45.763123][ T1780] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.784281][ T1780] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.811000][ T1780] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.956229][ T3981] loop2: detected capacity change from 0 to 256 [ 46.002930][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 46.018183][ T3981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 46.098120][ T3992] FAULT_INJECTION: forcing a failure. [ 46.098120][ T3992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.111231][ T3992] CPU: 0 UID: 0 PID: 3992 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.111262][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.111281][ T3992] Call Trace: [ 46.111288][ T3992] [ 46.111297][ T3992] __dump_stack+0x1d/0x30 [ 46.111323][ T3992] dump_stack_lvl+0xe8/0x140 [ 46.111342][ T3992] dump_stack+0x15/0x1b [ 46.111361][ T3992] should_fail_ex+0x265/0x280 [ 46.111387][ T3992] should_fail+0xb/0x20 [ 46.111443][ T3992] should_fail_usercopy+0x1a/0x20 [ 46.111469][ T3992] _copy_from_user+0x1c/0xb0 [ 46.111500][ T3992] ___sys_sendmsg+0xc1/0x1d0 [ 46.111536][ T3992] __x64_sys_sendmsg+0xd4/0x160 [ 46.111633][ T3992] x64_sys_call+0x191e/0x2ff0 [ 46.111654][ T3992] do_syscall_64+0xd2/0x200 [ 46.111682][ T3992] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.111712][ T3992] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.111772][ T3992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.111798][ T3992] RIP: 0033:0x7f671b45ebe9 [ 46.111841][ T3992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.111858][ T3992] RSP: 002b:00007f6719ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.111937][ T3992] RAX: ffffffffffffffda RBX: 00007f671b685fa0 RCX: 00007f671b45ebe9 [ 46.111996][ T3992] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 46.112007][ T3992] RBP: 00007f6719ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 46.112018][ T3992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.112030][ T3992] R13: 00007f671b686038 R14: 00007f671b685fa0 R15: 00007ffcca41e508 [ 46.112053][ T3992] [ 46.309355][ T3995] FAULT_INJECTION: forcing a failure. [ 46.309355][ T3995] name failslab, interval 1, probability 0, space 0, times 0 [ 46.322136][ T3995] CPU: 1 UID: 0 PID: 3995 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.322168][ T3995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.322183][ T3995] Call Trace: [ 46.322190][ T3995] [ 46.322198][ T3995] __dump_stack+0x1d/0x30 [ 46.322305][ T3995] dump_stack_lvl+0xe8/0x140 [ 46.322326][ T3995] dump_stack+0x15/0x1b [ 46.322341][ T3995] should_fail_ex+0x265/0x280 [ 46.322368][ T3995] should_failslab+0x8c/0xb0 [ 46.322400][ T3995] kmem_cache_alloc_node_noprof+0x57/0x320 [ 46.322495][ T3995] ? __alloc_skb+0x101/0x320 [ 46.322585][ T3995] __alloc_skb+0x101/0x320 [ 46.322623][ T3995] ? audit_log_start+0x365/0x6c0 [ 46.322737][ T3995] audit_log_start+0x380/0x6c0 [ 46.322779][ T3995] audit_seccomp+0x48/0x100 [ 46.322818][ T3995] ? __seccomp_filter+0x68c/0x10d0 [ 46.322842][ T3995] __seccomp_filter+0x69d/0x10d0 [ 46.322865][ T3995] ? __list_add_valid_or_report+0x38/0xe0 [ 46.322949][ T3995] ? _raw_spin_unlock+0x26/0x50 [ 46.323057][ T3995] __secure_computing+0x82/0x150 [ 46.323085][ T3995] syscall_trace_enter+0xcf/0x1e0 [ 46.323114][ T3995] do_syscall_64+0xac/0x200 [ 46.323140][ T3995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.323247][ T3995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.323276][ T3995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.323375][ T3995] RIP: 0033:0x7f671b45d5fc [ 46.323394][ T3995] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 46.323415][ T3995] RSP: 002b:00007f6719ebf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.323434][ T3995] RAX: ffffffffffffffda RBX: 00007f671b685fa0 RCX: 00007f671b45d5fc [ 46.323445][ T3995] RDX: 000000000000000f RSI: 00007f6719ebf0a0 RDI: 0000000000000006 [ 46.323457][ T3995] RBP: 00007f6719ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 46.323469][ T3995] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 46.323521][ T3995] R13: 00007f671b686038 R14: 00007f671b685fa0 R15: 00007ffcca41e508 [ 46.323547][ T3995] [ 46.643526][ T4012] FAULT_INJECTION: forcing a failure. [ 46.643526][ T4012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.656716][ T4012] CPU: 1 UID: 0 PID: 4012 Comm: syz.2.200 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.656751][ T4012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.656767][ T4012] Call Trace: [ 46.656775][ T4012] [ 46.656782][ T4012] __dump_stack+0x1d/0x30 [ 46.656804][ T4012] dump_stack_lvl+0xe8/0x140 [ 46.656867][ T4012] dump_stack+0x15/0x1b [ 46.656884][ T4012] should_fail_ex+0x265/0x280 [ 46.656906][ T4012] should_fail+0xb/0x20 [ 46.656923][ T4012] should_fail_usercopy+0x1a/0x20 [ 46.656945][ T4012] _copy_from_user+0x1c/0xb0 [ 46.657026][ T4012] ucma_write+0xd9/0x250 [ 46.657047][ T4012] ? __pfx_ucma_write+0x10/0x10 [ 46.657086][ T4012] vfs_write+0x269/0x960 [ 46.657108][ T4012] ? __rcu_read_unlock+0x4f/0x70 [ 46.657203][ T4012] ? __fget_files+0x184/0x1c0 [ 46.657230][ T4012] ksys_write+0xda/0x1a0 [ 46.657300][ T4012] __x64_sys_write+0x40/0x50 [ 46.657322][ T4012] x64_sys_call+0x27fe/0x2ff0 [ 46.657344][ T4012] do_syscall_64+0xd2/0x200 [ 46.657424][ T4012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.657448][ T4012] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.657473][ T4012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.657537][ T4012] RIP: 0033:0x7fee4b8aebe9 [ 46.657552][ T4012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.657570][ T4012] RSP: 002b:00007fee4a30f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.657589][ T4012] RAX: ffffffffffffffda RBX: 00007fee4bad5fa0 RCX: 00007fee4b8aebe9 [ 46.657609][ T4012] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 46.657624][ T4012] RBP: 00007fee4a30f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.657687][ T4012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.657701][ T4012] R13: 00007fee4bad6038 R14: 00007fee4bad5fa0 R15: 00007ffdf3da4438 [ 46.657722][ T4012] [ 46.854508][ T4013] hub 6-0:1.0: USB hub found [ 46.859618][ T4013] hub 6-0:1.0: 8 ports detected [ 46.888451][ T4013] loop3: detected capacity change from 0 to 2048 [ 46.901846][ T4008] bridge0: entered promiscuous mode [ 46.908686][ T4008] bridge0: port 3(macsec1) entered blocking state [ 46.915261][ T4008] bridge0: port 3(macsec1) entered disabled state [ 46.927523][ T4008] macsec1: entered allmulticast mode [ 46.932908][ T4008] bridge0: entered allmulticast mode [ 46.970579][ T4008] macsec1: left allmulticast mode [ 46.975664][ T4008] bridge0: left allmulticast mode [ 46.981902][ T4008] bridge0: left promiscuous mode [ 46.999329][ T4013] Alternate GPT is invalid, using primary GPT. [ 47.005734][ T4013] loop3: p2 p3 p7 [ 47.082122][ T4028] loop2: detected capacity change from 0 to 512 [ 47.114247][ T4028] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.176288][ T4028] EXT4-fs (loop2): mount failed [ 47.263555][ T4036] loop4: detected capacity change from 0 to 512 [ 47.299977][ T4036] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.346121][ T4036] EXT4-fs (loop4): mount failed [ 47.378964][ T4044] FAULT_INJECTION: forcing a failure. [ 47.378964][ T4044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.392110][ T4044] CPU: 0 UID: 0 PID: 4044 Comm: syz.1.208 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.392201][ T4044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.392264][ T4044] Call Trace: [ 47.392270][ T4044] [ 47.392278][ T4044] __dump_stack+0x1d/0x30 [ 47.392301][ T4044] dump_stack_lvl+0xe8/0x140 [ 47.392373][ T4044] dump_stack+0x15/0x1b [ 47.392389][ T4044] should_fail_ex+0x265/0x280 [ 47.392413][ T4044] should_fail+0xb/0x20 [ 47.392432][ T4044] should_fail_usercopy+0x1a/0x20 [ 47.392478][ T4044] _copy_from_user+0x1c/0xb0 [ 47.392512][ T4044] ___sys_sendmsg+0xc1/0x1d0 [ 47.392552][ T4044] __x64_sys_sendmsg+0xd4/0x160 [ 47.392607][ T4044] x64_sys_call+0x191e/0x2ff0 [ 47.392627][ T4044] do_syscall_64+0xd2/0x200 [ 47.392657][ T4044] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.392685][ T4044] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.392750][ T4044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.392775][ T4044] RIP: 0033:0x7f6a1c9febe9 [ 47.392792][ T4044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.392813][ T4044] RSP: 002b:00007f6a1b467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.392834][ T4044] RAX: ffffffffffffffda RBX: 00007f6a1cc25fa0 RCX: 00007f6a1c9febe9 [ 47.392922][ T4044] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 47.392936][ T4044] RBP: 00007f6a1b467090 R08: 0000000000000000 R09: 0000000000000000 [ 47.392950][ T4044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.392964][ T4044] R13: 00007f6a1cc26038 R14: 00007f6a1cc25fa0 R15: 00007fff6a565ee8 [ 47.392986][ T4044] [ 47.656209][ T4046] FAULT_INJECTION: forcing a failure. [ 47.656209][ T4046] name failslab, interval 1, probability 0, space 0, times 0 [ 47.669120][ T4046] CPU: 0 UID: 0 PID: 4046 Comm: syz.4.210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.669222][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.669234][ T4046] Call Trace: [ 47.669239][ T4046] [ 47.669246][ T4046] __dump_stack+0x1d/0x30 [ 47.669271][ T4046] dump_stack_lvl+0xe8/0x140 [ 47.669294][ T4046] dump_stack+0x15/0x1b [ 47.669375][ T4046] should_fail_ex+0x265/0x280 [ 47.669406][ T4046] should_failslab+0x8c/0xb0 [ 47.669430][ T4046] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 47.669463][ T4046] ? __kthread_create_on_node+0xcb/0x230 [ 47.669575][ T4046] kvasprintf+0x8a/0x110 [ 47.669612][ T4046] ? __pfx_cpu_map_kthread_run+0x10/0x10 [ 47.669710][ T4046] __kthread_create_on_node+0xcb/0x230 [ 47.669751][ T4046] ? __pfx_cpu_map_kthread_run+0x10/0x10 [ 47.669817][ T4046] kthread_create_on_node+0x89/0xc0 [ 47.669883][ T4046] cpu_map_update_elem+0x685/0x800 [ 47.669970][ T4046] bpf_map_update_value+0x199/0x3a0 [ 47.670024][ T4046] map_update_elem+0x41a/0x520 [ 47.670063][ T4046] __sys_bpf+0x571/0x7b0 [ 47.670097][ T4046] __x64_sys_bpf+0x41/0x50 [ 47.670185][ T4046] x64_sys_call+0x2aea/0x2ff0 [ 47.670214][ T4046] do_syscall_64+0xd2/0x200 [ 47.670317][ T4046] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.670412][ T4046] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.670443][ T4046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.670468][ T4046] RIP: 0033:0x7f9f6419ebe9 [ 47.670487][ T4046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.670526][ T4046] RSP: 002b:00007f9f62c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.670549][ T4046] RAX: ffffffffffffffda RBX: 00007f9f643c5fa0 RCX: 00007f9f6419ebe9 [ 47.670637][ T4046] RDX: 0000000000000020 RSI: 0000200000000a80 RDI: 0000000000000002 [ 47.670651][ T4046] RBP: 00007f9f62c07090 R08: 0000000000000000 R09: 0000000000000000 [ 47.670664][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.670678][ T4046] R13: 00007f9f643c6038 R14: 00007f9f643c5fa0 R15: 00007ffd12f126b8 [ 47.670779][ T4046] [ 48.100615][ T4051] netlink: 256 bytes leftover after parsing attributes in process `syz.4.211'. [ 48.135543][ T4051] loop4: detected capacity change from 0 to 1024 [ 48.155869][ T4051] ext2: Unknown parameter 'uid>00000000000000000000' [ 48.271742][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 48.271758][ T29] audit: type=1326 audit(1755818155.273:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 48.333108][ T29] audit: type=1326 audit(1755818155.303:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 48.339068][ T4072] process 'syz.2.219' launched './file0' with NULL argv: empty string added [ 48.356564][ T29] audit: type=1326 audit(1755818155.313:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 48.388507][ T29] audit: type=1326 audit(1755818155.313:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 48.411239][ T29] audit: type=1326 audit(1755818155.313:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 48.434060][ T29] audit: type=1326 audit(1755818155.313:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 48.457076][ T29] audit: type=1400 audit(1755818155.313:2232): avc: denied { bind } for pid=4068 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.476250][ T29] audit: type=1326 audit(1755818155.323:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4067 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87e87debe9 code=0x7ffc0000 [ 48.498911][ T29] audit: type=1400 audit(1755818155.323:2234): avc: denied { create } for pid=4067 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.517858][ T29] audit: type=1400 audit(1755818155.333:2235): avc: denied { write } for pid=4068 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.699312][ T4079] ªªªªªª: renamed from vlan0 (while UP) [ 48.903733][ T4101] validate_nla: 3 callbacks suppressed [ 48.903749][ T4101] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 48.909311][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac33c00: rx timeout, send abort [ 48.925429][ T4101] netlink: 40 bytes leftover after parsing attributes in process `syz.1.231'. [ 48.939652][ T4097] hub 6-0:1.0: USB hub found [ 48.944415][ T4097] hub 6-0:1.0: 8 ports detected [ 48.970595][ T4097] loop3: detected capacity change from 0 to 2048 [ 48.984229][ T4107] loop0: detected capacity change from 0 to 512 [ 48.992255][ T4108] loop4: detected capacity change from 0 to 128 [ 48.999021][ T4107] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.014878][ T4108] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.027362][ T4108] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.031037][ T3295] Alternate GPT is invalid, using primary GPT. [ 49.044059][ T3295] loop3: p2 p3 p7 [ 49.052211][ T4108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 49.070089][ T4107] EXT4-fs (loop0): mount failed [ 49.089974][ T4097] Alternate GPT is invalid, using primary GPT. [ 49.096399][ T4097] loop3: p2 p3 p7 [ 49.178218][ T4117] netlink: 'syz.3.227': attribute type 13 has an invalid length. [ 49.186136][ T4117] netlink: 'syz.3.227': attribute type 27 has an invalid length. [ 49.409348][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac33c00: abort rx timeout. Force session deactivation [ 49.553242][ T4133] blktrace: Concurrent blktraces are not allowed on loop3 [ 49.752660][ T4141] loop1: detected capacity change from 0 to 128 [ 49.773135][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.812555][ T4144] loop4: detected capacity change from 0 to 512 [ 49.831299][ T4144] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.848844][ T4144] EXT4-fs (loop4): mount failed [ 49.854111][ T4141] FAT-fs (loop1): bogus logical sector size 1280 [ 49.860482][ T4141] FAT-fs (loop1): Can't find a valid FAT filesystem [ 49.901023][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac32e00: rx timeout, send abort [ 49.999469][ T4155] FAULT_INJECTION: forcing a failure. [ 49.999469][ T4155] name failslab, interval 1, probability 0, space 0, times 0 [ 50.012176][ T4155] CPU: 0 UID: 0 PID: 4155 Comm: syz.4.250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.012219][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.012305][ T4155] Call Trace: [ 50.012311][ T4155] [ 50.012317][ T4155] __dump_stack+0x1d/0x30 [ 50.012337][ T4155] dump_stack_lvl+0xe8/0x140 [ 50.012355][ T4155] dump_stack+0x15/0x1b [ 50.012373][ T4155] should_fail_ex+0x265/0x280 [ 50.012465][ T4155] ? alloc_pipe_info+0xae/0x350 [ 50.012538][ T4155] should_failslab+0x8c/0xb0 [ 50.012580][ T4155] __kmalloc_cache_noprof+0x4c/0x320 [ 50.012698][ T4155] alloc_pipe_info+0xae/0x350 [ 50.012726][ T4155] splice_direct_to_actor+0x592/0x680 [ 50.012791][ T4155] ? kstrtouint_from_user+0x9f/0xf0 [ 50.012814][ T4155] ? __pfx_direct_splice_actor+0x10/0x10 [ 50.012898][ T4155] ? __rcu_read_unlock+0x4f/0x70 [ 50.012923][ T4155] ? get_pid_task+0x96/0xd0 [ 50.012943][ T4155] ? avc_policy_seqno+0x15/0x30 [ 50.012964][ T4155] ? selinux_file_permission+0x1e4/0x320 [ 50.012984][ T4155] do_splice_direct+0xda/0x150 [ 50.013059][ T4155] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 50.013109][ T4155] do_sendfile+0x380/0x650 [ 50.013147][ T4155] __x64_sys_sendfile64+0x105/0x150 [ 50.013233][ T4155] x64_sys_call+0x2bb0/0x2ff0 [ 50.013253][ T4155] do_syscall_64+0xd2/0x200 [ 50.013298][ T4155] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.013364][ T4155] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.013388][ T4155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.013408][ T4155] RIP: 0033:0x7f9f6419ebe9 [ 50.013422][ T4155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.013482][ T4155] RSP: 002b:00007f9f62c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 50.013506][ T4155] RAX: ffffffffffffffda RBX: 00007f9f643c5fa0 RCX: 00007f9f6419ebe9 [ 50.013521][ T4155] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 50.013535][ T4155] RBP: 00007f9f62c07090 R08: 0000000000000000 R09: 0000000000000000 [ 50.013549][ T4155] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 50.013561][ T4155] R13: 00007f9f643c6038 R14: 00007f9f643c5fa0 R15: 00007ffd12f126b8 [ 50.013595][ T4155] [ 50.289416][ T4163] FAULT_INJECTION: forcing a failure. [ 50.289416][ T4163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.302630][ T4163] CPU: 1 UID: 0 PID: 4163 Comm: syz.0.252 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.302664][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.302730][ T4163] Call Trace: [ 50.302736][ T4163] [ 50.302743][ T4163] __dump_stack+0x1d/0x30 [ 50.302770][ T4163] dump_stack_lvl+0xe8/0x140 [ 50.302794][ T4163] dump_stack+0x15/0x1b [ 50.302814][ T4163] should_fail_ex+0x265/0x280 [ 50.302851][ T4163] should_fail+0xb/0x20 [ 50.302872][ T4163] should_fail_usercopy+0x1a/0x20 [ 50.302899][ T4163] _copy_from_user+0x1c/0xb0 [ 50.302933][ T4163] btf_new_fd+0x20a/0x790 [ 50.302960][ T4163] bpf_btf_load+0x112/0x130 [ 50.303065][ T4163] __sys_bpf+0x352/0x7b0 [ 50.303099][ T4163] __x64_sys_bpf+0x41/0x50 [ 50.303126][ T4163] x64_sys_call+0x2aea/0x2ff0 [ 50.303149][ T4163] do_syscall_64+0xd2/0x200 [ 50.303243][ T4163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.303327][ T4163] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.303428][ T4163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.303520][ T4163] RIP: 0033:0x7f671b45ebe9 [ 50.303539][ T4163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.303561][ T4163] RSP: 002b:00007f6719ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.303585][ T4163] RAX: ffffffffffffffda RBX: 00007f671b685fa0 RCX: 00007f671b45ebe9 [ 50.303600][ T4163] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000012 [ 50.303615][ T4163] RBP: 00007f6719ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 50.303650][ T4163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.303666][ T4163] R13: 00007f671b686038 R14: 00007f671b685fa0 R15: 00007ffcca41e508 [ 50.303689][ T4163] [ 50.384987][ T4170] syzkaller0: refused to change device tx_queue_len [ 50.409575][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ac32e00: abort rx timeout. Force session deactivation [ 50.581411][ T4185] FAULT_INJECTION: forcing a failure. [ 50.581411][ T4185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 50.594712][ T4185] CPU: 0 UID: 0 PID: 4185 Comm: syz.0.255 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.594739][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.594825][ T4185] Call Trace: [ 50.594834][ T4185] [ 50.594909][ T4185] __dump_stack+0x1d/0x30 [ 50.594937][ T4185] dump_stack_lvl+0xe8/0x140 [ 50.594961][ T4185] dump_stack+0x15/0x1b [ 50.594982][ T4185] should_fail_ex+0x265/0x280 [ 50.595058][ T4185] should_fail_alloc_page+0xf2/0x100 [ 50.595182][ T4185] __alloc_frozen_pages_noprof+0xff/0x360 [ 50.595228][ T4185] alloc_pages_mpol+0xb3/0x250 [ 50.595271][ T4185] vma_alloc_folio_noprof+0x1aa/0x300 [ 50.595383][ T4185] do_wp_page+0x5db/0x24e0 [ 50.595412][ T4185] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 50.595472][ T4185] ? css_rstat_updated+0xb7/0x240 [ 50.595503][ T4185] ? __rcu_read_lock+0x37/0x50 [ 50.595533][ T4185] handle_mm_fault+0x77d/0x2c20 [ 50.595574][ T4185] do_user_addr_fault+0x636/0x1090 [ 50.595628][ T4185] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 50.595671][ T4185] exc_page_fault+0x62/0xa0 [ 50.595836][ T4185] asm_exc_page_fault+0x26/0x30 [ 50.595905][ T4185] RIP: 0033:0x7f671b320ba3 [ 50.595922][ T4185] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 50.595945][ T4185] RSP: 002b:00007f6719e9d4a0 EFLAGS: 00010202 [ 50.595965][ T4185] RAX: 0000000000000400 RBX: 00007f6719e9d540 RCX: 00007f6711a7e000 [ 50.596012][ T4185] RDX: 00007f6719e9d6e0 RSI: 0000000000000001 RDI: 00007f6719e9d5e0 [ 50.596028][ T4185] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000ac [ 50.596120][ T4185] R10: 00000000000000c0 R11: 00007f6719e9d540 R12: 0000000000000001 [ 50.596136][ T4185] R13: 00007f671b4fda20 R14: 0000000000000020 R15: 00007f6719e9d5e0 [ 50.596160][ T4185] [ 50.596171][ T4185] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 50.853182][ T4185] loop0: detected capacity change from 0 to 1024 [ 50.861400][ T4185] EXT4-fs: inline encryption not supported [ 50.867392][ T4185] EXT4-fs: Ignoring removed i_version option [ 50.924779][ T4185] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.954905][ T4185] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.255: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.970156][ T4185] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.255: Failed to acquire dquot type 0 [ 50.981737][ T4185] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.255: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.995372][ T4185] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.255: Invalid inode bitmap blk 0 in block_group 0 [ 51.011204][ T4185] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 51.020061][ T12] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.021234][ T4185] EXT4-fs (loop0): 1 orphan inode deleted [ 51.035759][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 51.108103][ T4185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.124558][ T4185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.187826][ T4176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.422828][ T4228] loop4: detected capacity change from 0 to 512 [ 51.472205][ T4228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.567762][ T4228] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.690718][ T4236] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 51.712435][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.763267][ T4243] FAULT_INJECTION: forcing a failure. [ 51.763267][ T4243] name failslab, interval 1, probability 0, space 0, times 0 [ 51.775989][ T4243] CPU: 0 UID: 0 PID: 4243 Comm: syz.4.276 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.776023][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.776039][ T4243] Call Trace: [ 51.776045][ T4243] [ 51.776067][ T4243] __dump_stack+0x1d/0x30 [ 51.776088][ T4243] dump_stack_lvl+0xe8/0x140 [ 51.776130][ T4243] dump_stack+0x15/0x1b [ 51.776146][ T4243] should_fail_ex+0x265/0x280 [ 51.776255][ T4243] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 51.776286][ T4243] should_failslab+0x8c/0xb0 [ 51.776309][ T4243] __kmalloc_cache_noprof+0x4c/0x320 [ 51.776345][ T4243] ? sock_create_kern+0x38/0x50 [ 51.776434][ T4243] selinux_netlbl_sock_genattr+0x88/0x260 [ 51.776491][ T4243] selinux_netlbl_socket_post_create+0x68/0x100 [ 51.776528][ T4243] selinux_socket_post_create+0x214/0x2a0 [ 51.776567][ T4243] security_socket_post_create+0x5d/0xb0 [ 51.776605][ T4243] __sock_create+0x362/0x5b0 [ 51.776639][ T4243] sock_create_kern+0x38/0x50 [ 51.776666][ T4243] start_sync_thread+0x8ff/0x1650 [ 51.776693][ T4243] ? __pfx_sync_thread_backup+0x10/0x10 [ 51.776798][ T4243] ip_vs_genl_set_daemon+0x44c/0x490 [ 51.776839][ T4243] genl_family_rcv_msg_doit+0x143/0x1b0 [ 51.776953][ T4243] genl_rcv_msg+0x422/0x460 [ 51.776980][ T4243] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 51.777019][ T4243] netlink_rcv_skb+0x123/0x220 [ 51.777041][ T4243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 51.777142][ T4243] genl_rcv+0x28/0x40 [ 51.777167][ T4243] netlink_unicast+0x5bd/0x690 [ 51.777200][ T4243] netlink_sendmsg+0x58b/0x6b0 [ 51.777286][ T4243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.777313][ T4243] __sock_sendmsg+0x142/0x180 [ 51.777433][ T4243] ____sys_sendmsg+0x31e/0x4e0 [ 51.777459][ T4243] ___sys_sendmsg+0x17b/0x1d0 [ 51.777502][ T4243] __x64_sys_sendmsg+0xd4/0x160 [ 51.777534][ T4243] x64_sys_call+0x191e/0x2ff0 [ 51.777561][ T4243] do_syscall_64+0xd2/0x200 [ 51.777600][ T4243] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.777666][ T4243] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.777808][ T4243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.777833][ T4243] RIP: 0033:0x7f9f6419ebe9 [ 51.777852][ T4243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.777874][ T4243] RSP: 002b:00007f9f62c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.777940][ T4243] RAX: ffffffffffffffda RBX: 00007f9f643c5fa0 RCX: 00007f9f6419ebe9 [ 51.777953][ T4243] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 51.777968][ T4243] RBP: 00007f9f62c07090 R08: 0000000000000000 R09: 0000000000000000 [ 51.777983][ T4243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.778026][ T4243] R13: 00007f9f643c6038 R14: 00007f9f643c5fa0 R15: 00007ffd12f126b8 [ 51.778045][ T4243] [ 52.063228][ T4240] loop1: detected capacity change from 0 to 512 [ 52.064885][ T4243] IPVS: Error during creation of socket; terminating [ 52.088920][ T4240] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.148059][ T4240] EXT4-fs (loop1): mount failed [ 52.360931][ T4272] loop3: detected capacity change from 0 to 512 [ 52.367576][ T4272] EXT4-fs: Ignoring removed i_version option [ 52.427278][ T4272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.448987][ T4272] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.523695][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.612130][ T4303] loop4: detected capacity change from 0 to 512 [ 52.631704][ T4307] loop3: detected capacity change from 0 to 256 [ 52.642010][ T4303] loop4: detected capacity change from 0 to 512 [ 52.653735][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 52.680004][ T4309] FAULT_INJECTION: forcing a failure. [ 52.680004][ T4309] name failslab, interval 1, probability 0, space 0, times 0 [ 52.692869][ T4309] CPU: 0 UID: 0 PID: 4309 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.692901][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.692915][ T4309] Call Trace: [ 52.692922][ T4309] [ 52.693009][ T4309] __dump_stack+0x1d/0x30 [ 52.693035][ T4309] dump_stack_lvl+0xe8/0x140 [ 52.693056][ T4309] dump_stack+0x15/0x1b [ 52.693075][ T4309] should_fail_ex+0x265/0x280 [ 52.693100][ T4309] should_failslab+0x8c/0xb0 [ 52.693205][ T4309] kmem_cache_alloc_node_noprof+0x57/0x320 [ 52.693238][ T4309] ? __alloc_skb+0x101/0x320 [ 52.693347][ T4309] __alloc_skb+0x101/0x320 [ 52.693451][ T4309] ? audit_log_start+0x365/0x6c0 [ 52.693554][ T4309] audit_log_start+0x380/0x6c0 [ 52.693615][ T4309] audit_seccomp+0x48/0x100 [ 52.693643][ T4309] ? __seccomp_filter+0x68c/0x10d0 [ 52.693663][ T4309] __seccomp_filter+0x69d/0x10d0 [ 52.693704][ T4309] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 52.693735][ T4309] ? vfs_write+0x7e8/0x960 [ 52.693772][ T4309] ? __rcu_read_unlock+0x4f/0x70 [ 52.693792][ T4309] ? __fget_files+0x184/0x1c0 [ 52.693817][ T4309] __secure_computing+0x82/0x150 [ 52.693853][ T4309] syscall_trace_enter+0xcf/0x1e0 [ 52.693880][ T4309] do_syscall_64+0xac/0x200 [ 52.693909][ T4309] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.693933][ T4309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.693992][ T4309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.694014][ T4309] RIP: 0033:0x7f671b45ebe9 [ 52.694029][ T4309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.694047][ T4309] RSP: 002b:00007f6719ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 52.694064][ T4309] RAX: ffffffffffffffda RBX: 00007f671b685fa0 RCX: 00007f671b45ebe9 [ 52.694123][ T4309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.694137][ T4309] RBP: 00007f6719ebf090 R08: 0000000000002000 R09: 0000000000000000 [ 52.694151][ T4309] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 52.694164][ T4309] R13: 00007f671b686038 R14: 00007f671b685fa0 R15: 00007ffcca41e508 [ 52.694187][ T4309] [ 53.165909][ T4351] veth1_to_bridge: entered promiscuous mode [ 53.187781][ T4351] veth1_to_bridge: left promiscuous mode [ 53.224476][ T4357] netlink: 'syz.0.316': attribute type 13 has an invalid length. [ 53.273544][ T4351] loop4: detected capacity change from 0 to 8192 [ 53.280177][ T4357] gretap0: refused to change device tx_queue_len [ 53.292905][ T4357] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 53.319801][ T4361] syzkaller0: entered promiscuous mode [ 53.325341][ T4361] syzkaller0: entered allmulticast mode [ 53.339520][ T4363] FAULT_INJECTION: forcing a failure. [ 53.339520][ T4363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.352641][ T4363] CPU: 0 UID: 0 PID: 4363 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.352731][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.352742][ T4363] Call Trace: [ 53.352749][ T4363] [ 53.352779][ T4363] __dump_stack+0x1d/0x30 [ 53.352804][ T4363] dump_stack_lvl+0xe8/0x140 [ 53.352827][ T4363] dump_stack+0x15/0x1b [ 53.352845][ T4363] should_fail_ex+0x265/0x280 [ 53.352870][ T4363] should_fail+0xb/0x20 [ 53.352949][ T4363] should_fail_usercopy+0x1a/0x20 [ 53.353048][ T4363] _copy_from_user+0x1c/0xb0 [ 53.353083][ T4363] ___sys_sendmsg+0xc1/0x1d0 [ 53.353123][ T4363] __x64_sys_sendmsg+0xd4/0x160 [ 53.353153][ T4363] x64_sys_call+0x191e/0x2ff0 [ 53.353220][ T4363] do_syscall_64+0xd2/0x200 [ 53.353245][ T4363] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.353340][ T4363] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.353370][ T4363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.353395][ T4363] RIP: 0033:0x7f87e87debe9 [ 53.353412][ T4363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.353431][ T4363] RSP: 002b:00007f87e7247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.353449][ T4363] RAX: ffffffffffffffda RBX: 00007f87e8a05fa0 RCX: 00007f87e87debe9 [ 53.353470][ T4363] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 53.353481][ T4363] RBP: 00007f87e7247090 R08: 0000000000000000 R09: 0000000000000000 [ 53.353492][ T4363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.353505][ T4363] R13: 00007f87e8a06038 R14: 00007f87e8a05fa0 R15: 00007ffdde377328 [ 53.353555][ T4363] [ 53.564296][ T4351] loop4: p1 p2 p3 p4 [ 53.573513][ T4351] loop4: p2 size 13315 extends beyond EOD, truncated [ 53.575980][ T4376] loop0: detected capacity change from 0 to 256 [ 53.593628][ T4351] loop4: p3 start 331777 is beyond EOD, truncated [ 53.600169][ T4351] loop4: p4 size 262144 extends beyond EOD, truncated [ 53.640294][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 53.640313][ T29] audit: type=1400 audit(1755818160.643:2454): avc: denied { ioctl } for pid=4315 comm="syz.2.305" path="socket:[8469]" dev="sockfs" ino=8469 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.704571][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.323'. [ 53.756842][ T29] audit: type=1400 audit(1755818160.753:2455): avc: denied { write } for pid=4390 comm="syz.3.327" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.804761][ T29] audit: type=1400 audit(1755818160.753:2456): avc: denied { block_suspend } for pid=4390 comm="syz.3.327" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.838105][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 53.839462][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 53.860505][ T4383] udevd[4383]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 53.879048][ T4395] loop2: detected capacity change from 0 to 1024 [ 53.886242][ T4395] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 53.896331][ T4395] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.907303][ T4395] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 53.925053][ T4395] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.964799][ T4395] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #17: comm syz.2.328: iget: bad i_size value: 4398046511204 [ 53.980044][ T4395] EXT4-fs (loop2): no journal found [ 54.079871][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 54.122150][ T4417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 54.131428][ T29] audit: type=1326 audit(1755818161.133:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 54.155083][ T29] audit: type=1326 audit(1755818161.133:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 54.178497][ T29] audit: type=1326 audit(1755818161.133:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 54.201947][ T29] audit: type=1326 audit(1755818161.133:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 54.225418][ T29] audit: type=1326 audit(1755818161.133:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 54.249741][ T29] audit: type=1326 audit(1755818161.133:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 54.273153][ T29] audit: type=1326 audit(1755818161.133:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee4b8aebe9 code=0x7ffc0000 [ 54.452104][ T4426] hub 6-0:1.0: USB hub found [ 54.456834][ T4426] hub 6-0:1.0: 8 ports detected [ 54.508941][ T4426] loop2: detected capacity change from 0 to 2048 [ 54.573591][ T4426] Alternate GPT is invalid, using primary GPT. [ 54.579419][ T4441] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 54.580229][ T4426] loop2: p2 p3 p7 [ 54.599837][ T4439] SELinux: policydb version -428576896 does not match my version range 15-35 [ 54.617152][ T4439] SELinux: failed to load policy [ 54.679738][ T4445] loop4: detected capacity change from 0 to 256 [ 54.715940][ T4448] netlink: 'syz.2.340': attribute type 13 has an invalid length. [ 54.723801][ T4448] netlink: 'syz.2.340': attribute type 27 has an invalid length. [ 54.855799][ T4461] loop4: detected capacity change from 0 to 256 [ 54.889802][ T4464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 55.215054][ T4479] loop1: detected capacity change from 0 to 512 [ 55.224046][ T4479] EXT4-fs: Ignoring removed oldalloc option [ 55.258065][ T4479] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.285545][ T4479] EXT4-fs (loop1): 1 truncate cleaned up [ 55.306762][ T4479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.467714][ T4426] syz.2.340 (4426) used greatest stack depth: 6416 bytes left [ 55.476788][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.501482][ T4491] FAULT_INJECTION: forcing a failure. [ 55.501482][ T4491] name failslab, interval 1, probability 0, space 0, times 0 [ 55.514239][ T4491] CPU: 0 UID: 0 PID: 4491 Comm: syz.1.367 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.514345][ T4491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.514358][ T4491] Call Trace: [ 55.514364][ T4491] [ 55.514370][ T4491] __dump_stack+0x1d/0x30 [ 55.514388][ T4491] dump_stack_lvl+0xe8/0x140 [ 55.514408][ T4491] dump_stack+0x15/0x1b [ 55.514427][ T4491] should_fail_ex+0x265/0x280 [ 55.514544][ T4491] should_failslab+0x8c/0xb0 [ 55.514572][ T4491] kmem_cache_alloc_noprof+0x50/0x310 [ 55.514602][ T4491] ? skb_clone+0x151/0x1f0 [ 55.514643][ T4491] skb_clone+0x151/0x1f0 [ 55.514661][ T4491] __netlink_deliver_tap+0x2c9/0x500 [ 55.514685][ T4491] netlink_unicast+0x66b/0x690 [ 55.514724][ T4491] netlink_sendmsg+0x58b/0x6b0 [ 55.514751][ T4491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.514844][ T4491] __sock_sendmsg+0x142/0x180 [ 55.514896][ T4491] ____sys_sendmsg+0x31e/0x4e0 [ 55.514918][ T4491] ___sys_sendmsg+0x17b/0x1d0 [ 55.514975][ T4491] __x64_sys_sendmsg+0xd4/0x160 [ 55.515007][ T4491] x64_sys_call+0x191e/0x2ff0 [ 55.515067][ T4491] do_syscall_64+0xd2/0x200 [ 55.515171][ T4491] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.515247][ T4491] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.515274][ T4491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.515295][ T4491] RIP: 0033:0x7f6a1c9febe9 [ 55.515309][ T4491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.515340][ T4491] RSP: 002b:00007f6a1b467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.515357][ T4491] RAX: ffffffffffffffda RBX: 00007f6a1cc25fa0 RCX: 00007f6a1c9febe9 [ 55.515370][ T4491] RDX: 0000000004000024 RSI: 0000200000000040 RDI: 0000000000000003 [ 55.515429][ T4491] RBP: 00007f6a1b467090 R08: 0000000000000000 R09: 0000000000000000 [ 55.515440][ T4491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.515451][ T4491] R13: 00007f6a1cc26038 R14: 00007f6a1cc25fa0 R15: 00007fff6a565ee8 [ 55.515469][ T4491] [ 55.895032][ T4497] netlink: 'syz.1.370': attribute type 2 has an invalid length. [ 55.967803][ T4508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 55.976890][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 55.996226][ T4498] veth3: entered promiscuous mode [ 56.068213][ T4514] loop2: detected capacity change from 0 to 512 [ 56.075079][ T4514] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.089811][ T4514] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.108739][ T4514] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843e018, mo2=0002] [ 56.116775][ T4514] System zones: 0-2, 18-18, 34-34 [ 56.122956][ T4514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.139864][ T4514] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.190464][ T4514] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 56.208920][ T4514] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32896 with max blocks 1 with error 28 [ 56.221643][ T4514] EXT4-fs (loop2): This should not happen!! Data will be lost [ 56.221643][ T4514] [ 56.231444][ T4514] EXT4-fs (loop2): Total free blocks count 0 [ 56.237451][ T4514] EXT4-fs (loop2): Free/Dirty block details [ 56.237818][ T4522] loop0: detected capacity change from 0 to 512 [ 56.243415][ T4514] EXT4-fs (loop2): free_blocks=39626 [ 56.255007][ T4514] EXT4-fs (loop2): dirty_blocks=1 [ 56.260098][ T4514] EXT4-fs (loop2): Block reservation details [ 56.266102][ T4514] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 56.279523][ T4522] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.297680][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 56.310908][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.318211][ T4522] EXT4-fs (loop0): mount failed [ 56.640675][ T4553] loop4: detected capacity change from 0 to 512 [ 56.666553][ T4553] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.689390][ T4553] EXT4-fs (loop4): mount failed [ 56.828165][ T4568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.393'. [ 56.839181][ T4568] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 56.906317][ T4577] FAULT_INJECTION: forcing a failure. [ 56.906317][ T4577] name failslab, interval 1, probability 0, space 0, times 0 [ 56.919212][ T4577] CPU: 0 UID: 0 PID: 4577 Comm: syz.0.397 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.919313][ T4577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.919328][ T4577] Call Trace: [ 56.919336][ T4577] [ 56.919345][ T4577] __dump_stack+0x1d/0x30 [ 56.919376][ T4577] dump_stack_lvl+0xe8/0x140 [ 56.919438][ T4577] dump_stack+0x15/0x1b [ 56.919452][ T4577] should_fail_ex+0x265/0x280 [ 56.919470][ T4577] ? newseg+0x17a/0x670 [ 56.919528][ T4577] should_failslab+0x8c/0xb0 [ 56.919550][ T4577] __kmalloc_cache_noprof+0x4c/0x320 [ 56.919575][ T4577] ? get_pid_task+0x96/0xd0 [ 56.919651][ T4577] newseg+0x17a/0x670 [ 56.919678][ T4577] ipcget+0x33a/0x4f0 [ 56.919740][ T4577] __x64_sys_shmget+0xa5/0xd0 [ 56.919768][ T4577] x64_sys_call+0x2cef/0x2ff0 [ 56.919786][ T4577] do_syscall_64+0xd2/0x200 [ 56.919809][ T4577] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.919829][ T4577] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.919865][ T4577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.919894][ T4577] RIP: 0033:0x7f671b45ebe9 [ 56.919939][ T4577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.919961][ T4577] RSP: 002b:00007f6719ebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 56.919982][ T4577] RAX: ffffffffffffffda RBX: 00007f671b685fa0 RCX: 00007f671b45ebe9 [ 56.919999][ T4577] RDX: 0000000000001000 RSI: 0000000000004000 RDI: 0000000000000000 [ 56.920010][ T4577] RBP: 00007f6719ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 56.920021][ T4577] R10: 0000200000ffb000 R11: 0000000000000246 R12: 0000000000000001 [ 56.920032][ T4577] R13: 00007f671b686038 R14: 00007f671b685fa0 R15: 00007ffcca41e508 [ 56.920050][ T4577] [ 57.120590][ T4583] macvlan2: entered promiscuous mode [ 57.151339][ T4589] loop4: detected capacity change from 0 to 512 [ 57.158373][ T4591] loop0: detected capacity change from 0 to 256 [ 57.181749][ T4589] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.197328][ T4589] EXT4-fs (loop4): mount failed [ 57.204686][ T2993] ================================================================== [ 57.212801][ T2993] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 57.219594][ T2993] [ 57.221932][ T2993] write to 0xffff88810237da18 of 8 bytes by task 4589 on cpu 1: [ 57.229583][ T2993] inc_diskseq+0x2d/0x40 [ 57.233859][ T2993] disk_force_media_change+0x9e/0xe0 [ 57.239174][ T2993] lo_release+0x2cb/0x400 [ 57.243520][ T2993] bdev_release+0x373/0x3d0 [ 57.248031][ T2993] blkdev_release+0x15/0x20 [ 57.252560][ T2993] __fput+0x298/0x650 [ 57.256555][ T2993] fput_close_sync+0x6e/0x120 [ 57.261379][ T2993] __x64_sys_close+0x56/0xf0 [ 57.265973][ T2993] x64_sys_call+0x2738/0x2ff0 [ 57.270678][ T2993] do_syscall_64+0xd2/0x200 [ 57.275211][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.281107][ T2993] [ 57.283431][ T2993] read to 0xffff88810237da18 of 8 bytes by task 2993 on cpu 0: [ 57.291064][ T2993] block_uevent+0x31/0x50 [ 57.295416][ T2993] dev_uevent+0x372/0x400 [ 57.299766][ T2993] uevent_show+0x117/0x200 [ 57.304201][ T2993] dev_attr_show+0x3c/0xa0 [ 57.308629][ T2993] sysfs_kf_seq_show+0x1a3/0x280 [ 57.313570][ T2993] kernfs_seq_show+0x82/0xa0 [ 57.318179][ T2993] seq_read_iter+0x319/0x940 [ 57.322785][ T2993] kernfs_fop_read_iter+0xc4/0x300 [ 57.327908][ T2993] vfs_read+0x649/0x770 [ 57.332075][ T2993] ksys_read+0xda/0x1a0 [ 57.336236][ T2993] __x64_sys_read+0x40/0x50 [ 57.340743][ T2993] x64_sys_call+0x27bc/0x2ff0 [ 57.345436][ T2993] do_syscall_64+0xd2/0x200 [ 57.349961][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.355862][ T2993] [ 57.358185][ T2993] value changed: 0x0000000000000076 -> 0x0000000000000078 [ 57.365294][ T2993] [ 57.367621][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 57.373775][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.383063][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.393208][ T2993] ==================================================================