last executing test programs: 37.130867542s ago: executing program 4 (id=100): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x404, 0x9, 0xb, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0xc, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 36.712698074s ago: executing program 4 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b"], 0x28}}, 0x50) r3 = syz_pidfd_open(0x0, 0x0) socket(0x10, 0x3, 0x9) fremovexattr(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="6f73322e6b6672656500b65091c9aa91fa3e2ac021ffa738afa05e791573360cce62a40924ac43d2f22c"]) 36.668087969s ago: executing program 4 (id=108): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xd) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000001000010400"/18, @ANYRES8=r0, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000800"/15, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300000001000000040000e0050300001b34ba6b471f0adc"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r2, 0x0, 0x40040) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000001203000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000b395ac5160fb2dc3"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000023c0)=r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="633e3d72be7fca4443a244050000000000000063110800000000008510000002000000850000002300000095000000000000009500a50500000000cb726f61c085aa5a5eb73d5fdac46af82b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 36.576297298s ago: executing program 4 (id=109): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180), 0x1000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 36.484541058s ago: executing program 4 (id=110): r0 = openat(0xffffffffffffffff, 0x0, 0x143042, 0x80) sendfile(r0, r0, 0x0, 0x7a680000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x5, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x4a, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x500, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x2e) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$netlink(0x10, 0x3, 0x0) 36.216391435s ago: executing program 4 (id=115): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r1, @ANYBLOB="000000000031010024001280110001006272696467655f736c617665000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe3, 0x8) write$binfmt_misc(r2, &(0x7f0000000040)="2d78d2f63f53b6bfb4d3890383ae4c1290e3cb848676d31c4eecf2232857efc2af991273d3b99fbf42c5fef45288944abd", 0x31) 36.153523971s ago: executing program 32 (id=115): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r1, @ANYBLOB="000000000031010024001280110001006272696467655f736c617665000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe3, 0x8) write$binfmt_misc(r2, &(0x7f0000000040)="2d78d2f63f53b6bfb4d3890383ae4c1290e3cb848676d31c4eecf2232857efc2af991273d3b99fbf42c5fef45288944abd", 0x31) 3.224521203s ago: executing program 3 (id=514): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfe, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000380)=""/120, &(0x7f0000000100)=0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x599, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r4}) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x6, 0x3, 0x0, [{@empty}, {@private}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @ssrr={0x89, 0x7, 0xc6, [@loopback]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f00000001c0)=0x690d, 0x0, 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa8}}, 0x0) keyctl$update(0x2, r4, &(0x7f0000000b00)="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", 0x800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7f58800008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f00000001c0)={0x2f, 0x0, 0xe06d3381b53a8b9e, 0xff}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 2.885579028s ago: executing program 5 (id=519): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="10f7e7", 0x3}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 2.832516134s ago: executing program 3 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000009}) close_range(r2, 0xffffffffffffffff, 0x0) 2.818534605s ago: executing program 5 (id=524): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r1 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000040)=0x10f78, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xb05a, &(0x7f0000000780)={[{@data_ordered}, {@mblk_io_submit}, {@inlinecrypt}]}, 0x1, 0x57c, &(0x7f0000000e80)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000e00)=ANY=[@ANYBLOB="02000000010000000000000002000500", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="12efa5ce", @ANYRES32=0x0, @ANYBLOB="040006000000000010000400000000002000030000000000"], 0x6c, 0x3) gettid() newfstatat(0xffffffffffffff9c, &(0x7f00000086c0)='./file0\x00', 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x8b, "23ebda", "07efcd073260e0efad7d3c107ccfe5cb60948fcedfc737a4d407cb236e017b75623d519252e5f914181f2de9f78caea1e35ae10cf1d0450f513126918c3fee211216aeec74fc9c52925b7a9083bc05a9677622165949e6021596f7e2fe7d6db53aedced04311001806467822759782cbae2a7ffeaca5dd78b08f16e70b007154284507c60b4ffee613c6a9fbaffde50119aac9ca70f32a64c3982bd7e1ed74b721ba4290e1b2bf642b5095b019e6e75e92b03483f33342420ee5a170b7701045929406a9442f82f578cea1bd9b1963edb7855c9a086603d70464f1605baf21bfe84ec0692f43dd2be79d33e12e513a1700"}}, 0x110) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x4000014) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001800000005000000000000000c0000001836000002000000000000000000000018470000080000000000000000000000183b00000200000000000000000000002572dfff080000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) rt_sigpending(0x0, 0x0) lstat(0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="76b34d04144e355c5923435ac53cc7852c65b30837c5cd64abe3afd6122302251ec3df43785eee3d05995b0f042975e7dd178158c141d0", @ANYBLOB="0000000000000000b702000003000000850000008600000095c43a68bbb740bcbd0783d96e5f61182cecc2377c19429a6ec4870c674f3b12c58e7d8deb479fc4518dd8e3f5f8762ddf1bc4c3f4da9d241c15dbc6808d911327bc06f947052a4d63e736d728e7dbc8735109defe6b011ebe7ab7d8156bd490f8f3396d246baef4f68661494600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x8}, 0x18) socket$igmp6(0xa, 0x3, 0x3a) utime(&(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 2.734598983s ago: executing program 3 (id=529): prlimit64(0x0, 0xc, &(0x7f0000000600)={0x8, 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() r3 = fcntl$getown(r1, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x97}, 0x18) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) tgkill(r2, r3, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/145) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000980)=""/249, 0xf9}, {&(0x7f0000000a80)=""/159, 0x9f}, {&(0x7f0000000b40)=""/152, 0x98}, {&(0x7f0000000040)=""/51, 0x33}], 0x5, &(0x7f0000000c00)=""/101, 0x65}, 0x9f41}, {{&(0x7f0000000c80)=@isdn, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d00)=""/94, 0x5e}, {&(0x7f0000000d80)=""/222, 0xde}, {&(0x7f0000000e80)=""/157, 0x9d}, {&(0x7f0000000f40)=""/69, 0x45}, {&(0x7f0000002f00)=""/228, 0xe4}, {&(0x7f00000000c0)=""/24, 0x18}], 0x6}, 0xb2d0}, {{&(0x7f0000001140)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001400)=[{&(0x7f00000011c0)=""/186, 0xba}, {&(0x7f0000001280)=""/106, 0x6a}, {&(0x7f0000001300)=""/43, 0x2b}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000001340)=""/136, 0x88}, {&(0x7f00000024c0)=""/193, 0xc1}], 0x6, &(0x7f00000025c0)=""/38, 0x26}, 0xbb}, {{&(0x7f0000002600)=@can, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)=""/63, 0x3f}, {&(0x7f00000026c0)=""/152, 0x98}, {&(0x7f0000002780)=""/179, 0xb3}], 0x3, &(0x7f0000002880)=""/11, 0xb}}, {{&(0x7f00000028c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002940)=""/185, 0xb9}, {&(0x7f0000002a00)=""/48, 0x30}, {&(0x7f0000002a40)=""/155, 0x9b}, {&(0x7f0000002b00)=""/38, 0x26}, {&(0x7f0000002b40)=""/32, 0x20}, {&(0x7f0000002b80)=""/194, 0xc2}, {&(0x7f0000002c80)=""/100, 0x64}], 0x7, &(0x7f0000002d80)=""/62, 0x3e}, 0xc4}], 0x5, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket(0x2c, 0x3, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, 0x0) epoll_wait(r9, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.680010929s ago: executing program 5 (id=530): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800"], 0x44}, 0x1, 0x2}, 0x40000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[@ANYRES64=r5], 0xe) ioctl$TCXONC(r3, 0x540a, 0x1) 2.483467778s ago: executing program 5 (id=534): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="10f7e7", 0x3}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 2.46780775s ago: executing program 5 (id=536): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, &(0x7f0000000080)=0x90) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x8}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20b01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x24000090) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x10, 0x0) listen(r7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00:\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 2.086861969s ago: executing program 0 (id=543): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioprio_set$pid(0x3, 0x0, 0x4007) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) remap_file_pages(&(0x7f000082a000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x40000) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) syz_clone(0xa8238c11, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x1a0, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) write$P9_RREADDIR(r3, &(0x7f0000000640)={0xb, 0x29, 0x2, {0x4e6883d4}}, 0xb) 1.709326547s ago: executing program 0 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r8, 0x0, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001580)=@newtaction={0x3548, 0x30, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{0x368, 0x1, [@m_ipt={0x184, 0xf, 0x0, 0x0, {{0x8}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xce, 0x6, {0xa, 'nat\x00', 0xa, 0x4, "37e13752ec2ffdde9ffd1cfe7c62e9b24fa1d5afe9758d8106800842445abb7d44ded866933669350b1c60b2a98c4633d22e20dda00000f3a380cc49b1f35df2322f05f880377206d3950217d982a09a72e6d6fd113647072ca2fdacd8a1648414fd9674a46d849935fb5fe87f7180b10379265857cbaa81a198d801e5d7814996afee89c7c89d241e50d1fc07a1928ae598e01564de8a3e08668b9695ddc222b7ad09fb"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x26}]}, {0x84, 0x6, "8fee82235fc1762f4d13ade28de016180b2fc62073e96ee6a0adc67d6d56b1b9e4dcc5b3adff13a99b6d109b55d4aede8bb3ed13a22a6911930050ff9ee5fc16769212be58f80ec2a00269ef7a77a55784a260026f87516831c76c933e1f1ee22d42c9aeb15c6320afb500fd4236783c0b091f6fe3fd0d8bad591078a9f0dd9a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x1e0, 0x19, 0x0, 0x0, {{0x8}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0xdb, 0x6, {0x6, 'filter\x00', 0x6, 0x1b, "b34a78d9485f0a94d5972c1a3c7e1282b11eca4af6127ba8570bda49e392a1546e5b4fe6f5a63b4d3553657c2cd7cb73af55cd9ef85ab7fab3695ba8213f4b254150c6d3cb9e8553382e07260aa926387f6af1d06a0d81c69376f200640a880833f9ecc5e4cb29721f1d4dfc0db58059bee644c45f464f4d183782eb1331363619ba00759a80348a7d3dd7a057fce9cfadbf034ca06f023b99198fc6e1e8e0c073a71ddc724701b52204d4fe147972fca8"}}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x800}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x60}]}, {0xb2, 0x6, "f5bff13a29d67e6fe88bcd106e4273ce3bb7db550d1761d480ff9ce3a4633986a8131d1f6db24913763f724b704c16229d40b54aca84e26b557a4860fe38566476cc30dc04b4e023c3ca2d84827bec0df12266333cc654314df72bee437ad7511154ce3c4f87adeb414265df5130afc8442893bffd29bb761e2b964907f5d107080ce12b6fcf2e587a9732aaa5e5e448ef07059c12edcbd9012ac355687a85a8e491eb77a2116bf03fe3648f5e43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x2710, 0x1, [@m_ipt={0x1e4, 0x14, 0x0, 0x0, {{0x8}, {0x154, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x63, 0x6, {0x3, 'filter\x00', 0x81, 0xc, "603c0a0afda69a142dd81f663647282302956abd8e076dfa5338f0252b9fd78b0a0e14a30af83ca7ecc4d31d83b59fca787d2af20453da3389"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xee}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xd1, 0x6, {0xbf, 'filter\x00', 0x5, 0x81, "1475443ba78b965927237da7d9141b45f148be447348a195bf7e352b1f9f21ec43871f63dc8d99794f8d13db02b0bf2d2b82a85a0a6e3db1cea866118abce001d5bb5d5e27f7de09e89a9b5f43c79f1cf2415de736c0dac96847366e485113c7a7423dbfc8676e60b8f1e37f0ea7f4b9f283bdd0bc8673b6fa3fb79e4bfbc8d2be899117d3c65009cc3c5df2ca76a07f4105ad4efcd6c3acbe24cb36f3f9f5b53b0c91e8e62040"}}]}, {0x6c, 0x6, "e6471f27e896aab34730d609231d570cee3aa411d334212f746931846d28776ce124d3d11202fe3dc589037de5891477de3fcfbfdcc39849becab763ea0a8ff30ab6d9847aa6f8ab330a8ee7ca126e03f4de61b38b44530f176af485beece14788bb3194b1edf09f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x22f8, 0x10, 0x0, 0x0, {{0x8}, {0x12d0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x67, 0x6, {0x6, 'filter\x00', 0x6, 0x307e, "6419581cd4896dac8ef7c0e9f8eb9c8964f3efe4c1f720d0be876075e1bd951f19d0a4ac64a90034283eb690ec31ccbb353e47a39102f91d62f2746c5c"}}, @TCA_IPT_TARG={0x104, 0x6, {0x1, 'nat\x00', 0x7, 0x8, "d767d4e11b0fa8b56f87bf27d55c02e79df308e0fff8b9f0e0788e26820ee4c38cbca540583cb6edd63822e15d357939039ef7878658092019cda2466465cc90c32af52952defc871011b53a3b78893a0202942e93b6ecbe9a59f61910a79c7282bfffcb3e5afc0d2f17e3a36073cdf94d38d86d1a90509b4d86dcdacf83f57778786cece10943dd60623b72339e4d0ccb0f17450ecfbfa71fb8cbf92dc3833e6a6c0922689ade9e387c2e0a44c9f55201aa37802c03ca74a2b187f678292bafdd86059ca4f3ed493a28700f760cc69e3a23211b666a522a3efb"}}, @TCA_IPT_TARG={0xff, 0x6, {0xfff2, 'security\x00', 0x8, 0x9, "5b3ae4eeea2fde3cbbddb493487c40575b3ed009821ef4d4d826169de3f581cc21c665d9df643be33eb9678cfb4ee365c5c76a91108db631815a62df00af392c3be645068bb3c49ae5e106296c6d33f85433931840ef4159234db30d3b7ad72b103d4879c79331c358e510449ba6910ff1ced2a48920e0cacd604b9414c4eaefa0239e106cfe0b6cdd6ca7dd59570dc516173dda6c13349644a792326e00066c8323c56684ead50c9646001a695f7bce03f6a6c25b04fb2ed035eeb2817020b2f5c454fd4ccc8fd788c7a5b4b7e9413863bd27c08c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x401}, @TCA_IPT_TARG={0x102a, 0x6, {0x8, 'security\x00', 0x3, 0x7f, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_ipt={0x230, 0x1, 0x0, 0x0, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x5c, 0x6, {0x6, 'security\x00', 0x9, 0x100, "d61da9ca963137a3e868f444b22479295b02086ed2aa0d1c2bf99e6afa43a115874ecba0752bb4be25cf066a642b1884fe0e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xfb, 0x6, {0x0, 'security\x00', 0x0, 0x2, "45d85c3eee2c8642111713375eb8610a428db618af54ec89c45748135da30b0988f9c20d7452ad6bb08f49ad6265c4b9a9647587c5a911882d401e1d76bc256d5ed3963c2c6ee5e9ae8bf211a266ac54eb582c5cc16377d4453fcda42de5c941eba5708a89e2ad4793779422b24547e0cd19fb5c8dfcfad117c7919a5be98b84c7354aba0a04467921b3fbd779aada190460e3969f42dbfd38e6b803ee44def8fe54405eecca68357cd5cd1d3f976b37aa5ae9df4a62b88c1e7af60245d8fae3e6d030e2e6098cf9e4d0fce7745be78138"}}]}, {0x10, 0x6, "fd27c63701a0fc76ea1c241a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x230, 0x1, [@m_ipt={0x110, 0x1, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xd6, 0x6, "a00c7f0a35e4b6159bb3c8e0041ded3dc770be9ed8aeff1271b6a84e69f582e01214c23e095908eef6fd04415beadd1050eaf98e8c5b276738fe55c161e7d557b6898b5945bf30b70243607943a6b6bd5944af6be8cbc2a65e03c0934414ac601f19e4491dad7d7b9668d9fcca27a10ba9e6d7afbe52f496a0acabfc7b7fea6e35b50e871806e32771cdc281ba5d0ad7f1b3ffe4fede2e618b576ecb55a5a4b50a8a54849ad043b96ba34d36d6cac5c7595058f07b3ad13f91d8bb9c72dc9c2f31e34855932f8c6bd44388eb7723282b1b49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x11c, 0x1, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffffff}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x9c, 0x6, "fe57329865af61fb0cc9140e5286e60036eebe0a78da1c77cb2622552ee3fd776125280e392179f53fed022afd5aec122b87b0ca0169d4c2c59b6042fbe74b768a05948894df3c113635df28c77ee5cad8c0cc60e7b1406c2a4f7eb42f219e824e5acd8963f596d51179d09b1fc5690561ce2e74e947194f3aed79b1c7fdae125446345a32d093d237a866db111904fe0187ecfe6636c6be"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x444, 0x1, [@m_ipt={0x120, 0x0, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x74, 0x6, "74369affb3d55c18faba97006b6032382621b72b705ff63ee0f292650a6bd3751f138ee558cf441093f554bc163ad32720aad72243a9e3850a106fae5035e0b8b9f766d80320853e524cd244051760bcefccde91d3971cb5807e0771231e80fd17eaf4a1e56ef5347188654eed372590"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x160, 0x5, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xef, 0x6, "095893a1457ff1a41bd387041918f75c007193b312554da9ac0ec089bbade71f00ac991bd7b3a88d1998906b4eb47fc0f23aa926117b76b51be813f85bd7a4b69e85b26e875dacbd1f0979c7fa5871fac712b33e8893526453764d8a9840e4d03b232b4156639114a9190ad879e4c13271ad2b6119834d635a3132a5fbc8632d5cb3459b17270d536d0c78ccb8be9a1a190237bccf48a1440435a57c8c9a68f9e0bbe4d09b37afc66b51c7eb5be8a56f3b667e3e60e128f8d73462bfc708c324176f00c77316455eb1a9b738456c818bd7e8500ad4ff4a7c15c441758eac47100208e76e8b569a2d082ce5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x1c0, 0x20, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0xc}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xf9, 0x6, "8ceb24e31e342860299d223d366a5d7e7d28b2bb7bb3fe8fc3b8157a9e355852e8b263b478bb5030ce70d6e7237c384a51278662cecc88aa3357480b6519ba8f0b18571a6c2b1701473d660989cbfae228f18c9c4696a140b5b803747c9d459514ea9a5cd44ded85ec128afae6beb84a90635c6ed7a135c4534f92607508299dcdf303e9e0f5117f2555049dca96399ea83b8ab78fbfad74eb20e45b9c286fc606ad87303e3545fa946ea053f57fafab5a73d340061731b53194d8e7c968979071f5edcf003e4440389a6bdecbf1fba1068d344b538c8a17818ddbe828db06d4ecee92fbd0d646e29f0aacde0dab51357c39120b1f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x448, 0x1, [@m_ipt={0x2a4, 0x7, 0x0, 0x0, {{0x8}, {0x184, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_INDEX={0x8, 0x3, 0xff}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_TARG={0x43, 0x6, {0x3, 'raw\x00', 0x80, 0xff8d, "f829e0fe0ecb5641a4e82535b27ddbc2d119a1f0009fc2ed16"}}, @TCA_IPT_TARG={0x31, 0x6, {0x3, 'raw\x00', 0x5, 0xfc, "ad5403dba52033"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80}, @TCA_IPT_TARG={0xd6, 0x6, {0x2d3, 'nat\x00', 0xa, 0x401, "eb842fa7153f2bf8405621d27094f3483e0815136caaae130dba2f7f3da6a947fcfe0c5d79100be9cd999fac48417fb8d18c911f84ecbf05dd73be757117b7bacc40b071a90b44a63867e0e2d83569322abb99aa20a7367f2a4c448c0375ef2e1da4452188931872f2f6487ab512f8fb0c9d91b1752e2150bee8ab953efc2b2a7369c51644a76c393008c7ed17db1ee77ebb473a5337c98000a16e171c933f88686ddb30d7e1ddded401e12e"}}]}, {0xfa, 0x6, "745b6e724a119361c2431192d5b7960b9aa158fa1c6bc876626d8e75c0346e35578ce07cc5db4ab80d779e01a9b0652c8c90794fe50397accf5908aada4a65c2ddb246e3a6ca06a87484dd0632aeae1fbc5d8bf1f284c1e3b91ba488713ed3c1078b4754950e4924bb508a04c8635e19b03640e7b2b5f6b937cd6656bce71ef0b815397ab0d34727dc8777c4b265fb3272796b6fb038e691b6782fe86ffed488587373db36aa5cceb2d974ad7362560489ec98322130d979d8560279469f312009b06f1f47dfe4db7686e93fddaba73d9082d972853b21bea15d26a829d54ef00337a03635e4d9640853461bbe43479f6524b4739a9a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x1a0, 0x4, 0x0, 0x0, {{0x8}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x10b, 0x6, {0x81, 'raw\x00', 0x2, 0x8e, "3fb84a109f0ee6fe086246a23aa35c6f94bb4322fbf6aa6fc3a5d8d1feb529c62b68602cfb7e2fa492e28460a5a631a59f5e8afb87cac11786f6005597a6f8f22c8de765c7043a1b8dd2e9092b4067fb037a5054995526ef96beebf7b7f4353860472772feab225ecd37832a9409241a6c9ea5e9c8836bb332577ccc62a521b2b58875c2af3700a5ec51b01720819efe7852fcaa31149a3cb8e68b2d1cf53ebacc6fcb2c295087b7e544b193d65817f3e8da46f8fb47ddd99d16c7b29a718670d657ed68469ca3dfbfdf27e86eafe13d9f5396dd2b7501d237dd3e2fe4ec674d1b"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x5a, 0x6, "de15063cc9d81b2fc9f11f57781699966ece315301f6e74e1be822f27cecba00ea9144297d75ee9937b2b77d6a68f58156079b141048fe7dc274fbcd53794b105a59e7ce341cf2da0e93e288674686f3d1ae0dcc35a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x3548}, 0x1, 0x0, 0x0, 0x9010}, 0x10) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xc, @mcast2, 0x8f}, 0x1c) 1.648043343s ago: executing program 3 (id=546): socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0x100) mkdir(&(0x7f0000000400)='./file0\x00', 0x2000000) 1.605051097s ago: executing program 3 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) splice(r4, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000300)={0x2, &(0x7f0000000200)=[{0x110, 0xff}, {0x1, 0x3}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r10, 0x0, &(0x7f0000001740)=""/4085}, 0x20) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f0000000000)=0x3) writev(r13, &(0x7f0000000140)=[{&(0x7f0000000280)='D]', 0x2}, {0x0}], 0x2) 1.518463886s ago: executing program 1 (id=549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b"], 0x28}}, 0x50) r3 = syz_pidfd_open(0x0, 0x0) socket(0x10, 0x3, 0x9) fremovexattr(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="6f73322e6b6672656500b65091c9aa91fa3e2ac021ffa738afa05e791573360cce62a40924ac43d2f22c"]) 1.517870696s ago: executing program 1 (id=550): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa4000061) read(r0, &(0x7f0000002040)=""/76, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000680)={'pim6reg\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002980)={'wpan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) sendto(0xffffffffffffffff, &(0x7f0000000540)="a87f512b0f3c29feaedc920b85e662c09faa57485032351ecc19ea3b3a21540a8e2c09241581eeefde2954ade4970f2975291d5ef3938f8a408d18376708b16caf1a93df167ae62ac6dd754a0f7bd86f4407c09a168657fcfcd4d7cfbe4a1a12a61c6ac71b2820faf3ab80ffed298d5ab6ed2f3ff859a37cf890e65379f267090b08fe437b71dc38d9825506bebd645eaada46b6243746a80c86c0249c2ceea528c372", 0xa3, 0x0, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff, 0x4}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='mm_migrate_pages_start\x00', r8, 0x0, 0x800000000006}, 0x18) socket$key(0xf, 0x3, 0x2) 1.466235031s ago: executing program 5 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRESOCT=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_usbip_server_init(0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x13fffb) sendfile(r6, r5, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16=r4, @ANYRES8=r0, @ANYBLOB="12f38ecb68a257a3d05e1997cef2d4c6460360f06f9b786a1ad030c95f116be50726f290fadd5bbe7049dc65a51993a66c97b51895e70d907283a9643dd07b0ba181fe69b6c73da65f863603a3141ffd1b2b6959ee8949ac13f46297b5ff21e536e2d8b7cc730481"], 0x0, 0x0, 0x0, 0x0, 0xc7b0b836f8d6ded, 0x0, '\x00', 0x0, 0x25, r6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r8, @ANYRES32=r8, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="180000005a00000004000080040001800000000000000000"], 0x18}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r8}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000040)=0xe8) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000600)={[{@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}], [{@fsname={'fsname', 0x3d, 'debug_want_extra_isize'}}, {@uid_gt={'uid>', r11}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, 'nodioread_nolock'}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000740)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000140)="941f02e1a78743", &(0x7f0000000940)=""/147, &(0x7f0000000b00)="9c37cd1ebe1f2996ebba2f06000959ffe1589e21342e79b602171e3fc5b7e02ef9ccbaccf64eb7048669f8bc95e44c9a14d7c88b27c430445c9dd62b8a2b6202eb3b25bc388f490f27c218d6440714edf71ad483c78427123c61d821836ebb0972f06dd1a4905fafb6c58a00d3e809a7f050da1fcb58002f8db9449d57e5", &(0x7f0000001040)="7f6b05409db5541a41897d3a36b3f6b805ce511e85d4f2410afb502df0d338bc669603dbb35e493d8fe990fa6f3d99751264b393b3479414df2acd6d27f10da63e5ab2541e59ac3247537497f5e6d1cf2e91bd2b200bcc67384d7edf578bb35259793bed9d7fe0a33ee7427d3c578ae5539b6f47", 0x1, r0, 0x4}, 0x38) 1.333263095s ago: executing program 2 (id=552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xf, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x40, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x4, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="7f3c27bb7c0a"}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x78000000000000}}]}]}, 0xa0}}, 0x8011) 1.132078495s ago: executing program 0 (id=553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) 819.901557ms ago: executing program 0 (id=554): r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0xe, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bba100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095", @ANYRESDEC=r1, @ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000390009002ebd70000000000004000000040000000c0001"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x1}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x416) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x3], 0xff, 0x0, 0x24dc13b7d730343}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) socket$igmp6(0xa, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) write$P9_RAUTH(r1, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x0, 0x1, 0x3}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r11 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r11, &(0x7f0000000300)='system_u:object_r:ld_so_t:s0\x00', 0x1d) close_range(r6, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 692.51374ms ago: executing program 3 (id=555): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 422.908667ms ago: executing program 0 (id=556): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xd) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x3e, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES8=r0, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300000001000000040000e0050300001b34ba6b471f0adc"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r2, 0x0, 0x40040) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000001203000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000b395ac5160fb2dc3"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000023c0)=r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="633e3d72be7fca4443a244050000000000000063110800000000008510000002000000850000002300000095000000000000009500a50500000000cb726f61c085aa5a5eb73d5fdac46af82b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 339.833395ms ago: executing program 2 (id=557): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xd) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x3e, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES8=r0, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000800"/15, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300000001000000040000e0050300001b34ba6b471f0adc"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r2, 0x0, 0x40040) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000001203000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000b395ac5160fb2dc3"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000023c0)=r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="633e3d72be7fca4443a244050000000000000063110800000000008510000002000000850000002300000095000000000000009500a50500000000cb726f61c085aa5a5eb73d5fdac46af82b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 302.158989ms ago: executing program 1 (id=558): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, 0x0, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) keyctl$setperm(0x5, r2, 0x30925) keyctl$read(0xb, r2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 301.354849ms ago: executing program 0 (id=559): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000800)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$int_out(r3, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000100)=ANY=[@ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 255.032124ms ago: executing program 2 (id=560): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) fsopen(&(0x7f0000000000)='exofs\x00', 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000bf0000000023000000020000000000"], &(0x7f0000000440)=""/192, 0x1a, 0xc0, 0x1}, 0x28) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 151.687574ms ago: executing program 2 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="5953fdfffffffddbdf256b"], 0x28}}, 0x50) r3 = syz_pidfd_open(0x0, 0x0) socket(0x10, 0x3, 0x9) fremovexattr(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="6f73322e6b6672656500b65091c9aa91fa3e2ac021ffa738afa05e791573360cce62a40924ac43d2f22c"]) 151.345254ms ago: executing program 2 (id=562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x401}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 101.705949ms ago: executing program 2 (id=563): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='f2fs_filemap_fault\x00', r0, 0x0, 0x7f}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x20) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0xb) read(r3, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) sendmsg$can_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "0500"}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x1) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x7, 0x0, 0x40000010008, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, r7, 0x3) 39.934596ms ago: executing program 1 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x680bed7093c0f325, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) setitimer(0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x48, &(0x7f0000000140)=0xfffffffd, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) 29.846767ms ago: executing program 1 (id=565): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001c40)=[0xd27c]) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1f0000000700000003000000020000f8000002004d85c115af1a32fdb13513df5b70cb94320bd992e6bffb2450c89be5f7bc80a3aeba5e032231208ecfb7ac3b28652bc0c46a60966906a9281cb2a3cd845b4ce539f91cd10733b77cf7f06d994ee0f4efb77c0f614abd493243886da20ba776bb1c6831b171362d8d451659d85a021796fb51a4ea6c7e8042672e96166eced42e0f1a77c9dff75b398b98713686ed363800816c3ab04292c44cebfd1a82e4c9583ab35688f488378dec733907023702000000a5d09ef7d846d9b873c3e21cc8c5e5ac6c", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = io_uring_setup(0x6de3, &(0x7f0000000400)={0x0, 0x62af, 0x1}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000000)={0x7fffffff, 0x93}, 0x1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=566): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") listen(0xffffffffffffffff, 0x40001) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x101102, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x7ffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r0, @ANYRESOCT=r2], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRESOCT=r3, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRESHEX, @ANYRES64, @ANYRESOCT=r3, @ANYBLOB="187bc319d84db242c5d1282326a365bab40fed3bd264072a7357ba415c2eb169109e823f78adfbb3a9a55f3237bf5700a4deaca9483de0db59a79776cbcf3e0c94099110cc768338a5ced3081885f3a89ec0fb0f7820b181d38949d87f441b448066cc79efd326520e7dbbafc1319be48f13ac0d060f625ec757e36053bab29fe2"], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x28000092) getsockname$netlink(r1, &(0x7f00000002c0), &(0x7f00000004c0)=0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0800000007007652657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) mount(&(0x7f00000001c0)=@md0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='securityfs\x00', 0x1014, &(0x7f0000000280)='*^+\x00') close(r7) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1900) renameat2(r8, &(0x7f0000000140)='./file1\x00', r8, &(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): type 13 has an invalid length. [ 40.050042][ T3803] capability: warning: `syz.0.94' uses 32-bit capabilities (legacy support in use) [ 40.104123][ T3803] debugfs: 'ptm0' already exists in 'caif_serial' [ 40.158687][ T3807] loop1: detected capacity change from 0 to 1024 [ 40.161103][ T3810] FAULT_INJECTION: forcing a failure. [ 40.161103][ T3810] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.178313][ T3810] CPU: 1 UID: 0 PID: 3810 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.178356][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.178369][ T3810] Call Trace: [ 40.178387][ T3810] [ 40.178395][ T3810] __dump_stack+0x1d/0x30 [ 40.178420][ T3810] dump_stack_lvl+0x95/0xd0 [ 40.178443][ T3810] dump_stack+0x15/0x1b [ 40.178465][ T3810] should_fail_ex+0x265/0x280 [ 40.178516][ T3810] should_fail+0xb/0x20 [ 40.178572][ T3810] should_fail_usercopy+0x1a/0x20 [ 40.178609][ T3810] _copy_to_user+0x20/0xa0 [ 40.178640][ T3810] simple_read_from_buffer+0xb5/0x130 [ 40.178670][ T3810] proc_fail_nth_read+0x10e/0x150 [ 40.178699][ T3810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.178723][ T3810] vfs_read+0x1a8/0x770 [ 40.178739][ T3810] ? __rcu_read_unlock+0x4f/0x70 [ 40.178759][ T3810] ? __fget_files+0x184/0x1c0 [ 40.178802][ T3810] ? mutex_lock+0x58/0x90 [ 40.178829][ T3810] ksys_read+0xda/0x1a0 [ 40.178848][ T3810] __x64_sys_read+0x40/0x50 [ 40.178916][ T3810] x64_sys_call+0x2889/0x3000 [ 40.178972][ T3810] do_syscall_64+0xca/0x2b0 [ 40.179065][ T3810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.179088][ T3810] RIP: 0033:0x7ffbfe8ae15c [ 40.179116][ T3810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.179135][ T3810] RSP: 002b:00007ffbfd317030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.179158][ T3810] RAX: ffffffffffffffda RBX: 00007ffbfeb05fa0 RCX: 00007ffbfe8ae15c [ 40.179245][ T3810] RDX: 000000000000000f RSI: 00007ffbfd3170a0 RDI: 0000000000000004 [ 40.179260][ T3810] RBP: 00007ffbfd317090 R08: 0000000000000000 R09: 0000000000000000 [ 40.179274][ T3810] R10: 0000200000ff9000 R11: 0000000000000246 R12: 0000000000000002 [ 40.179287][ T3810] R13: 00007ffbfeb06038 R14: 00007ffbfeb05fa0 R15: 00007fffcddf1f38 [ 40.179306][ T3810] [ 40.189362][ T3807] EXT4-fs: inline encryption not supported [ 40.358161][ T3825] usb usb7: usbfs: process 3825 (syz.0.98) did not claim interface 0 before use [ 40.361023][ T3807] EXT4-fs: Ignoring removed orlov option [ 40.396156][ T3807] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 40.419346][ T3807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 40.427637][ T3807] System zones: 0-1, 3-12 [ 40.438839][ T3807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.545551][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.623913][ T3858] FAULT_INJECTION: forcing a failure. [ 40.623913][ T3858] name failslab, interval 1, probability 0, space 0, times 0 [ 40.636733][ T3858] CPU: 0 UID: 0 PID: 3858 Comm: syz.1.102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.636770][ T3858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.636781][ T3858] Call Trace: [ 40.636788][ T3858] [ 40.636796][ T3858] __dump_stack+0x1d/0x30 [ 40.636895][ T3858] dump_stack_lvl+0x95/0xd0 [ 40.636972][ T3858] dump_stack+0x15/0x1b [ 40.636991][ T3858] should_fail_ex+0x265/0x280 [ 40.637012][ T3858] should_failslab+0x8c/0xb0 [ 40.637032][ T3858] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 40.637129][ T3858] ? __d_alloc+0x37/0x340 [ 40.637153][ T3858] __d_alloc+0x37/0x340 [ 40.637173][ T3858] ? _raw_spin_lock+0x52/0xa0 [ 40.637193][ T3858] d_alloc_pseudo+0x1e/0x80 [ 40.637279][ T3858] alloc_file_pseudo+0x71/0x160 [ 40.637305][ T3858] anon_inode_getfd+0xbf/0x190 [ 40.637332][ T3858] bpf_enable_stats+0xc5/0x110 [ 40.637440][ T3858] __sys_bpf+0x28a/0x7c0 [ 40.637462][ T3858] __x64_sys_bpf+0x41/0x50 [ 40.637487][ T3858] x64_sys_call+0x28e1/0x3000 [ 40.637517][ T3858] do_syscall_64+0xca/0x2b0 [ 40.637545][ T3858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.637564][ T3858] RIP: 0033:0x7f0dfdb4f749 [ 40.637632][ T3858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.637648][ T3858] RSP: 002b:00007f0dfc5af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.637735][ T3858] RAX: ffffffffffffffda RBX: 00007f0dfdda5fa0 RCX: 00007f0dfdb4f749 [ 40.637746][ T3858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 40.637758][ T3858] RBP: 00007f0dfc5af090 R08: 0000000000000000 R09: 0000000000000000 [ 40.637769][ T3858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.637779][ T3858] R13: 00007f0dfdda6038 R14: 00007f0dfdda5fa0 R15: 00007ffe14897608 [ 40.637794][ T3858] [ 41.159156][ T3872] loop3: detected capacity change from 0 to 512 [ 41.274252][ T3881] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216) [ 41.374862][ T2099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.390846][ T3884] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 41.422638][ T3884] bond1: entered promiscuous mode [ 41.448976][ T3858] Set syz1 is full, maxelem 65536 reached [ 41.455422][ T3884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.472065][ T3884] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 41.474432][ T2099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.479784][ T3884] netlink: 224 bytes leftover after parsing attributes in process `syz.0.114'. [ 41.648082][ T2099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.688720][ T3902] loop2: detected capacity change from 0 to 1024 [ 41.696476][ T3902] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 41.752371][ T2099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.873917][ T3915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.124'. [ 41.883902][ T3917] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.892265][ T3919] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 41.901390][ T2099] bridge_slave_1: left allmulticast mode [ 41.907064][ T2099] bridge_slave_1: left promiscuous mode [ 41.912909][ T2099] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.920333][ T3917] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 41.920792][ T3909] loop0: detected capacity change from 0 to 8192 [ 41.940986][ T2099] bridge_slave_0: left allmulticast mode [ 41.946710][ T2099] bridge_slave_0: left promiscuous mode [ 41.952591][ T2099] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.073270][ T2099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.090288][ T2099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.100461][ T2099] bond0 (unregistering): Released all slaves [ 42.159555][ T3928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 42.168629][ T3928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 42.177599][ T3928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 42.186674][ T2099] hsr_slave_0: left promiscuous mode [ 42.207635][ T3936] loop3: detected capacity change from 0 to 512 [ 42.219138][ T2099] hsr_slave_1: left promiscuous mode [ 42.234535][ T2099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.242147][ T2099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.257773][ T3936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.274211][ T3928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 42.280507][ T3936] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.283233][ T3928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 42.302523][ T3928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 42.311885][ T2099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.312752][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.319269][ T2099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.324692][ T3950] loop2: detected capacity change from 0 to 256 [ 42.353892][ T2099] veth1_macvtap: left promiscuous mode [ 42.359444][ T2099] veth0_macvtap: left promiscuous mode [ 42.402915][ T2099] veth1_vlan: left promiscuous mode [ 42.408695][ T29] kauditd_printk_skb: 639 callbacks suppressed [ 42.408775][ T29] audit: type=1400 audit(1768123955.365:1426): avc: denied { connect } for pid=3956 comm="syz.3.133" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.448430][ T2099] veth0_vlan: left promiscuous mode [ 42.508138][ T29] audit: type=1400 audit(1768123955.445:1427): avc: denied { kexec_image_load } for pid=3956 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 42.556176][ T3950] netlink: 'syz.2.132': attribute type 10 has an invalid length. [ 42.565463][ T3964] loop3: detected capacity change from 0 to 1024 [ 42.570274][ T3964] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 42.630497][ T2099] team0 (unregistering): Port device team_slave_1 removed [ 42.644308][ T2099] team0 (unregistering): Port device team_slave_0 removed [ 42.650902][ T3969] EXT4-fs: Ignoring removed nobh option [ 42.657153][ T3969] EXT4-fs: inline encryption not supported [ 42.676358][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.698621][ T29] audit: type=1326 audit(1768123955.655:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfdb4f749 code=0x7ffc0000 [ 42.722240][ T29] audit: type=1326 audit(1768123955.655:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfdb4f749 code=0x7ffc0000 [ 42.789372][ T29] audit: type=1400 audit(1768123955.745:1430): avc: denied { setopt } for pid=3968 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.813434][ T29] audit: type=1400 audit(1768123955.745:1431): avc: denied { bind } for pid=3973 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.830546][ T29] audit: type=1400 audit(1768123955.795:1432): avc: denied { setopt } for pid=3973 comm="syz.0.137" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.831038][ T29] audit: type=1400 audit(1768123955.795:1433): avc: denied { read } for pid=3973 comm="syz.0.137" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.857040][ T3950] team0: Port device dummy0 added [ 42.894960][ T29] audit: type=1400 audit(1768123955.855:1434): avc: denied { tracepoint } for pid=3977 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 42.946023][ T3950] syz.2.132 (3950) used greatest stack depth: 9992 bytes left [ 42.981111][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.019960][ T3984] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 43.037449][ T29] audit: type=1400 audit(1768123955.985:1435): avc: denied { load_policy } for pid=3983 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.084285][ T3984] SELinux: failed to load policy [ 43.121329][ T3891] chnl_net:caif_netlink_parms(): no params data found [ 43.153692][ T3484] IPVS: starting estimator thread 0... [ 43.290077][ T4004] IPVS: using max 2448 ests per chain, 122400 per kthread [ 43.356536][ T3891] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.363736][ T3891] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.371657][ T3891] bridge_slave_0: entered allmulticast mode [ 43.378182][ T3891] bridge_slave_0: entered promiscuous mode [ 43.400639][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.407789][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.415358][ T3891] bridge_slave_1: entered allmulticast mode [ 43.422691][ T3891] bridge_slave_1: entered promiscuous mode [ 43.453964][ T3891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.476328][ T3891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.506469][ T3891] team0: Port device team_slave_0 added [ 43.519941][ T3891] team0: Port device team_slave_1 added [ 43.561683][ T3891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.568684][ T3891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.594810][ T3891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.631054][ T3891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.638116][ T3891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.664187][ T3891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.709283][ T3891] hsr_slave_0: entered promiscuous mode [ 43.723519][ T3891] hsr_slave_1: entered promiscuous mode [ 43.882760][ T4059] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 43.909964][ T4059] SELinux: failed to load policy [ 43.970886][ T3891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.984628][ T4062] set_capacity_and_notify: 1 callbacks suppressed [ 43.984643][ T4062] loop2: detected capacity change from 0 to 512 [ 44.007248][ T3891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.019555][ T3891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.036498][ T4062] EXT4-fs (loop2): 1 truncate cleaned up [ 44.038642][ T3891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.046852][ T4062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.089847][ T4074] loop1: detected capacity change from 0 to 256 [ 44.138629][ T4081] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 44.197836][ T4086] loop1: detected capacity change from 0 to 512 [ 44.205100][ T4081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.212878][ T4086] EXT4-fs: Ignoring removed nobh option [ 44.219564][ T4086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.254787][ T4088] bond1: (slave geneve2): making interface the new active one [ 44.257674][ T4091] loop0: detected capacity change from 0 to 1024 [ 44.270151][ T4086] EXT4-fs (loop1): 1 truncate cleaned up [ 44.278753][ T4091] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 44.289822][ T4086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.307858][ T4088] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 44.364578][ T4098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 44.404290][ T3891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.436175][ T4062] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.153: bg 0: block 465: padding at end of block bitmap is not set [ 44.440546][ T3891] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.478489][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.488641][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.491720][ T4062] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 44.495736][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.508121][ T4062] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.508121][ T4062] [ 44.518360][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.525018][ T4062] EXT4-fs (loop2): Total free blocks count 0 [ 44.532639][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.538603][ T4062] EXT4-fs (loop2): Free/Dirty block details [ 44.538618][ T4062] EXT4-fs (loop2): free_blocks=0 [ 44.538630][ T4062] EXT4-fs (loop2): dirty_blocks=5700 [ 44.538641][ T4062] EXT4-fs (loop2): Block reservation details [ 44.538676][ T4062] EXT4-fs (loop2): i_reserved_data_blocks=5700 [ 44.597186][ T95] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 44.624853][ T4107] netlink: 'syz.0.159': attribute type 13 has an invalid length. [ 44.635431][ T4114] SET target dimension over the limit! [ 44.788165][ T4127] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 44.837271][ T4107] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.844461][ T4107] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.911240][ T4132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4132 comm=syz.3.165 [ 44.960058][ T4107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.970522][ T4107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.131698][ T4127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.194223][ T293] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.215827][ T3891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.233900][ T293] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.260356][ T293] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.269833][ T4147] loop0: detected capacity change from 0 to 512 [ 45.285266][ T293] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.331827][ T4132] loop3: detected capacity change from 0 to 512 [ 45.357401][ T4132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.397527][ T4132] EXT4-fs (loop3): 1 truncate cleaned up [ 45.421041][ T4160] bridge: RTM_NEWNEIGH with invalid ether address [ 45.431060][ T3891] veth0_vlan: entered promiscuous mode [ 45.442476][ T3891] veth1_vlan: entered promiscuous mode [ 45.467066][ T4132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.471614][ T3891] veth0_macvtap: entered promiscuous mode [ 45.487031][ T3891] veth1_macvtap: entered promiscuous mode [ 45.504570][ T3891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.513846][ T3891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.525934][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.540164][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.548950][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.561311][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.842038][ T4178] __nla_validate_parse: 5 callbacks suppressed [ 45.842072][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 45.861664][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.101388][ T4202] netlink: 64 bytes leftover after parsing attributes in process `GPL'. [ 46.101425][ T4203] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 46.153956][ T4206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 46.170377][ T4205] loop3: detected capacity change from 0 to 512 [ 46.173982][ T4203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 46.187843][ T4206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 46.196802][ T4206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 46.229910][ T4210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 46.237219][ T4210] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 46.238658][ T4215] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216) [ 46.248313][ T4210] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 46.293351][ T4203] gretap1: entered promiscuous mode [ 46.350408][ T4203] bond3: (slave gretap1): making interface the new active one [ 46.384190][ T4203] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 46.418575][ T4210] macvlan2: entered promiscuous mode [ 46.423977][ T4210] macvlan2: entered allmulticast mode [ 46.430050][ T4210] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 46.445179][ T4214] gretap1: entered promiscuous mode [ 46.467674][ T4229] loop5: detected capacity change from 0 to 512 [ 46.517318][ T4231] FAULT_INJECTION: forcing a failure. [ 46.517318][ T4231] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.530608][ T4231] CPU: 1 UID: 0 PID: 4231 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.530634][ T4231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.530646][ T4231] Call Trace: [ 46.530656][ T4231] [ 46.530662][ T4231] __dump_stack+0x1d/0x30 [ 46.530680][ T4231] dump_stack_lvl+0x95/0xd0 [ 46.530693][ T4231] dump_stack+0x15/0x1b [ 46.530706][ T4231] should_fail_ex+0x265/0x280 [ 46.530796][ T4231] should_fail_alloc_page+0xf2/0x100 [ 46.530861][ T4231] __alloc_frozen_pages_noprof+0x109/0x360 [ 46.530879][ T4231] alloc_pages_mpol+0xb3/0x260 [ 46.530969][ T4231] alloc_pages_noprof+0x90/0x130 [ 46.530986][ T4231] pgd_alloc+0x40/0x2b0 [ 46.531005][ T4231] mm_init+0x382/0x650 [ 46.531053][ T4231] mm_alloc+0x81/0xa0 [ 46.531078][ T4231] alloc_bprm+0x20e/0x350 [ 46.531155][ T4231] do_execveat_common+0x12e/0x750 [ 46.531175][ T4231] ? getname_flags+0x154/0x3b0 [ 46.531191][ T4231] __x64_sys_execveat+0x73/0x90 [ 46.531248][ T4231] x64_sys_call+0x1c0e/0x3000 [ 46.531263][ T4231] do_syscall_64+0xca/0x2b0 [ 46.531391][ T4231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.531405][ T4231] RIP: 0033:0x7f4459d3f749 [ 46.531417][ T4231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.531429][ T4231] RSP: 002b:00007f445879f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 46.531471][ T4231] RAX: ffffffffffffffda RBX: 00007f4459f95fa0 RCX: 00007f4459d3f749 [ 46.531480][ T4231] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 46.531488][ T4231] RBP: 00007f445879f090 R08: 0000000000001000 R09: 0000000000000000 [ 46.531529][ T4231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.531537][ T4231] R13: 00007f4459f96038 R14: 00007f4459f95fa0 R15: 00007fffe01b12d8 [ 46.531549][ T4231] [ 46.729985][ T4235] lo: Caught tx_queue_len zero misconfig [ 46.752004][ T4227] FAT-fs (loop5): error, corrupted file size (i_pos 51, 9216) [ 46.864977][ T4242] loop2: detected capacity change from 0 to 1024 [ 46.871817][ T4242] EXT4-fs: Ignoring removed nobh option [ 46.877512][ T4242] EXT4-fs: inline encryption not supported [ 46.901389][ T4242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.022990][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.164007][ T4269] IPv6: NLM_F_CREATE should be specified when creating new route [ 47.266810][ T4279] loop3: detected capacity change from 0 to 512 [ 47.273910][ T4279] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 47.288963][ T4279] EXT4-fs: error: could not find journal device path [ 47.567964][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 47.568012][ T29] audit: type=1400 audit(1768123960.525:1698): avc: denied { block_suspend } for pid=4283 comm="syz.5.204" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.672526][ T4287] ip6erspan0: entered promiscuous mode [ 47.720291][ T4281] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 47.730401][ T4291] loop0: p1 < > p4 [ 47.735722][ T4291] loop0: p4 size 8388608 extends beyond EOD, truncated [ 47.746413][ T29] audit: type=1400 audit(1768123960.705:1699): avc: denied { name_bind } for pid=4286 comm="syz.0.205" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 47.771464][ T4287] geneve2: entered promiscuous mode [ 47.776902][ T4287] geneve2: entered allmulticast mode [ 47.972595][ T29] audit: type=1400 audit(1768123960.935:1700): avc: denied { bind } for pid=4307 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.991954][ T29] audit: type=1400 audit(1768123960.935:1701): avc: denied { setopt } for pid=4307 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.062886][ T29] audit: type=1400 audit(1768123961.025:1702): avc: denied { read write } for pid=4314 comm="syz.0.214" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.074244][ T4316] FAULT_INJECTION: forcing a failure. [ 48.074244][ T4316] name failslab, interval 1, probability 0, space 0, times 0 [ 48.086222][ T29] audit: type=1400 audit(1768123961.025:1703): avc: denied { open } for pid=4314 comm="syz.0.214" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.098939][ T4316] CPU: 1 UID: 0 PID: 4316 Comm: syz.0.214 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.098970][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.098983][ T4316] Call Trace: [ 48.098991][ T4316] [ 48.099000][ T4316] __dump_stack+0x1d/0x30 [ 48.099047][ T4316] dump_stack_lvl+0x95/0xd0 [ 48.099125][ T4316] dump_stack+0x15/0x1b [ 48.099145][ T4316] should_fail_ex+0x265/0x280 [ 48.099167][ T4316] should_failslab+0x8c/0xb0 [ 48.099204][ T4316] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 48.099281][ T4316] ? __alloc_skb+0x2ff/0x4b0 [ 48.099305][ T4316] __alloc_skb+0x2ff/0x4b0 [ 48.099326][ T4316] ? __alloc_skb+0x228/0x4b0 [ 48.099361][ T4316] ppp_write+0x8a/0x330 [ 48.099387][ T4316] vfs_writev+0x406/0x8b0 [ 48.099410][ T4316] ? __pfx_ppp_write+0x10/0x10 [ 48.099473][ T4316] __x64_sys_pwritev+0xfd/0x1c0 [ 48.099496][ T4316] x64_sys_call+0x161b/0x3000 [ 48.099559][ T4316] do_syscall_64+0xca/0x2b0 [ 48.099591][ T4316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.099613][ T4316] RIP: 0033:0x7ffbfe8af749 [ 48.099637][ T4316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.099690][ T4316] RSP: 002b:00007ffbfd317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 48.099711][ T4316] RAX: ffffffffffffffda RBX: 00007ffbfeb05fa0 RCX: 00007ffbfe8af749 [ 48.099724][ T4316] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 48.099737][ T4316] RBP: 00007ffbfd317090 R08: 000000000000049d R09: 0000000000000000 [ 48.099750][ T4316] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 48.099855][ T4316] R13: 00007ffbfeb06038 R14: 00007ffbfeb05fa0 R15: 00007fffcddf1f38 [ 48.099872][ T4316] [ 48.155598][ T4315] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 48.157345][ T29] audit: type=1400 audit(1768123961.025:1704): avc: denied { ioctl } for pid=4314 comm="syz.0.214" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.161554][ T4315] EXT4-fs (loop1): bad block size 65536 [ 48.187878][ T4318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.215'. [ 48.190652][ T29] audit: type=1400 audit(1768123961.025:1705): avc: denied { create } for pid=4307 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.369205][ T29] audit: type=1400 audit(1768123961.145:1706): avc: denied { read write } for pid=4317 comm="syz.1.215" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.393298][ T29] audit: type=1400 audit(1768123961.145:1707): avc: denied { open } for pid=4317 comm="syz.1.215" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.445728][ T4326] openvswitch: netlink: EtherType 548 is less than min 600 [ 48.461017][ T4325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 48.617373][ T4334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.752136][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.958484][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 49.015526][ T4355] FAULT_INJECTION: forcing a failure. [ 49.015526][ T4355] name failslab, interval 1, probability 0, space 0, times 0 [ 49.028292][ T4355] CPU: 1 UID: 0 PID: 4355 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.028341][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.028410][ T4355] Call Trace: [ 49.028419][ T4355] [ 49.028428][ T4355] __dump_stack+0x1d/0x30 [ 49.028516][ T4355] dump_stack_lvl+0x95/0xd0 [ 49.028540][ T4355] dump_stack+0x15/0x1b [ 49.028563][ T4355] should_fail_ex+0x265/0x280 [ 49.028652][ T4355] should_failslab+0x8c/0xb0 [ 49.028747][ T4355] kmem_cache_alloc_noprof+0x69/0x4b0 [ 49.028772][ T4355] ? alloc_empty_file+0x76/0x200 [ 49.028796][ T4355] alloc_empty_file+0x76/0x200 [ 49.028819][ T4355] alloc_file_pseudo+0xc6/0x160 [ 49.028893][ T4355] anon_inode_getfile_fmode+0xa5/0x140 [ 49.028931][ T4355] do_eventfd+0xf1/0x1b0 [ 49.028958][ T4355] __x64_sys_eventfd2+0x2d/0x40 [ 49.028978][ T4355] x64_sys_call+0x2b28/0x3000 [ 49.028999][ T4355] do_syscall_64+0xca/0x2b0 [ 49.029035][ T4355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.029131][ T4355] RIP: 0033:0x7f696044f749 [ 49.029146][ T4355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.029162][ T4355] RSP: 002b:00007f695eeaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 49.029181][ T4355] RAX: ffffffffffffffda RBX: 00007f69606a5fa0 RCX: 00007f696044f749 [ 49.029195][ T4355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.029209][ T4355] RBP: 00007f695eeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 49.029221][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.029253][ T4355] R13: 00007f69606a6038 R14: 00007f69606a5fa0 R15: 00007fffc33a5548 [ 49.029273][ T4355] [ 49.210938][ T4356] set_capacity_and_notify: 5 callbacks suppressed [ 49.210953][ T4356] loop2: detected capacity change from 0 to 512 [ 49.224216][ T4356] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 49.239111][ T4356] EXT4-fs: error: could not find journal device path [ 49.293445][ T4360] netlink: 43 bytes leftover after parsing attributes in process `syz.3.230'. [ 49.354675][ T4363] FAULT_INJECTION: forcing a failure. [ 49.354675][ T4363] name failslab, interval 1, probability 0, space 0, times 0 [ 49.367676][ T4363] CPU: 1 UID: 0 PID: 4363 Comm: syz.3.231 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.367752][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.367766][ T4363] Call Trace: [ 49.367772][ T4363] [ 49.367781][ T4363] __dump_stack+0x1d/0x30 [ 49.367884][ T4363] dump_stack_lvl+0x95/0xd0 [ 49.367908][ T4363] dump_stack+0x15/0x1b [ 49.367930][ T4363] should_fail_ex+0x265/0x280 [ 49.368027][ T4363] should_failslab+0x8c/0xb0 [ 49.368051][ T4363] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 49.368075][ T4363] ? __alloc_skb+0x2ff/0x4b0 [ 49.368100][ T4363] __alloc_skb+0x2ff/0x4b0 [ 49.368145][ T4363] ? __alloc_skb+0x228/0x4b0 [ 49.368169][ T4363] audit_log_start+0x3a0/0x720 [ 49.368243][ T4363] ? __rcu_read_unlock+0x4f/0x70 [ 49.368265][ T4363] audit_seccomp+0x48/0x100 [ 49.368295][ T4363] ? __seccomp_filter+0x832/0x1260 [ 49.368357][ T4363] __seccomp_filter+0x843/0x1260 [ 49.368385][ T4363] ? __schedule+0x85f/0xcd0 [ 49.368413][ T4363] __secure_computing+0x82/0x150 [ 49.368439][ T4363] syscall_trace_enter+0xcf/0x1e0 [ 49.368479][ T4363] do_syscall_64+0xa4/0x2b0 [ 49.368511][ T4363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.368534][ T4363] RIP: 0033:0x7f696044e15c [ 49.368552][ T4363] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.368570][ T4363] RSP: 002b:00007f695eeaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.368615][ T4363] RAX: ffffffffffffffda RBX: 00007f69606a5fa0 RCX: 00007f696044e15c [ 49.368630][ T4363] RDX: 000000000000000f RSI: 00007f695eeaf0a0 RDI: 0000000000000005 [ 49.368643][ T4363] RBP: 00007f695eeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 49.368657][ T4363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.368671][ T4363] R13: 00007f69606a6038 R14: 00007f69606a5fa0 R15: 00007fffc33a5548 [ 49.368690][ T4363] [ 49.742535][ T4375] netlink: 92 bytes leftover after parsing attributes in process `syz.2.236'. [ 49.769006][ T4375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4375 comm=syz.2.236 [ 49.806112][ T4378] loop0: detected capacity change from 0 to 512 [ 49.947997][ T4384] FAT-fs (loop0): error, corrupted file size (i_pos 51, 9216) [ 50.026061][ T4393] hub 9-0:1.0: USB hub found [ 50.032284][ T4393] hub 9-0:1.0: 8 ports detected [ 50.054581][ T4393] SET target dimension over the limit! [ 50.078171][ T4397] FAULT_INJECTION: forcing a failure. [ 50.078171][ T4397] name failslab, interval 1, probability 0, space 0, times 0 [ 50.090949][ T4397] CPU: 1 UID: 0 PID: 4397 Comm: syz.2.242 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.090980][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.090994][ T4397] Call Trace: [ 50.091002][ T4397] [ 50.091011][ T4397] __dump_stack+0x1d/0x30 [ 50.091092][ T4397] dump_stack_lvl+0x95/0xd0 [ 50.091113][ T4397] dump_stack+0x15/0x1b [ 50.091136][ T4397] should_fail_ex+0x265/0x280 [ 50.091163][ T4397] should_failslab+0x8c/0xb0 [ 50.091189][ T4397] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 50.091257][ T4397] ? __alloc_skb+0x2ff/0x4b0 [ 50.091288][ T4397] __alloc_skb+0x2ff/0x4b0 [ 50.091352][ T4397] ? __alloc_skb+0x228/0x4b0 [ 50.091377][ T4397] audit_log_start+0x3a0/0x720 [ 50.091399][ T4397] audit_seccomp+0x48/0x100 [ 50.091426][ T4397] ? __seccomp_filter+0x832/0x1260 [ 50.091449][ T4397] __seccomp_filter+0x843/0x1260 [ 50.091501][ T4397] ? __schedule+0x85f/0xcd0 [ 50.091570][ T4397] ? __rcu_read_unlock+0x4f/0x70 [ 50.091596][ T4397] ? __fget_files+0x184/0x1c0 [ 50.091625][ T4397] __secure_computing+0x82/0x150 [ 50.091699][ T4397] syscall_trace_enter+0xcf/0x1e0 [ 50.091720][ T4397] do_syscall_64+0xa4/0x2b0 [ 50.091749][ T4397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.091769][ T4397] RIP: 0033:0x7f4459d3e15c [ 50.091846][ T4397] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.091867][ T4397] RSP: 002b:00007f445879f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.091891][ T4397] RAX: ffffffffffffffda RBX: 00007f4459f95fa0 RCX: 00007f4459d3e15c [ 50.091903][ T4397] RDX: 000000000000000f RSI: 00007f445879f0a0 RDI: 0000000000000003 [ 50.091915][ T4397] RBP: 00007f445879f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.091926][ T4397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.091946][ T4397] R13: 00007f4459f96038 R14: 00007f4459f95fa0 R15: 00007fffe01b12d8 [ 50.091965][ T4397] [ 50.323756][ T4401] loop2: detected capacity change from 0 to 128 [ 50.334232][ T4401] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.352098][ T4401] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.482480][ T4405] FAULT_INJECTION: forcing a failure. [ 50.482480][ T4405] name failslab, interval 1, probability 0, space 0, times 0 [ 50.495334][ T4405] CPU: 0 UID: 0 PID: 4405 Comm: syz.5.244 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.495361][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.495372][ T4405] Call Trace: [ 50.495378][ T4405] [ 50.495386][ T4405] __dump_stack+0x1d/0x30 [ 50.495488][ T4405] dump_stack_lvl+0x95/0xd0 [ 50.495512][ T4405] dump_stack+0x15/0x1b [ 50.495596][ T4405] should_fail_ex+0x265/0x280 [ 50.495621][ T4405] should_failslab+0x8c/0xb0 [ 50.495644][ T4405] __kmalloc_noprof+0xb9/0x5a0 [ 50.495668][ T4405] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 50.495698][ T4405] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 50.495801][ T4405] genl_family_rcv_msg_doit+0x48/0x1b0 [ 50.495890][ T4405] ? selinux_capable+0x31/0x40 [ 50.495914][ T4405] ? security_capable+0x83/0x90 [ 50.495945][ T4405] ? ns_capable+0x7d/0xb0 [ 50.495975][ T4405] genl_rcv_msg+0x422/0x460 [ 50.496077][ T4405] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 50.496101][ T4405] netlink_rcv_skb+0x123/0x220 [ 50.496130][ T4405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.496217][ T4405] genl_rcv+0x28/0x40 [ 50.496238][ T4405] netlink_unicast+0x5c0/0x690 [ 50.496373][ T4405] netlink_sendmsg+0x58b/0x6b0 [ 50.496407][ T4405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.496435][ T4405] __sock_sendmsg+0x145/0x180 [ 50.496453][ T4405] ____sys_sendmsg+0x31e/0x4a0 [ 50.496513][ T4405] ___sys_sendmsg+0x17b/0x1d0 [ 50.496552][ T4405] __x64_sys_sendmsg+0xd4/0x160 [ 50.496621][ T4405] x64_sys_call+0x17ba/0x3000 [ 50.496647][ T4405] do_syscall_64+0xca/0x2b0 [ 50.496681][ T4405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.496707][ T4405] RIP: 0033:0x7f7a7a25f749 [ 50.496767][ T4405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.496788][ T4405] RSP: 002b:00007f7a78cbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.496812][ T4405] RAX: ffffffffffffffda RBX: 00007f7a7a4b5fa0 RCX: 00007f7a7a25f749 [ 50.496827][ T4405] RDX: 0000000000008000 RSI: 0000200000001c00 RDI: 0000000000000003 [ 50.496840][ T4405] RBP: 00007f7a78cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 50.496919][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.496933][ T4405] R13: 00007f7a7a4b6038 R14: 00007f7a7a4b5fa0 R15: 00007fffc82dfe48 [ 50.496954][ T4405] [ 50.819726][ T4411] smc: net device hsr0 applied user defined pnetid SYZ2 [ 50.838897][ T4415] loop3: detected capacity change from 0 to 1024 [ 50.851071][ T4411] __nla_validate_parse: 3 callbacks suppressed [ 50.851090][ T4411] netlink: 105116 bytes leftover after parsing attributes in process `GPL'. [ 50.876854][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.893427][ T4419] loop0: detected capacity change from 0 to 512 [ 51.043788][ T4428] netlink: 'syz.5.251': attribute type 1 has an invalid length. [ 51.085827][ T4430] ip6t_rpfilter: unknown options [ 51.095913][ T4430] tipc: Started in network mode [ 51.100844][ T4430] tipc: Node identity ac14140f, cluster identity 4711 [ 51.108485][ T4430] tipc: New replicast peer: 255.255.255.255 [ 51.114641][ T4430] tipc: Enabled bearer , priority 10 [ 51.201757][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 51.636941][ T4428] macvlan2: entered promiscuous mode [ 51.642304][ T4428] macvlan2: entered allmulticast mode [ 51.771319][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.787076][ T4438] loop1: detected capacity change from 0 to 1024 [ 51.804414][ T4438] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 51.813380][ T293] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.010414][ T3321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 52.021542][ T3321] CPU: 1 UID: 0 PID: 3321 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.021572][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.021629][ T3321] Call Trace: [ 52.021636][ T3321] [ 52.021646][ T3321] __dump_stack+0x1d/0x30 [ 52.021671][ T3321] dump_stack_lvl+0x95/0xd0 [ 52.021696][ T3321] dump_stack+0x15/0x1b [ 52.021781][ T3321] dump_header+0x81/0x240 [ 52.021799][ T3321] oom_kill_process+0x295/0x350 [ 52.021823][ T3321] out_of_memory+0x97b/0xb80 [ 52.021849][ T3321] try_charge_memcg+0x610/0xa10 [ 52.021934][ T3321] charge_memcg+0x51/0xc0 [ 52.021966][ T3321] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 52.022025][ T3321] __read_swap_cache_async+0x17b/0x2d0 [ 52.022084][ T3321] swap_cluster_readahead+0x262/0x3c0 [ 52.022112][ T3321] swapin_readahead+0xde/0x820 [ 52.022143][ T3321] ? __rcu_read_unlock+0x4f/0x70 [ 52.022170][ T3321] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 52.022190][ T3321] ? __list_add_valid_or_report+0x38/0xe0 [ 52.022272][ T3321] ? __rcu_read_unlock+0x4f/0x70 [ 52.022294][ T3321] ? swap_cache_get_folio+0x277/0x280 [ 52.022326][ T3321] do_swap_page+0x2b4/0x21e0 [ 52.022358][ T3321] ? _raw_spin_unlock+0x26/0x50 [ 52.022397][ T3321] ? __schedule+0x85f/0xcd0 [ 52.022421][ T3321] ? __pfx_default_wake_function+0x10/0x10 [ 52.022460][ T3321] handle_mm_fault+0x9d8/0x2c60 [ 52.022581][ T3321] do_user_addr_fault+0x630/0x1080 [ 52.022614][ T3321] exc_page_fault+0x62/0xa0 [ 52.022723][ T3321] asm_exc_page_fault+0x26/0x30 [ 52.022745][ T3321] RIP: 0033:0x7f4459d71fc5 [ 52.022761][ T3321] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 52.022777][ T3321] RSP: 002b:00007fffe01b1618 EFLAGS: 00010246 [ 52.022793][ T3321] RAX: 0000000000000000 RBX: 0000000000000092 RCX: 00007f4459d71fc3 [ 52.022819][ T3321] RDX: 00007fffe01b1630 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.022833][ T3321] RBP: 00007fffe01b169c R08: 0000000039d838d6 R09: 0000000000000000 [ 52.022921][ T3321] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 52.022935][ T3321] R13: 00000000000927c0 R14: 000000000000caf5 R15: 00007fffe01b16f0 [ 52.022991][ T3321] [ 52.022999][ T3321] memory: usage 307200kB, limit 307200kB, failcnt 920 [ 52.254714][ T3321] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 52.262716][ T3321] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 52.270095][ T3321] Memory cgroup stats for /syz2: [ 52.270307][ T3321] cache 0 [ 52.278202][ T3321] rss 0 [ 52.281003][ T3321] shmem 0 [ 52.283953][ T3321] mapped_file 0 [ 52.287430][ T3321] dirty 0 [ 52.290480][ T3321] writeback 0 [ 52.293944][ T3321] workingset_refault_anon 43 [ 52.298544][ T3321] workingset_refault_file 384 [ 52.303248][ T3321] swap 196608 [ 52.306541][ T3321] swapcached 0 [ 52.310043][ T3321] pgpgin 23254 [ 52.313415][ T3321] pgpgout 23254 [ 52.316882][ T3321] pgfault 30010 [ 52.320352][ T3321] pgmajfault 34 [ 52.323853][ T3321] inactive_anon 0 [ 52.327496][ T3321] active_anon 0 [ 52.330980][ T3321] inactive_file 0 [ 52.334645][ T3321] active_file 0 [ 52.338370][ T3321] unevictable 0 [ 52.341855][ T3321] hierarchical_memory_limit 314572800 [ 52.347233][ T3321] hierarchical_memsw_limit 9223372036854771712 [ 52.353409][ T3321] total_cache 0 [ 52.356930][ T3321] total_rss 0 [ 52.360266][ T3321] total_shmem 0 [ 52.363730][ T3321] total_mapped_file 0 [ 52.367706][ T3321] total_dirty 0 [ 52.371210][ T3321] total_writeback 0 [ 52.375057][ T3321] total_workingset_refault_anon 43 [ 52.380186][ T3321] total_workingset_refault_file 384 [ 52.385394][ T3321] total_swap 196608 [ 52.389266][ T3321] total_swapcached 0 [ 52.393248][ T3321] total_pgpgin 23254 [ 52.397156][ T3321] total_pgpgout 23254 [ 52.401267][ T3321] total_pgfault 30010 [ 52.405308][ T3321] total_pgmajfault 34 [ 52.409294][ T3321] total_inactive_anon 0 [ 52.413475][ T3321] total_active_anon 0 [ 52.417464][ T3321] total_inactive_file 0 [ 52.421639][ T3321] total_active_file 0 [ 52.425631][ T3321] total_unevictable 0 [ 52.429740][ T3321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.255,pid=4440,uid=0 [ 52.444265][ T3321] Memory cgroup out of memory: Killed process 4440 (syz.2.255) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 52.463823][ T3501] tipc: Node number set to 2886997007 [ 52.563247][ T4440] syz.2.255 (4440) used greatest stack depth: 9832 bytes left [ 52.632145][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 52.632162][ T29] audit: type=1400 audit(1768123965.595:2186): avc: denied { connect } for pid=4456 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.663552][ T29] audit: type=1400 audit(1768123965.595:2187): avc: denied { bind } for pid=4456 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.682816][ T29] audit: type=1400 audit(1768123965.595:2188): avc: denied { write } for pid=4456 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.711759][ T29] audit: type=1400 audit(1768123965.645:2189): avc: denied { watch } for pid=4458 comm="syz.1.266" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 52.711816][ T4463] syz_tun: entered allmulticast mode [ 52.722264][ T4463] pimreg: entered allmulticast mode [ 52.736202][ T29] audit: type=1400 audit(1768123965.665:2190): avc: denied { read } for pid=4456 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.742128][ T4459] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 52.754628][ T29] audit: type=1400 audit(1768123965.705:2191): avc: denied { mac_admin } for pid=4458 comm="syz.1.266" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.808501][ T4468] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 52.817842][ T4468] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 52.864102][ T4463] syz_tun: left allmulticast mode [ 52.891052][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.261'. [ 52.904592][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.934775][ T4476] loop0: detected capacity change from 0 to 2048 [ 52.942596][ T4474] bridge_slave_0 (unregistering): left allmulticast mode [ 52.949695][ T4474] bridge_slave_0 (unregistering): left promiscuous mode [ 52.956686][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.973398][ T29] audit: type=1400 audit(1768123965.735:2192): avc: denied { relabelto } for pid=4458 comm="syz.1.266" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 53.000775][ T29] audit: type=1400 audit(1768123965.735:2193): avc: denied { associate } for pid=4458 comm="syz.1.266" name="cgroup.procs" dev="cgroup" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 53.028969][ T29] audit: type=1326 audit(1768123965.805:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfe8af749 code=0x7ffc0000 [ 53.052592][ T29] audit: type=1326 audit(1768123965.805:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbfe8af749 code=0x7ffc0000 [ 53.077608][ T4459] loop1: detected capacity change from 0 to 2048 [ 53.117685][ T4476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.129961][ T4459] EXT4-fs (loop1): failed to initialize system zone (-117) [ 53.137259][ T4459] EXT4-fs (loop1): mount failed [ 53.154163][ T4483] loop2: detected capacity change from 0 to 512 [ 53.185710][ T4490] SELinux: policydb version 544367893 does not match my version range 15-35 [ 53.194921][ T4490] SELinux: failed to load policy [ 53.222953][ T4481] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 53.326067][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.383236][ T4501] netlink: 44 bytes leftover after parsing attributes in process `syz.0.269'. [ 53.393102][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 53.441190][ T4504] loop0: detected capacity change from 0 to 1024 [ 53.453469][ T4504] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 53.514522][ T4508] EXT4-fs: Ignoring removed i_version option [ 53.520680][ T4508] EXT4-fs: Ignoring removed bh option [ 53.542918][ T4508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.570591][ T4508] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.628233][ T4514] netlink: 'syz.1.274': attribute type 3 has an invalid length. [ 53.659965][ T4516] FAULT_INJECTION: forcing a failure. [ 53.659965][ T4516] name failslab, interval 1, probability 0, space 0, times 0 [ 53.672865][ T4516] CPU: 1 UID: 0 PID: 4516 Comm: syz.1.275 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.672975][ T4516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.672988][ T4516] Call Trace: [ 53.672996][ T4516] [ 53.673004][ T4516] __dump_stack+0x1d/0x30 [ 53.673059][ T4516] dump_stack_lvl+0x95/0xd0 [ 53.673084][ T4516] dump_stack+0x15/0x1b [ 53.673181][ T4516] should_fail_ex+0x265/0x280 [ 53.673201][ T4516] should_failslab+0x8c/0xb0 [ 53.673223][ T4516] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 53.673244][ T4516] ? __alloc_skb+0x2ff/0x4b0 [ 53.673293][ T4516] __alloc_skb+0x2ff/0x4b0 [ 53.673317][ T4516] ? __alloc_skb+0x228/0x4b0 [ 53.673346][ T4516] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 53.673380][ T4516] ? rb_erase+0x206/0x680 [ 53.673441][ T4516] ? rb_insert_color+0x299/0x2b0 [ 53.673560][ T4516] ? __pfx_rtnetlink_event+0x10/0x10 [ 53.673586][ T4516] rtnetlink_event+0x18c/0x200 [ 53.673609][ T4516] raw_notifier_call_chain+0x6f/0x1b0 [ 53.673639][ T4516] ? netif_set_mac_address+0x21b/0x2b0 [ 53.673743][ T4516] netif_set_mac_address+0x231/0x2b0 [ 53.673772][ T4516] dev_set_mac_address_user+0xd7/0x190 [ 53.673801][ T4516] dev_ifsioc+0x9b3/0xaa0 [ 53.673837][ T4516] ? mutex_lock+0x58/0x90 [ 53.673981][ T4516] dev_ioctl+0x70a/0x960 [ 53.674018][ T4516] sock_do_ioctl+0x197/0x220 [ 53.674038][ T4516] sock_ioctl+0x41b/0x610 [ 53.674133][ T4516] ? __pfx_sock_ioctl+0x10/0x10 [ 53.674196][ T4516] __se_sys_ioctl+0xce/0x140 [ 53.674229][ T4516] __x64_sys_ioctl+0x43/0x50 [ 53.674254][ T4516] x64_sys_call+0x14b0/0x3000 [ 53.674276][ T4516] do_syscall_64+0xca/0x2b0 [ 53.674349][ T4516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.674372][ T4516] RIP: 0033:0x7f0dfdb4f749 [ 53.674387][ T4516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.674487][ T4516] RSP: 002b:00007f0dfc5af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.674511][ T4516] RAX: ffffffffffffffda RBX: 00007f0dfdda5fa0 RCX: 00007f0dfdb4f749 [ 53.674527][ T4516] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 53.674541][ T4516] RBP: 00007f0dfc5af090 R08: 0000000000000000 R09: 0000000000000000 [ 53.674555][ T4516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.674646][ T4516] R13: 00007f0dfdda6038 R14: 00007f0dfdda5fa0 R15: 00007ffe14897608 [ 53.674667][ T4516] [ 54.403907][ T4534] set_capacity_and_notify: 1 callbacks suppressed [ 54.403926][ T4534] loop5: detected capacity change from 0 to 512 [ 54.523099][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.640830][ T4544] loop2: detected capacity change from 0 to 512 [ 54.647836][ T4544] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 54.662803][ T4544] EXT4-fs: error: could not find journal device path [ 54.731263][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 55.095920][ T4549] loop1: detected capacity change from 0 to 512 [ 55.232457][ T4547] FAT-fs (loop1): error, corrupted file size (i_pos 51, 9216) [ 55.299534][ T4563] loop5: detected capacity change from 0 to 8192 [ 55.422908][ T4582] tipc: Started in network mode [ 55.427828][ T4582] tipc: Node identity c6b6f5a7ebb7, cluster identity 4711 [ 55.435109][ T4582] tipc: Enabled bearer , priority 0 [ 55.442072][ T4583] syzkaller0: entered promiscuous mode [ 55.447677][ T4583] syzkaller0: entered allmulticast mode [ 55.521067][ T4584] tipc: Resetting bearer [ 55.592068][ T4584] tipc: Disabling bearer [ 55.706015][ T4611] loop2: detected capacity change from 0 to 512 [ 55.712154][ T4605] loop3: detected capacity change from 0 to 512 [ 55.718850][ T4611] EXT4-fs: Ignoring removed i_version option [ 55.738135][ T4610] loop1: detected capacity change from 0 to 1024 [ 55.770850][ T4611] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 55.775582][ T4610] EXT4-fs: Ignoring removed nobh option [ 55.785286][ T4610] EXT4-fs: inline encryption not supported [ 55.882310][ T4600] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216) [ 55.890506][ T4610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.962181][ T4610] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.992810][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.310394][ T4643] siw: device registration error -23 [ 56.408549][ T4648] FAULT_INJECTION: forcing a failure. [ 56.408549][ T4648] name failslab, interval 1, probability 0, space 0, times 0 [ 56.421319][ T4648] CPU: 1 UID: 0 PID: 4648 Comm: syz.5.300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.421346][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.421387][ T4648] Call Trace: [ 56.421395][ T4648] [ 56.421405][ T4648] __dump_stack+0x1d/0x30 [ 56.421434][ T4648] dump_stack_lvl+0x95/0xd0 [ 56.421459][ T4648] dump_stack+0x15/0x1b [ 56.421477][ T4648] should_fail_ex+0x265/0x280 [ 56.421557][ T4648] should_failslab+0x8c/0xb0 [ 56.421578][ T4648] kmem_cache_alloc_noprof+0x69/0x4b0 [ 56.421603][ T4648] ? audit_log_start+0x342/0x720 [ 56.421625][ T4648] audit_log_start+0x342/0x720 [ 56.421651][ T4648] audit_seccomp+0x48/0x100 [ 56.421774][ T4648] ? __seccomp_filter+0x832/0x1260 [ 56.421798][ T4648] __seccomp_filter+0x843/0x1260 [ 56.421829][ T4648] ? __schedule+0x85f/0xcd0 [ 56.421880][ T4648] __secure_computing+0x82/0x150 [ 56.421902][ T4648] syscall_trace_enter+0xcf/0x1e0 [ 56.421927][ T4648] do_syscall_64+0xa4/0x2b0 [ 56.421976][ T4648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.422001][ T4648] RIP: 0033:0x7f7a7a25e15c [ 56.422017][ T4648] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.422034][ T4648] RSP: 002b:00007f7a78cbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.422053][ T4648] RAX: ffffffffffffffda RBX: 00007f7a7a4b5fa0 RCX: 00007f7a7a25e15c [ 56.422159][ T4648] RDX: 000000000000000f RSI: 00007f7a78cbf0a0 RDI: 0000000000000006 [ 56.422173][ T4648] RBP: 00007f7a78cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 56.422188][ T4648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.422202][ T4648] R13: 00007f7a7a4b6038 R14: 00007f7a7a4b5fa0 R15: 00007fffc82dfe48 [ 56.422223][ T4648] [ 56.603568][ T4649] ipvlan1: entered promiscuous mode [ 56.608825][ T4649] ipvlan1: entered allmulticast mode [ 56.614129][ T4649] veth0_vlan: entered allmulticast mode [ 56.982022][ T4675] loop2: detected capacity change from 0 to 1024 [ 56.990152][ T4675] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 57.186453][ T4692] loop1: detected capacity change from 0 to 512 [ 57.190552][ T4687] loop0: detected capacity change from 0 to 1024 [ 57.200524][ T4692] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.211741][ T4687] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.220560][ T4687] ext4: Unknown parameter 'fsmagic' [ 57.220946][ T4692] EXT4-fs (loop1): 1 orphan inode deleted [ 57.231690][ T4692] EXT4-fs (loop1): 1 truncate cleaned up [ 57.265422][ T4692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.284204][ T4699] netlink: 156 bytes leftover after parsing attributes in process `syz.0.315'. [ 57.335806][ T4692] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.313'. [ 57.345195][ T4692] netlink: zone id is out of range [ 57.350356][ T4692] netlink: zone id is out of range [ 57.355976][ T4692] netlink: zone id is out of range [ 57.356434][ T4703] FAULT_INJECTION: forcing a failure. [ 57.356434][ T4703] name failslab, interval 1, probability 0, space 0, times 0 [ 57.374117][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: syz.0.317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.374224][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.374237][ T4703] Call Trace: [ 57.374244][ T4703] [ 57.374253][ T4703] __dump_stack+0x1d/0x30 [ 57.374283][ T4703] dump_stack_lvl+0x95/0xd0 [ 57.374307][ T4703] dump_stack+0x15/0x1b [ 57.374329][ T4703] should_fail_ex+0x265/0x280 [ 57.374393][ T4703] should_failslab+0x8c/0xb0 [ 57.374423][ T4703] __kvmalloc_node_noprof+0x149/0x6b0 [ 57.374446][ T4703] ? alloc_fdtable+0xc2/0x1d0 [ 57.374472][ T4703] alloc_fdtable+0xc2/0x1d0 [ 57.374552][ T4703] dup_fd+0x492/0x510 [ 57.374572][ T4703] copy_files+0x98/0xf0 [ 57.374590][ T4703] copy_process+0xc17/0x1ef0 [ 57.374654][ T4703] kernel_clone+0x16c/0x5c0 [ 57.374674][ T4703] ? vfs_write+0x7e8/0x960 [ 57.374696][ T4703] __x64_sys_clone+0xe6/0x120 [ 57.374727][ T4703] x64_sys_call+0x12d0/0x3000 [ 57.374789][ T4703] do_syscall_64+0xca/0x2b0 [ 57.374824][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.374848][ T4703] RIP: 0033:0x7ffbfe8af749 [ 57.374864][ T4703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.374934][ T4703] RSP: 002b:00007ffbfd316fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 57.374953][ T4703] RAX: ffffffffffffffda RBX: 00007ffbfeb05fa0 RCX: 00007ffbfe8af749 [ 57.374966][ T4703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 57.375027][ T4703] RBP: 00007ffbfd317090 R08: 0000000000000000 R09: 0000000000000000 [ 57.375040][ T4703] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 57.375052][ T4703] R13: 00007ffbfeb06038 R14: 00007ffbfeb05fa0 R15: 00007fffcddf1f38 [ 57.375073][ T4703] [ 57.376640][ T4692] netlink: zone id is out of range [ 57.563875][ T4692] netlink: zone id is out of range [ 57.569095][ T4692] netlink: zone id is out of range [ 57.574384][ T4692] netlink: del zone limit has 8 unknown bytes [ 57.594197][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.651796][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 57.651815][ T29] audit: type=1400 audit(1768123970.615:2561): avc: denied { ioctl } for pid=4714 comm="syz.5.322" path="socket:[9386]" dev="sockfs" ino=9386 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.822316][ T4727] FAULT_INJECTION: forcing a failure. [ 57.822316][ T4727] name failslab, interval 1, probability 0, space 0, times 0 [ 57.835185][ T4727] CPU: 0 UID: 0 PID: 4727 Comm: syz.5.327 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.835212][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.835223][ T4727] Call Trace: [ 57.835229][ T4727] [ 57.835236][ T4727] __dump_stack+0x1d/0x30 [ 57.835278][ T4727] dump_stack_lvl+0x95/0xd0 [ 57.835297][ T4727] dump_stack+0x15/0x1b [ 57.835318][ T4727] should_fail_ex+0x265/0x280 [ 57.835342][ T4727] should_failslab+0x8c/0xb0 [ 57.835445][ T4727] __kmalloc_cache_noprof+0x65/0x4c0 [ 57.835516][ T4727] ? xdp_umem_create+0x3c/0x5c0 [ 57.835550][ T4727] xdp_umem_create+0x3c/0x5c0 [ 57.835650][ T4727] ? should_fail_ex+0xdb/0x280 [ 57.835671][ T4727] xsk_setsockopt+0x5ea/0x640 [ 57.835697][ T4727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 57.835740][ T4727] __sys_setsockopt+0x184/0x200 [ 57.835773][ T4727] __x64_sys_setsockopt+0x64/0x80 [ 57.835801][ T4727] x64_sys_call+0x21d5/0x3000 [ 57.835822][ T4727] do_syscall_64+0xca/0x2b0 [ 57.835910][ T4727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.835929][ T4727] RIP: 0033:0x7f7a7a25f749 [ 57.835947][ T4727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.836004][ T4727] RSP: 002b:00007f7a78cbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 57.836024][ T4727] RAX: ffffffffffffffda RBX: 00007f7a7a4b5fa0 RCX: 00007f7a7a25f749 [ 57.836035][ T4727] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 57.836047][ T4727] RBP: 00007f7a78cbf090 R08: 0000000000000020 R09: 0000000000000000 [ 57.836059][ T4727] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 57.836108][ T4727] R13: 00007f7a7a4b6038 R14: 00007f7a7a4b5fa0 R15: 00007fffc82dfe48 [ 57.836129][ T4727] [ 57.945609][ T4733] netlink: 36 bytes leftover after parsing attributes in process `syz.5.329'. [ 57.984181][ T4736] FAULT_INJECTION: forcing a failure. [ 57.984181][ T4736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.984210][ T4736] CPU: 1 UID: 0 PID: 4736 Comm: syz.5.331 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.984234][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.984244][ T4736] Call Trace: [ 57.984251][ T4736] [ 57.984258][ T4736] __dump_stack+0x1d/0x30 [ 57.984361][ T4736] dump_stack_lvl+0x95/0xd0 [ 57.984416][ T4736] dump_stack+0x15/0x1b [ 57.984440][ T4736] should_fail_ex+0x265/0x280 [ 57.984507][ T4736] should_fail+0xb/0x20 [ 57.984526][ T4736] should_fail_usercopy+0x1a/0x20 [ 57.984564][ T4736] strncpy_from_user+0x27/0x260 [ 57.984636][ T4736] getname_flags+0xae/0x3b0 [ 57.984661][ T4736] __x64_sys_link+0x33/0x70 [ 57.984680][ T4736] x64_sys_call+0x1325/0x3000 [ 57.984730][ T4736] do_syscall_64+0xca/0x2b0 [ 57.984779][ T4736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.984822][ T4736] RIP: 0033:0x7f7a7a25f749 [ 57.984836][ T4736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.984852][ T4736] RSP: 002b:00007f7a78cbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 57.984870][ T4736] RAX: ffffffffffffffda RBX: 00007f7a7a4b5fa0 RCX: 00007f7a7a25f749 [ 57.984881][ T4736] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000200000000340 [ 57.984929][ T4736] RBP: 00007f7a78cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 57.984940][ T4736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.984951][ T4736] R13: 00007f7a7a4b6038 R14: 00007f7a7a4b5fa0 R15: 00007fffc82dfe48 [ 57.984971][ T4736] [ 58.021777][ T29] audit: type=1326 audit(1768123970.985:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 58.021866][ T29] audit: type=1326 audit(1768123970.985:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 58.023740][ T29] audit: type=1326 audit(1768123970.985:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 58.023901][ T29] audit: type=1326 audit(1768123970.985:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 58.024023][ T29] audit: type=1326 audit(1768123970.985:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 58.024323][ T29] audit: type=1326 audit(1768123970.985:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 58.041513][ T29] audit: type=1326 audit(1768123971.005:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 58.041649][ T29] audit: type=1326 audit(1768123971.005:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 58.041878][ T29] audit: type=1326 audit(1768123971.005:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 58.052007][ T4738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.066326][ T4738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.066493][ T4738] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.096599][ T4738] netlink: 'syz.3.330': attribute type 6 has an invalid length. [ 58.096683][ T4738] netlink: 168 bytes leftover after parsing attributes in process `syz.3.330'. [ 58.104863][ T4722] syz.1.325 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 58.104895][ T4722] CPU: 1 UID: 0 PID: 4722 Comm: syz.1.325 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.104931][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.104946][ T4722] Call Trace: [ 58.104954][ T4722] [ 58.104963][ T4722] __dump_stack+0x1d/0x30 [ 58.104988][ T4722] dump_stack_lvl+0x95/0xd0 [ 58.105056][ T4722] dump_stack+0x15/0x1b [ 58.105080][ T4722] dump_header+0x81/0x240 [ 58.105105][ T4722] oom_kill_process+0x295/0x350 [ 58.105127][ T4722] out_of_memory+0x97b/0xb80 [ 58.105148][ T4722] try_charge_memcg+0x610/0xa10 [ 58.105216][ T4722] charge_memcg+0x51/0xc0 [ 58.105250][ T4722] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 58.105289][ T4722] __read_swap_cache_async+0x17b/0x2d0 [ 58.105324][ T4722] swap_cluster_readahead+0x262/0x3c0 [ 58.105415][ T4722] swapin_readahead+0xde/0x820 [ 58.105448][ T4722] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 58.105478][ T4722] ? lruvec_stat_mod_folio+0xd6/0x120 [ 58.105543][ T4722] ? __rcu_read_unlock+0x4f/0x70 [ 58.105567][ T4722] ? swap_cache_get_folio+0x277/0x280 [ 58.105599][ T4722] do_swap_page+0x2b4/0x21e0 [ 58.105643][ T4722] ? __pfx_default_wake_function+0x10/0x10 [ 58.105674][ T4722] handle_mm_fault+0x9d8/0x2c60 [ 58.105746][ T4722] do_user_addr_fault+0x630/0x1080 [ 58.105773][ T4722] exc_page_fault+0x62/0xa0 [ 58.105805][ T4722] asm_exc_page_fault+0x26/0x30 [ 58.105855][ T4722] RIP: 0033:0x7f0dfda259c8 [ 58.105874][ T4722] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 23 38 00 00 0f 8e 09 fe ff ff e8 23 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 [ 58.105895][ T4722] RSP: 002b:00007ffe14897770 EFLAGS: 00010206 [ 58.105912][ T4722] RAX: 000000000000e2b3 RBX: 00007f0dfdda7da0 RCX: 000000000000e290 [ 58.105924][ T4722] RDX: 0000000000000023 RSI: 00007ffe14897750 RDI: 0000000000000001 [ 58.105937][ T4722] RBP: 00007f0dfdda7da0 R08: 0000000002180020 R09: 7fffffffffffffff [ 58.106015][ T4722] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000000e4de [ 58.106030][ T4722] R13: 00007ffe14897860 R14: ffffffffffffffff R15: 00007ffe14897880 [ 58.106051][ T4722] [ 58.106059][ T4722] memory: usage 307200kB, limit 307200kB, failcnt 1200 [ 58.106074][ T4722] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 58.106090][ T4722] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 58.106105][ T4722] Memory cgroup stats for /syz1: [ 58.106370][ T4722] cache 0 [ 58.106378][ T4722] rss 0 [ 58.106393][ T4722] shmem 0 [ 58.106399][ T4722] mapped_file 0 [ 58.106406][ T4722] dirty 0 [ 58.106412][ T4722] writeback 8192 [ 58.106419][ T4722] workingset_refault_anon 30 [ 58.106426][ T4722] workingset_refault_file 450 [ 58.106433][ T4722] swap 180224 [ 58.106441][ T4722] swapcached 20480 [ 58.106450][ T4722] pgpgin 22853 [ 58.106458][ T4722] pgpgout 22847 [ 58.106465][ T4722] pgfault 27868 [ 58.106479][ T4722] pgmajfault 23 [ 58.106485][ T4722] inactive_anon 12288 [ 58.106554][ T4722] active_anon 8192 [ 58.106563][ T4722] inactive_file 0 [ 58.106571][ T4722] active_file 4096 [ 58.106580][ T4722] unevictable 0 [ 58.106587][ T4722] hierarchical_memory_limit 314572800 [ 58.106596][ T4722] hierarchical_memsw_limit 9223372036854771712 [ 58.106605][ T4722] total_cache 0 [ 58.106612][ T4722] total_rss 0 [ 58.106618][ T4722] total_shmem 0 [ 58.106625][ T4722] total_mapped_file 0 [ 58.106667][ T4722] total_dirty 0 [ 58.106674][ T4722] total_writeback 8192 [ 58.106682][ T4722] total_workingset_refault_anon 30 [ 58.106717][ T4722] total_workingset_refault_file 450 [ 58.106775][ T4722] total_swap 180224 [ 58.106784][ T4722] total_swapcached 20480 [ 58.106793][ T4722] total_pgpgin 22853 [ 58.106801][ T4722] total_pgpgout 22847 [ 58.106903][ T4722] total_pgfault 27868 [ 58.106913][ T4722] total_pgmajfault 23 [ 58.106922][ T4722] total_inactive_anon 12288 [ 58.107007][ T4722] total_active_anon 8192 [ 58.107014][ T4722] total_inactive_file 0 [ 58.107021][ T4722] total_active_file 4096 [ 58.107028][ T4722] total_unevictable 0 [ 58.107035][ T4722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.325,pid=4722,uid=0 [ 58.107252][ T4722] Memory cgroup out of memory: Killed process 4722 (syz.1.325) total-vm:93968kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 58.249141][ T4748] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 58.328992][ T4758] FAULT_INJECTION: forcing a failure. [ 58.328992][ T4758] name failslab, interval 1, probability 0, space 0, times 0 [ 58.329026][ T4758] CPU: 1 UID: 0 PID: 4758 Comm: GPL Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.329049][ T4758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.329059][ T4758] Call Trace: [ 58.329065][ T4758] [ 58.329099][ T4758] __dump_stack+0x1d/0x30 [ 58.329126][ T4758] dump_stack_lvl+0x95/0xd0 [ 58.329145][ T4758] dump_stack+0x15/0x1b [ 58.329163][ T4758] should_fail_ex+0x265/0x280 [ 58.329197][ T4758] should_failslab+0x8c/0xb0 [ 58.329223][ T4758] __kmalloc_cache_noprof+0x65/0x4c0 [ 58.329250][ T4758] ? tipc_group_create+0x66/0x290 [ 58.329277][ T4758] tipc_group_create+0x66/0x290 [ 58.329338][ T4758] tipc_sk_join+0x130/0x2e0 [ 58.329371][ T4758] tipc_setsockopt+0x598/0x620 [ 58.329402][ T4758] ? __pfx_tipc_setsockopt+0x10/0x10 [ 58.329467][ T4758] __sys_setsockopt+0x184/0x200 [ 58.329500][ T4758] __x64_sys_setsockopt+0x64/0x80 [ 58.329532][ T4758] x64_sys_call+0x21d5/0x3000 [ 58.329553][ T4758] do_syscall_64+0xca/0x2b0 [ 58.329584][ T4758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.329608][ T4758] RIP: 0033:0x7f7a7a25f749 [ 58.329647][ T4758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.329667][ T4758] RSP: 002b:00007f7a78cbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 58.329690][ T4758] RAX: ffffffffffffffda RBX: 00007f7a7a4b5fa0 RCX: 00007f7a7a25f749 [ 58.329705][ T4758] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 58.329719][ T4758] RBP: 00007f7a78cbf090 R08: 0000000000000010 R09: 0000000000000000 [ 58.329732][ T4758] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 58.329746][ T4758] R13: 00007f7a7a4b6038 R14: 00007f7a7a4b5fa0 R15: 00007fffc82dfe48 [ 58.329798][ T4758] [ 58.804382][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.539433][ T4790] siw: device registration error -23 [ 59.692882][ T4793] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 59.747757][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 59.747786][ T4793] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 59.791356][ T4795] netlink: 'syz.0.350': attribute type 9 has an invalid length. [ 59.817555][ T4795] macvlan2: entered promiscuous mode [ 59.822957][ T4795] macvlan2: entered allmulticast mode [ 59.835507][ T4799] netlink: 44 bytes leftover after parsing attributes in process `syz.5.352'. [ 59.857465][ T4805] set_capacity_and_notify: 3 callbacks suppressed [ 59.857482][ T4805] loop3: detected capacity change from 0 to 512 [ 59.870619][ T4799] netlink: 32 bytes leftover after parsing attributes in process `syz.5.352'. [ 59.888566][ T4799] loop5: detected capacity change from 0 to 512 [ 59.909588][ T4805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.933372][ T4812] FAULT_INJECTION: forcing a failure. [ 59.933372][ T4812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.946667][ T4812] CPU: 0 UID: 0 PID: 4812 Comm: syz.2.355 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.946744][ T4812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.946756][ T4812] Call Trace: [ 59.946762][ T4812] [ 59.946769][ T4812] __dump_stack+0x1d/0x30 [ 59.946803][ T4812] dump_stack_lvl+0x95/0xd0 [ 59.946827][ T4812] dump_stack+0x15/0x1b [ 59.946849][ T4812] should_fail_ex+0x265/0x280 [ 59.946882][ T4812] should_fail_alloc_page+0xf2/0x100 [ 59.946908][ T4812] __alloc_frozen_pages_noprof+0x109/0x360 [ 59.946990][ T4812] alloc_pages_mpol+0xb3/0x260 [ 59.947016][ T4812] vma_alloc_folio_noprof+0x1aa/0x300 [ 59.947044][ T4812] handle_mm_fault+0xef5/0x2c60 [ 59.947119][ T4812] ? mt_find+0x21b/0x330 [ 59.947143][ T4812] do_user_addr_fault+0x3fe/0x1080 [ 59.947173][ T4812] exc_page_fault+0x62/0xa0 [ 59.947197][ T4812] asm_exc_page_fault+0x26/0x30 [ 59.947233][ T4812] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 59.947262][ T4812] Code: 17 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 59.947281][ T4812] RSP: 0018:ffffc90001b47d40 EFLAGS: 00050206 [ 59.947377][ T4812] RAX: ffff8881328f4c90 RBX: 0000000000001000 RCX: 0000000000000248 [ 59.947390][ T4812] RDX: 0000000000000000 RSI: ffff88811c39adb8 RDI: 0000200000007000 [ 59.947464][ T4812] RBP: ffff88811c39a000 R08: 00000000000005f8 R09: 0000000000000000 [ 59.947480][ T4812] R10: 000188811c39a000 R11: 000188811c39afff R12: 0000200000007248 [ 59.947494][ T4812] R13: 00007ffffffff000 R14: 0000200000006248 R15: ffff88811c39a000 [ 59.947534][ T4812] _copy_to_user+0x7c/0xa0 [ 59.947569][ T4812] pagemap_read+0x379/0x5e0 [ 59.947594][ T4812] ? __pfx_pagemap_read+0x10/0x10 [ 59.947616][ T4812] vfs_read+0x1a8/0x770 [ 59.947635][ T4812] ? __fget_files+0x184/0x1c0 [ 59.947789][ T4812] ? __rcu_read_unlock+0x4f/0x70 [ 59.947843][ T4812] ? __fget_files+0x184/0x1c0 [ 59.947865][ T4812] ? mutex_unlock+0x4f/0x90 [ 59.947897][ T4812] __x64_sys_pread64+0xfd/0x150 [ 59.947921][ T4812] x64_sys_call+0x281b/0x3000 [ 59.948019][ T4812] do_syscall_64+0xca/0x2b0 [ 59.948141][ T4812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.948162][ T4812] RIP: 0033:0x7f4459d3f749 [ 59.948176][ T4812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.948192][ T4812] RSP: 002b:00007f445879f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 59.948225][ T4812] RAX: ffffffffffffffda RBX: 00007f4459f95fa0 RCX: 00007f4459d3f749 [ 59.948239][ T4812] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000003 [ 59.948252][ T4812] RBP: 00007f445879f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.948266][ T4812] R10: 0000000ffffffff8 R11: 0000000000000246 R12: 0000000000000002 [ 59.948280][ T4812] R13: 00007f4459f96038 R14: 00007f4459f95fa0 R15: 00007fffe01b12d8 [ 59.948356][ T4812] [ 60.253860][ T4805] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.288495][ T4799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.322213][ T4799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.335637][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.503451][ T4827] siw: device registration error -23 [ 60.610627][ T4838] loop3: detected capacity change from 0 to 512 [ 60.627539][ T4839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4839 comm=syz.5.366 [ 60.650195][ T4839] netlink: 'syz.5.366': attribute type 13 has an invalid length. [ 60.685007][ T3321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 60.695992][ T3321] CPU: 1 UID: 0 PID: 3321 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.696039][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.696053][ T3321] Call Trace: [ 60.696060][ T3321] [ 60.696069][ T3321] __dump_stack+0x1d/0x30 [ 60.696107][ T3321] dump_stack_lvl+0x95/0xd0 [ 60.696130][ T3321] dump_stack+0x15/0x1b [ 60.696164][ T3321] dump_header+0x81/0x240 [ 60.696182][ T3321] oom_kill_process+0x295/0x350 [ 60.696205][ T3321] out_of_memory+0x97b/0xb80 [ 60.696226][ T3321] try_charge_memcg+0x610/0xa10 [ 60.696378][ T3321] charge_memcg+0x51/0xc0 [ 60.696450][ T3321] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 60.696488][ T3321] __read_swap_cache_async+0x17b/0x2d0 [ 60.696522][ T3321] swap_cluster_readahead+0x262/0x3c0 [ 60.696571][ T3321] swapin_readahead+0xde/0x820 [ 60.696603][ T3321] ? update_load_avg+0x1da/0x820 [ 60.696627][ T3321] ? __list_add_valid_or_report+0x38/0xe0 [ 60.696729][ T3321] ? __rcu_read_unlock+0x4f/0x70 [ 60.696824][ T3321] ? swap_cache_get_folio+0x277/0x280 [ 60.696854][ T3321] do_swap_page+0x2b4/0x21e0 [ 60.696884][ T3321] ? _raw_spin_unlock+0x26/0x50 [ 60.696909][ T3321] ? __schedule+0x85f/0xcd0 [ 60.696977][ T3321] ? __pfx_default_wake_function+0x10/0x10 [ 60.696998][ T3321] handle_mm_fault+0x9d8/0x2c60 [ 60.697022][ T3321] do_user_addr_fault+0x630/0x1080 [ 60.697095][ T3321] exc_page_fault+0x62/0xa0 [ 60.697112][ T3321] asm_exc_page_fault+0x26/0x30 [ 60.697184][ T3321] RIP: 0033:0x7f4459d71fc5 [ 60.697196][ T3321] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 60.697208][ T3321] RSP: 002b:00007fffe01b1618 EFLAGS: 00010246 [ 60.697220][ T3321] RAX: 0000000000000000 RBX: 00000000000000cf RCX: 00007f4459d71fc3 [ 60.697229][ T3321] RDX: 00007fffe01b1630 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.697237][ T3321] RBP: 00007fffe01b169c R08: 000000001feb444f R09: 0000000000000000 [ 60.697334][ T3321] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 60.697343][ T3321] R13: 00000000000927c0 R14: 000000000000ebed R15: 00007fffe01b16f0 [ 60.697355][ T3321] [ 60.697360][ T3321] memory: usage 307200kB, limit 307200kB, failcnt 1371 [ 60.923152][ T3321] memory+swap: usage 8080kB, limit 9007199254740988kB, failcnt 0 [ 60.931001][ T3321] kmem: usage 1916kB, limit 9007199254740988kB, failcnt 0 [ 60.938128][ T3321] Memory cgroup stats for /syz2: [ 60.938761][ T3321] cache 0 [ 60.946689][ T3321] rss 32768 [ 60.949943][ T3321] shmem 0 [ 60.952940][ T3321] mapped_file 0 [ 60.956427][ T3321] dirty 0 [ 60.959477][ T3321] writeback 20480 [ 60.963147][ T3321] workingset_refault_anon 68 [ 60.967743][ T3321] workingset_refault_file 511 [ 60.972460][ T3321] swap 143360 [ 60.975832][ T3321] swapcached 45056 [ 60.979558][ T3321] pgpgin 36383 [ 60.982963][ T3321] pgpgout 36370 [ 60.986437][ T3321] pgfault 44240 [ 60.990019][ T3321] pgmajfault 52 [ 60.993494][ T3321] inactive_anon 28672 [ 60.997482][ T3321] active_anon 24576 [ 61.001328][ T3321] inactive_file 0 [ 61.005058][ T3321] active_file 0 [ 61.008535][ T3321] unevictable 0 [ 61.012035][ T3321] hierarchical_memory_limit 314572800 [ 61.017466][ T3321] hierarchical_memsw_limit 9223372036854771712 [ 61.023682][ T3321] total_cache 0 [ 61.027164][ T3321] total_rss 32768 [ 61.030830][ T3321] total_shmem 0 [ 61.034346][ T3321] total_mapped_file 0 [ 61.038337][ T3321] total_dirty 0 [ 61.041914][ T3321] total_writeback 20480 [ 61.046080][ T3321] total_workingset_refault_anon 68 [ 61.051415][ T3321] total_workingset_refault_file 511 [ 61.056624][ T3321] total_swap 143360 [ 61.060561][ T3321] total_swapcached 45056 [ 61.064813][ T3321] total_pgpgin 36383 [ 61.068836][ T3321] total_pgpgout 36370 [ 61.072926][ T3321] total_pgfault 44240 [ 61.077129][ T3321] total_pgmajfault 52 [ 61.081162][ T3321] total_inactive_anon 28672 [ 61.085673][ T3321] total_active_anon 24576 [ 61.090053][ T3321] total_inactive_file 0 [ 61.094275][ T3321] total_active_file 0 [ 61.098324][ T3321] total_unevictable 0 [ 61.102453][ T3321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.358,pid=4814,uid=0 [ 61.117187][ T3321] Memory cgroup out of memory: Killed process 4814 (syz.2.358) total-vm:96016kB, anon-rss:1136kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 61.165776][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.212674][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.224370][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.280984][ T293] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.335363][ T293] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.357568][ T4864] loop1: detected capacity change from 0 to 164 [ 61.357602][ T293] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.357821][ T4862] loop2: detected capacity change from 0 to 512 [ 61.380502][ T4864] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.387442][ T4108] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.444513][ T4866] netlink: 'syz.5.375': attribute type 1 has an invalid length. [ 61.473299][ T4866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.475323][ T4871] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 61.516575][ T4866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.550456][ T4866] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 61.570763][ T4866] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 61.627601][ T4878] netlink: 'syz.3.377': attribute type 13 has an invalid length. [ 61.638882][ T4880] SELinux: Context system_u:object_r:cert_t:s0 is not valid (left unmapped). [ 62.125992][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.133311][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.176341][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.190143][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.244981][ T2099] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.260272][ T2099] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.277821][ T2099] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.287239][ T2099] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.470097][ T4902] loop1: detected capacity change from 0 to 1024 [ 62.513771][ T4902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.567906][ T4902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'. [ 62.590701][ T4912] loop5: detected capacity change from 0 to 512 [ 62.680126][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 62.680174][ T29] audit: type=1400 audit(1768123975.645:2892): avc: denied { mounton } for pid=4899 comm="syz.1.388" path="/92/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.700015][ T4914] cgroup2: Unknown parameter 'cpu' [ 63.555385][ T4922] ipvlan1: entered promiscuous mode [ 63.560661][ T4922] ipvlan1: entered allmulticast mode [ 63.565950][ T4922] veth0_vlan: entered allmulticast mode [ 63.578995][ T4922] loop3: detected capacity change from 0 to 256 [ 63.718866][ T29] audit: type=1400 audit(1768123976.675:2893): avc: denied { write } for pid=4929 comm="syz.5.396" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.743362][ T4931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.778541][ T4922] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.862002][ T4931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.915141][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.926846][ T4937] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 63.978212][ T29] audit: type=1400 audit(1768123976.935:2894): avc: denied { write } for pid=4940 comm="syz.1.399" path="socket:[10533]" dev="sockfs" ino=10533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.030886][ T29] audit: type=1326 audit(1768123976.995:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7a25f749 code=0x7ffc0000 [ 64.054354][ T29] audit: type=1326 audit(1768123976.995:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7a25f749 code=0x7ffc0000 [ 64.079422][ T4943] sit0: Caught tx_queue_len zero misconfig [ 64.097743][ T4943] loop2: detected capacity change from 0 to 512 [ 64.109550][ T4943] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.400: inode has both inline data and extents flags [ 64.219435][ T29] audit: type=1326 audit(1768123977.175:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7a25f749 code=0x7ffc0000 [ 64.269676][ T29] audit: type=1326 audit(1768123977.205:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7a25f749 code=0x7ffc0000 [ 64.293341][ T29] audit: type=1326 audit(1768123977.205:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7a25f749 code=0x7ffc0000 [ 64.316787][ T29] audit: type=1326 audit(1768123977.205:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7a25f749 code=0x7ffc0000 [ 64.340179][ T29] audit: type=1326 audit(1768123977.205:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.5.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7a7a25f749 code=0x7ffc0000 [ 64.368338][ T4948] loop1: detected capacity change from 0 to 512 [ 64.375446][ T4948] ext4: Bad value for 'max_batch_time' [ 64.385800][ T4943] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.400: couldn't read orphan inode 15 (err -117) [ 64.429166][ T4943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.463886][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.896647][ T4964] FAT-fs (loop5): error, corrupted file size (i_pos 51, 9216) [ 65.074767][ T4986] netlink: 36 bytes leftover after parsing attributes in process `syz.1.413'. [ 65.086551][ T4986] netlink: 3 bytes leftover after parsing attributes in process `syz.1.413'. [ 65.096277][ T4986] 0ªX¹¦À: renamed from caif0 [ 65.103768][ T4986] 0ªX¹¦À: entered allmulticast mode [ 65.109035][ T4986] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 65.177672][ T4992] siw: device registration error -23 [ 65.262434][ T5001] FAULT_INJECTION: forcing a failure. [ 65.262434][ T5001] name failslab, interval 1, probability 0, space 0, times 0 [ 65.275207][ T5001] CPU: 0 UID: 0 PID: 5001 Comm: syz.1.420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.275297][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.275354][ T5001] Call Trace: [ 65.275361][ T5001] [ 65.275370][ T5001] __dump_stack+0x1d/0x30 [ 65.275397][ T5001] dump_stack_lvl+0x95/0xd0 [ 65.275420][ T5001] dump_stack+0x15/0x1b [ 65.275441][ T5001] should_fail_ex+0x265/0x280 [ 65.275523][ T5001] should_failslab+0x8c/0xb0 [ 65.275547][ T5001] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 65.275571][ T5001] ? __alloc_skb+0x2ff/0x4b0 [ 65.275662][ T5001] __alloc_skb+0x2ff/0x4b0 [ 65.275686][ T5001] ? __alloc_skb+0x228/0x4b0 [ 65.275710][ T5001] create_monitor_ctrl_close+0xa3/0x360 [ 65.275808][ T5001] ? hci_sock_release+0x8b/0x2f0 [ 65.275836][ T5001] hci_sock_release+0xa4/0x2f0 [ 65.275855][ T5001] sock_close+0x6b/0x150 [ 65.275949][ T5001] ? __pfx_sock_close+0x10/0x10 [ 65.275969][ T5001] __fput+0x29b/0x650 [ 65.276036][ T5001] ____fput+0x1c/0x30 [ 65.276123][ T5001] task_work_run+0x131/0x1a0 [ 65.276144][ T5001] exit_to_user_mode_loop+0x1fe/0x740 [ 65.276161][ T5001] do_syscall_64+0x1dd/0x2b0 [ 65.276182][ T5001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.276225][ T5001] RIP: 0033:0x7f0dfdb4f749 [ 65.276237][ T5001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.276249][ T5001] RSP: 002b:00007f0dfc5af038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 65.276271][ T5001] RAX: 0000000000000000 RBX: 00007f0dfdda5fa0 RCX: 00007f0dfdb4f749 [ 65.276285][ T5001] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 65.276299][ T5001] RBP: 00007f0dfc5af090 R08: 0000000000000000 R09: 0000000000000000 [ 65.276372][ T5001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.276385][ T5001] R13: 00007f0dfdda6038 R14: 00007f0dfdda5fa0 R15: 00007ffe14897608 [ 65.276405][ T5001] [ 65.573006][ T5011] set_capacity_and_notify: 2 callbacks suppressed [ 65.573024][ T5011] loop2: detected capacity change from 0 to 1024 [ 65.587143][ T5011] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 65.747819][ T5004] loop1: detected capacity change from 0 to 512 [ 66.122307][ T5004] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.421: EA inode hash validation failed [ 66.153365][ T5004] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.421: corrupted inode contents [ 66.159334][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 66.177134][ T3318] CPU: 1 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.177175][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.177187][ T3318] Call Trace: [ 66.177193][ T3318] [ 66.177200][ T3318] __dump_stack+0x1d/0x30 [ 66.177224][ T3318] dump_stack_lvl+0x95/0xd0 [ 66.177248][ T3318] dump_stack+0x15/0x1b [ 66.177309][ T3318] dump_header+0x81/0x240 [ 66.177355][ T3318] oom_kill_process+0x295/0x350 [ 66.177375][ T3318] out_of_memory+0x97b/0xb80 [ 66.177395][ T3318] try_charge_memcg+0x610/0xa10 [ 66.177532][ T3318] charge_memcg+0x51/0xc0 [ 66.177564][ T3318] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 66.177663][ T3318] __read_swap_cache_async+0x17b/0x2d0 [ 66.177739][ T3318] swap_cluster_readahead+0x262/0x3c0 [ 66.177821][ T3318] swapin_readahead+0xde/0x820 [ 66.177860][ T3318] ? __rcu_read_unlock+0x4f/0x70 [ 66.177879][ T3318] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 66.177899][ T3318] ? __list_add_valid_or_report+0x38/0xe0 [ 66.177925][ T3318] ? __rcu_read_unlock+0x4f/0x70 [ 66.177947][ T3318] ? swap_cache_get_folio+0x277/0x280 [ 66.177988][ T3318] do_swap_page+0x2b4/0x21e0 [ 66.178087][ T3318] ? _raw_spin_unlock+0x26/0x50 [ 66.178161][ T3318] ? __schedule+0x85f/0xcd0 [ 66.178182][ T3318] ? __pfx_default_wake_function+0x10/0x10 [ 66.178221][ T3318] handle_mm_fault+0x9d8/0x2c60 [ 66.178294][ T3318] do_user_addr_fault+0x630/0x1080 [ 66.178329][ T3318] exc_page_fault+0x62/0xa0 [ 66.178359][ T3318] asm_exc_page_fault+0x26/0x30 [ 66.178382][ T3318] RIP: 0033:0x7ffbfe8e1fc5 [ 66.178448][ T3318] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 66.178607][ T3318] RSP: 002b:00007fffcddf2278 EFLAGS: 00010246 [ 66.178623][ T3318] RAX: 0000000000000000 RBX: 00000000000000fa RCX: 00007ffbfe8e1fc3 [ 66.178677][ T3318] RDX: 00007fffcddf2290 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.178689][ T3318] RBP: 00007fffcddf22fc R08: 00000000033c1adb R09: 0000000000000000 [ 66.178700][ T3318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 66.178712][ T3318] R13: 00000000000927c0 R14: 0000000000010180 R15: 00007fffcddf2350 [ 66.178728][ T3318] [ 66.178743][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 1436 [ 66.193702][ T5004] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.421: mark_inode_dirty error [ 66.198864][ T3318] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 66.198894][ T3318] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 66.198908][ T3318] Memory cgroup stats for /syz0: [ 66.202657][ T3318] cache 0 [ 66.202668][ T3318] rss 28672 [ 66.202676][ T3318] shmem 0 [ 66.202683][ T3318] mapped_file 0 [ 66.202742][ T3318] dirty 0 [ 66.202749][ T3318] writeback 28672 [ 66.202757][ T3318] workingset_refault_anon 121 [ 66.202767][ T3318] workingset_refault_file 493 [ 66.202839][ T3318] swap 176128 [ 66.202848][ T3318] swapcached 28672 [ 66.202856][ T3318] pgpgin 60537 [ 66.202865][ T3318] pgpgout 60530 [ 66.202873][ T3318] pgfault 64228 [ 66.202911][ T3318] pgmajfault 62 [ 66.202996][ T3318] inactive_anon 28672 [ 66.203005][ T3318] active_anon 0 [ 66.203013][ T3318] inactive_file 0 [ 66.203021][ T3318] active_file 0 [ 66.203029][ T3318] unevictable 0 [ 66.203037][ T3318] hierarchical_memory_limit 314572800 [ 66.391783][ T5004] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.421: corrupted inode contents [ 66.394573][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 66.394588][ T3318] total_cache 0 [ 66.394596][ T3318] total_rss 28672 [ 66.394632][ T3318] total_shmem 0 [ 66.394640][ T3318] total_mapped_file 0 [ 66.394648][ T3318] total_dirty 0 [ 66.394656][ T3318] total_writeback 28672 [ 66.394665][ T3318] total_workingset_refault_anon 121 [ 66.394675][ T3318] total_workingset_refault_file 493 [ 66.394683][ T3318] total_swap 176128 [ 66.394691][ T3318] total_swapcached 28672 [ 66.394699][ T3318] total_pgpgin 60537 [ 66.394780][ T3318] total_pgpgout 60530 [ 66.394788][ T3318] total_pgfault 64228 [ 66.394797][ T3318] total_pgmajfault 62 [ 66.394846][ T3318] total_inactive_anon 28672 [ 66.394855][ T3318] total_active_anon 0 [ 66.394864][ T3318] total_inactive_file 0 [ 66.394872][ T3318] total_active_file 0 [ 66.394880][ T3318] total_unevictable 0 [ 66.394889][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0 [ 66.421766][ T5004] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.421: mark_inode_dirty error [ 66.424221][ T3318] ,task=syz.0.427,pid=5020,uid=0 [ 66.424252][ T3318] Memory cgroup out of memory: Killed process 5020 (syz.0.427) total-vm:96016kB, anon-rss:1244kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 66.687290][ T5004] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.421: mark inode dirty (error -117) [ 66.712046][ T5032] Cannot find del_set index 0 as target [ 66.743327][ T5034] pimreg: tun_chr_ioctl cmd 1074025677 [ 66.748396][ T5004] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 66.748980][ T5034] pimreg: linktype set to 271 [ 66.811154][ T5004] EXT4-fs (loop1): 1 orphan inode deleted [ 66.837610][ T5004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.927675][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.164720][ T5045] process 'gtp' launched '/dev/fd/7' with NULL argv: empty string added [ 67.690829][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 67.690848][ T29] audit: type=1326 audit(1768123980.655:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dfdb465e7 code=0x7ffc0000 [ 67.738543][ T29] audit: type=1326 audit(1768123980.685:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dfdaeb829 code=0x7ffc0000 [ 67.761872][ T29] audit: type=1326 audit(1768123980.685:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dfdb465e7 code=0x7ffc0000 [ 67.784739][ T29] audit: type=1326 audit(1768123980.685:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dfdaeb829 code=0x7ffc0000 [ 67.807518][ T29] audit: type=1326 audit(1768123980.685:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f0dfdb4f749 code=0x7ffc0000 [ 67.830512][ T29] audit: type=1326 audit(1768123980.695:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dfdb465e7 code=0x7ffc0000 [ 67.853252][ T29] audit: type=1326 audit(1768123980.695:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dfdaeb829 code=0x7ffc0000 [ 67.876191][ T29] audit: type=1326 audit(1768123980.695:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f0dfdb4f749 code=0x7ffc0000 [ 67.902282][ T29] audit: type=1326 audit(1768123980.745:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dfdb465e7 code=0x7ffc0000 [ 67.925187][ T29] audit: type=1326 audit(1768123980.745:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dfdaeb829 code=0x7ffc0000 [ 68.067108][ T5064] loop3: detected capacity change from 0 to 1024 [ 68.069164][ T5061] loop5: detected capacity change from 0 to 512 [ 68.081303][ T5062] loop1: detected capacity change from 0 to 1764 [ 68.091714][ T5062] ISOFS: unable to read i-node block [ 68.099907][ T5062] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 68.110235][ T5061] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.117100][ T5061] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.442: bad orphan inode 13 [ 68.127280][ T5061] ext4_test_bit(bit=12, block=18) = 1 [ 68.132798][ T5061] is_bad_inode(inode)=0 [ 68.136958][ T5061] NEXT_ORPHAN(inode)=2130706432 [ 68.141855][ T5061] max_ino=32 [ 68.142184][ T5064] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 68.145078][ T5061] i_nlink=1 [ 68.145612][ T5061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.182011][ T5061] Cannot find del_set index 0 as target [ 68.248316][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.423103][ T5083] loop2: detected capacity change from 0 to 512 [ 68.452677][ T5083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.473905][ T5083] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.485032][ T5088] loop5: detected capacity change from 0 to 512 [ 68.519716][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.752281][ T5094] ipvlan1: entered promiscuous mode [ 68.757575][ T5094] ipvlan1: entered allmulticast mode [ 68.762907][ T5094] veth0_vlan: entered allmulticast mode [ 68.778581][ T5094] loop2: detected capacity change from 0 to 256 [ 68.792919][ T5094] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.377226][ T5103] 9p: Unknown access argument 18446744073709551615: -34 [ 69.465911][ T5105] siw: device registration error -23 [ 69.478440][ T5108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.457'. [ 69.616761][ T5106] loop1: detected capacity change from 0 to 512 [ 69.641571][ T5125] loop3: detected capacity change from 0 to 512 [ 69.677340][ T5125] ------------[ cut here ]------------ [ 69.682906][ T5125] EA inode 11 i_nlink=2 [ 69.682924][ T5125] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.3.455/5125 [ 69.697943][ T5125] Modules linked in: [ 69.700182][ T5111] FAT-fs (loop1): error, corrupted file size (i_pos 51, 9216) [ 69.701924][ T5125] CPU: 0 UID: 0 PID: 5125 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.719185][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.729565][ T5125] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 69.736269][ T5125] Code: 11 e3 9c ff 4c 8d 2d 5a ee 20 05 49 8d 7e 40 e8 81 6d b8 ff 49 8b 6e 40 4c 89 e7 e8 95 68 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 9c 9c ba 03 66 66 66 2e 0f 1f 84 [ 69.756096][ T5125] RSP: 0018:ffffc90000e9b5a0 EFLAGS: 00010246 [ 69.762313][ T5125] RAX: ffff88811ca3bc10 RBX: ffff88811c422080 RCX: ffffffff81bb1d6b [ 69.770367][ T5125] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0 [ 69.778456][ T5125] RBP: 000000000000000b R08: 000188811c422033 R09: 0000000000000000 [ 69.786475][ T5125] R10: ffffc90000e9b4d0 R11: 0001c90000e9b4d0 R12: ffff88811c422030 [ 69.794486][ T5125] R13: ffffffff86dc0bb0 R14: ffff88811c421fe8 R15: 0000000000000001 [ 69.802602][ T5125] FS: 00007f695ea4a6c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 69.811576][ T5125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.818183][ T5125] CR2: 00007f6960432a60 CR3: 000000011bff8000 CR4: 00000000003506f0 [ 69.826232][ T5125] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.834271][ T5125] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 69.842316][ T5125] Call Trace: [ 69.845780][ T5125] [ 69.848733][ T5125] ext4_xattr_set_entry+0x77f/0x1020 [ 69.854225][ T5125] ext4_xattr_ibody_set+0x184/0x3c0 [ 69.859454][ T5125] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 69.865343][ T5125] __ext4_expand_extra_isize+0x246/0x280 [ 69.871083][ T5125] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 69.876640][ T5125] ext4_evict_inode+0x7c4/0xd40 [ 69.881555][ T5125] ? __pfx_ext4_evict_inode+0x10/0x10 [ 69.886962][ T5125] evict+0x2af/0x510 [ 69.890899][ T5125] ? __dquot_initialize+0x146/0x7c0 [ 69.896122][ T5125] iput+0x4bd/0x650 [ 69.899947][ T5125] ext4_process_orphan+0x1a9/0x1c0 [ 69.905252][ T5125] ext4_orphan_cleanup+0x6a8/0xa00 [ 69.910448][ T5125] ext4_fill_super+0x3411/0x37a0 [ 69.915408][ T5125] ? set_blocksize+0x1a8/0x310 [ 69.920244][ T5125] ? sb_set_blocksize+0xfc/0x170 [ 69.925197][ T5125] ? setup_bdev_super+0x30e/0x370 [ 69.930529][ T5125] ? __pfx_ext4_fill_super+0x10/0x10 [ 69.935851][ T5125] get_tree_bdev_flags+0x291/0x300 [ 69.941022][ T5125] ? __pfx_ext4_fill_super+0x10/0x10 [ 69.946387][ T5125] get_tree_bdev+0x1f/0x30 [ 69.950829][ T5125] ext4_get_tree+0x1c/0x30 [ 69.955273][ T5125] vfs_get_tree+0x57/0x1d0 [ 69.959742][ T5125] do_new_mount+0x24d/0x6a0 [ 69.964288][ T5125] path_mount+0x4ab/0xb80 [ 69.968806][ T5125] ? user_path_at+0xbf/0x130 [ 69.973462][ T5125] __se_sys_mount+0x28c/0x2e0 [ 69.978189][ T5125] __x64_sys_mount+0x67/0x80 [ 69.982899][ T5125] x64_sys_call+0x2cca/0x3000 [ 69.987693][ T5125] do_syscall_64+0xca/0x2b0 [ 69.992342][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.998440][ T5125] RIP: 0033:0x7f6960450eea [ 70.003020][ T5125] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.022925][ T5125] RSP: 002b:00007f695ea49e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.031421][ T5125] RAX: ffffffffffffffda RBX: 00007f695ea49ef0 RCX: 00007f6960450eea [ 70.039418][ T5125] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f695ea49eb0 [ 70.047508][ T5125] RBP: 0000200000000180 R08: 00007f695ea49ef0 R09: 0000000000800700 [ 70.055560][ T5125] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 70.063569][ T5125] R13: 00007f695ea49eb0 R14: 000000000000046f R15: 000000000000002c [ 70.071701][ T5125] [ 70.074734][ T5125] ---[ end trace 0000000000000000 ]--- [ 70.082196][ T5125] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.455: iget: bad extra_isize 90 (inode size 256) [ 70.096931][ T5125] EXT4-fs (loop3): Remounting filesystem read-only [ 70.104141][ T5125] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 70.121062][ T5125] EXT4-fs (loop3): 1 orphan inode deleted [ 70.134545][ T5125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.147466][ T5125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.155393][ T5135] batadv_slave_1: entered promiscuous mode [ 70.164465][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 70.173547][ T5135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.195549][ T5135] batadv_slave_1 (unregistering): left promiscuous mode [ 70.207735][ T5135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.250787][ T5142] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 70.268158][ T5142] bond4: entered promiscuous mode [ 70.274002][ T5142] 8021q: adding VLAN 0 to HW filter on device bond4 [ 70.287547][ T5142] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 70.295352][ T5142] netlink: 224 bytes leftover after parsing attributes in process `syz.0.468'. [ 70.306255][ T5142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5142 comm=syz.0.468 [ 70.327492][ T5142] bond4: (slave bridge1): making interface the new active one [ 70.335122][ T5142] bridge1: entered promiscuous mode [ 70.344883][ T5147] siw: device registration error -23 [ 70.350391][ T5142] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 70.608627][ T5167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.618429][ T5167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.263213][ T5170] syz.1.472 (5170) used greatest stack depth: 9744 bytes left [ 71.417864][ T5177] pimreg: entered allmulticast mode [ 71.434125][ T5182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=536 sclass=netlink_route_socket pid=5182 comm=syz.0.481 [ 71.456596][ T5172] pimreg: left allmulticast mode [ 71.533649][ T5190] netlink: 204 bytes leftover after parsing attributes in process `syz.2.484'. [ 71.604313][ T5193] loop1: detected capacity change from 0 to 512 [ 71.674955][ T5199] FAT-fs (loop1): error, corrupted file size (i_pos 51, 9216) [ 71.723055][ T5205] loop2: detected capacity change from 0 to 1024 [ 71.731812][ T5205] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 71.851867][ T5216] netlink: 'syz.5.491': attribute type 3 has an invalid length. [ 71.863163][ T5216] netlink: 'syz.5.491': attribute type 3 has an invalid length. [ 72.005412][ T5225] loop2: detected capacity change from 0 to 256 [ 72.016916][ T5225] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.270048][ T5224] loop5: detected capacity change from 0 to 2048 [ 72.321170][ T3492] loop5: p1 < > p4 [ 72.336903][ T5230] SELinux: failed to load policy [ 72.403317][ T3492] loop5: p4 size 722688 extends beyond EOD, truncated [ 72.576513][ T5224] loop5: p1 < > p4 [ 72.595172][ T5224] loop5: p4 size 722688 extends beyond EOD, truncated [ 72.703642][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 72.703657][ T29] audit: type=1400 audit(1768123985.565:3603): avc: denied { append } for pid=5237 comm="syz.3.499" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 72.757343][ T5235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.794840][ T5235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.819574][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 72.857552][ T5235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.002019][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 73.080460][ T29] audit: type=1400 audit(1768123985.795:3604): avc: denied { sqpoll } for pid=5237 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.099764][ T29] audit: type=1400 audit(1768123986.015:3605): avc: denied { getopt } for pid=5237 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.161947][ T5243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.177084][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 73.188831][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 73.222320][ T5243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.257623][ T5255] loop5: detected capacity change from 0 to 512 [ 73.271943][ T5254] siw: device registration error -23 [ 73.310648][ T5255] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 73.333349][ T5255] EXT4-fs (loop5): invalid journal inode [ 73.347470][ T5235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.364121][ T5255] EXT4-fs (loop5): can't get journal size [ 73.395588][ T5255] EXT4-fs (loop5): 1 truncate cleaned up [ 73.420380][ T5255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.453803][ T1658] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.471842][ T1658] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.495668][ T5255] vlan2: entered promiscuous mode [ 73.500875][ T5255] macvtap0: entered promiscuous mode [ 73.516771][ T1658] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.557489][ T1658] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.593981][ T5264] loop3: detected capacity change from 0 to 512 [ 73.664625][ T5273] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216) [ 73.886532][ T3891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.961145][ T5281] loop2: detected capacity change from 0 to 256 [ 73.969957][ T5281] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.360419][ T29] audit: type=1326 audit(1768123987.325:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7a25f749 code=0x7ffc0000 [ 74.362593][ T5286] siw: device registration error -23 [ 74.395176][ T29] audit: type=1326 audit(1768123987.345:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7a25f749 code=0x7ffc0000 [ 74.401837][ T5289] loop3: detected capacity change from 0 to 1024 [ 74.418721][ T29] audit: type=1326 audit(1768123987.355:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 74.448482][ T29] audit: type=1326 audit(1768123987.355:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 74.471867][ T29] audit: type=1326 audit(1768123987.355:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 74.495329][ T29] audit: type=1326 audit(1768123987.355:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 74.518776][ T29] audit: type=1326 audit(1768123987.355:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696044f749 code=0x7ffc0000 [ 74.550073][ T5287] sctp: [Deprecated]: syz.5.512 (pid 5287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.550073][ T5287] Use struct sctp_sack_info instead [ 74.572183][ T5289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.602920][ T5289] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.621035][ T5289] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.514: inode has both inline data and extents flags [ 74.634263][ T5289] EXT4-fs (loop3): Remounting filesystem read-only [ 74.691032][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.757472][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 74.795935][ T5314] loop5: detected capacity change from 0 to 512 [ 74.810054][ T5314] netlink: 176 bytes leftover after parsing attributes in process `syz.5.524'. [ 74.847126][ T5318] loop2: detected capacity change from 0 to 1024 [ 74.863444][ T5320] siw: device registration error -23 [ 74.873578][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.530'. [ 74.896322][ T5318] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.527: Failed to acquire dquot type 0 [ 74.917008][ T5324] pim6reg: entered allmulticast mode [ 74.924890][ T5318] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 74.934332][ T5324] pim6reg: left allmulticast mode [ 74.940113][ T5318] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.527: corrupted inode contents [ 74.957607][ T5318] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.527: mark_inode_dirty error [ 74.969197][ T5318] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.527: corrupted inode contents [ 74.981663][ T5318] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.527: mark_inode_dirty error [ 74.993386][ T5318] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.527: corrupted inode contents [ 75.005648][ T5318] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 75.014472][ T5318] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.527: corrupted inode contents [ 75.026809][ T5318] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.527: mark_inode_dirty error [ 75.038263][ T5318] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 75.049712][ T5318] EXT4-fs (loop2): 1 truncate cleaned up [ 75.055872][ T5318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.071421][ T5336] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 75.103294][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.145493][ T5348] batadv_slave_0: Caught tx_queue_len zero misconfig [ 75.194684][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 75.317385][ T5357] ipvlan1: entered promiscuous mode [ 75.322991][ T5357] ipvlan1: entered allmulticast mode [ 75.328329][ T5357] veth0_vlan: entered allmulticast mode [ 75.344321][ T5357] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.581523][ T5360] mmap: syz.0.543 (5360) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.898206][ T5364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.544'. [ 75.909725][ T5364] smc: net device gre0 applied user defined pnetid SYZ0 [ 75.978718][ T5364] netlink: 176 bytes leftover after parsing attributes in process `syz.1.544'. [ 75.991163][ T5364] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 76.005389][ T5374] syzkaller0: entered promiscuous mode [ 76.010981][ T5374] syzkaller0: entered allmulticast mode [ 76.030895][ T5374] tipc: Enabled bearer , priority 0 [ 76.038700][ T5373] tipc: Resetting bearer [ 76.100496][ T5373] tipc: Disabling bearer [ 76.121448][ T5383] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 76.127992][ T5383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.135518][ T5383] vhci_hcd vhci_hcd.0: Device attached [ 76.137383][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 76.221006][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 76.277051][ T5395] ext2: Unknown parameter 'fsname' [ 76.333869][ T3422] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 76.508321][ T5398] xt_hashlimit: max too large, truncated to 1048576 [ 76.521544][ T5398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.764257][ T5403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 77.206569][ T5384] vhci_hcd: connection closed [ 77.207049][ T4443] vhci_hcd vhci_hcd.5: stop threads [ 77.207106][ T3422] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 77.211837][ T4443] vhci_hcd vhci_hcd.5: release socket [ 77.230055][ T4443] vhci_hcd vhci_hcd.5: disconnect device [ 77.277799][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.282916][ T5415] set_capacity_and_notify: 2 callbacks suppressed [ 77.282935][ T5415] loop1: detected capacity change from 0 to 4096 [ 77.340646][ T5415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.437444][ T5415] SELinux: failed to load policy [ 77.479907][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.581939][ T5438] loop1: detected capacity change from 0 to 512 [ 77.610841][ T5438] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 77.627537][ T5438] EXT4-fs (loop1): invalid journal inode [ 77.639708][ T5438] EXT4-fs (loop1): can't get journal size [ 77.645893][ T5392] ================================================================== [ 77.653996][ T5392] BUG: KCSAN: data-race in touch_atime / touch_atime [ 77.660712][ T5392] [ 77.663052][ T5392] write to 0xffff88811caade00 of 4 bytes by task 5383 on cpu 1: [ 77.670683][ T5392] touch_atime+0x1e8/0x340 [ 77.675115][ T5392] shmem_file_read_iter+0x477/0x540 [ 77.680325][ T5392] copy_splice_read+0x442/0x660 [ 77.685190][ T5392] splice_direct_to_actor+0x290/0x680 [ 77.690561][ T5392] do_splice_direct+0xda/0x150 [ 77.695333][ T5392] do_sendfile+0x380/0x650 [ 77.699757][ T5392] __x64_sys_sendfile64+0x105/0x150 [ 77.704959][ T5392] x64_sys_call+0x2db1/0x3000 [ 77.709645][ T5392] do_syscall_64+0xca/0x2b0 [ 77.714162][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.720055][ T5392] [ 77.722469][ T5392] read to 0xffff88811caade00 of 4 bytes by task 5392 on cpu 0: [ 77.730020][ T5392] touch_atime+0x194/0x340 [ 77.734441][ T5392] shmem_file_read_iter+0x477/0x540 [ 77.739650][ T5392] copy_splice_read+0x442/0x660 [ 77.744604][ T5392] splice_direct_to_actor+0x290/0x680 [ 77.749983][ T5392] do_splice_direct+0xda/0x150 [ 77.754834][ T5392] do_sendfile+0x380/0x650 [ 77.759258][ T5392] __x64_sys_sendfile64+0x105/0x150 [ 77.764460][ T5392] x64_sys_call+0x2db1/0x3000 [ 77.769143][ T5392] do_syscall_64+0xca/0x2b0 [ 77.773658][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.779640][ T5392] [ 77.781964][ T5392] value changed: 0x2399a417 -> 0x24105cf6 [ 77.787675][ T5392] [ 77.790005][ T5392] Reported by Kernel Concurrency Sanitizer on: [ 77.796158][ T5392] CPU: 0 UID: 0 PID: 5392 Comm: syz.5.551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.807624][ T5392] Tainted: [W]=WARN [ 77.811423][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.821477][ T5392] ================================================================== [ 77.839542][ T5438] EXT4-fs (loop1): 1 truncate cleaned up [ 77.845979][ T5438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.887732][ T5438] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.566: invalid fast symlink length 39 [ 77.908630][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.279732][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.279741][ T3547] Bluetooth: hci0: command 0x1003 tx timeout [ 82.249695][ T3422] usb 11-1: enqueue for inactive port 0 [ 82.255298][ T3422] usb 11-1: enqueue for inactive port 0 [ 82.329741][ T3422] vhci_hcd vhci_hcd.5: vhci_device speed not set