last executing test programs: 6.722546042s ago: executing program 2 (id=971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0xb, 0x0, 0xffffffffffffffff, @void, @value, @void, @void, r7}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x19, 0x10, 0x0, @void, @value=r0, @void, @void, r7}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0d00000018000000", @ANYRES32=r3, @ANYBLOB="84f2f6772866a8106b934ffd020062deb0f7", @ANYRES32=r3, @ANYBLOB, @ANYRES64=r7], 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r10, 0x0, 0x8d0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r11, r0, 0x30, 0x8, 0x0, @void, @value=r0, @void, @void, r7}, 0x20) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r12, 0x0, 0x1000, 0x1, &(0x7f0000000100)) 6.006448713s ago: executing program 2 (id=975): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r8, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 4.931806659s ago: executing program 2 (id=990): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r8, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000090000010073797a30000000000900030073797a32000000009c000000060a010400000000000001000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000012040005800c000480060001008a9500000900010073797a3000000000140000001100010000000000000000000700000a"], 0x110}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000004c0)) 3.919705192s ago: executing program 2 (id=998): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.987885422s ago: executing program 1 (id=1010): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000f13009500000000000000000000000000000000a0e85f940000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e01010000000000002100020013000300000028bd7000033500003bae2dc010f351cb03000000ff7e11e36f5f88413a4e3d7d7b6fd0eb6dc35a809b34628a4a15f3513f26cecb9177c2c80666f180b7"], 0x78}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x100000000002, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = syz_io_uring_setup(0x13d4, &(0x7f0000000940)={0x0, 0x7718, 0x800, 0x8002, 0x1bf}, &(0x7f0000000440)=0x0, &(0x7f0000000680)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x52, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x2001064, 0x1000, 0x7, 0x40227}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r11 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'dvmrp1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000d40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff1, 0x6}, {0xffe0, 0x8}, {0x0, 0x11}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7493}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb9}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xb, 0x4, 0x1, 0x2, 0x101, 0x9, 0x3}}, {0xa, 0x2, [0x9, 0x5, 0x1]}}, {{0x1c, 0x1, {0x7, 0x87, 0x7f, 0x3, 0x2, 0x4, 0x5, 0x9}}, {0x16, 0x2, [0x4, 0x200, 0x1, 0x7, 0x81, 0x7fff, 0x0, 0x2, 0x36]}}, {{0x1c, 0x1, {0x41, 0x7, 0xfffe, 0xca3, 0x2, 0xfffffffb, 0x0, 0x6}}, {0x10, 0x2, [0x6, 0x3, 0x100, 0x8, 0x2, 0x6]}}, {{0x1c, 0x1, {0x7f, 0x1, 0x4, 0x2, 0xf421d99d46886d4c, 0x3, 0x9, 0x7}}, {0x12, 0x2, [0xa8, 0xe, 0xfff9, 0x2000, 0xfff, 0x180, 0x1]}}, {{0x1c, 0x1, {0x81, 0xcc, 0x9, 0xf, 0x2, 0x80000001, 0x4, 0x3}}, {0xa, 0x2, [0x9, 0x7ff, 0x7]}}, {{0x1c, 0x1, {0x6, 0x7, 0x1ff, 0x4, 0x2, 0x80000001, 0x9, 0x8}}, {0x14, 0x2, [0xdfb, 0x8, 0xd, 0x2, 0x5, 0x9, 0x8, 0x5]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x170}, 0x1, 0x0, 0x0, 0x48010}, 0x145) io_uring_enter(r6, 0x488c, 0xd3c, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.893467416s ago: executing program 4 (id=1012): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.621829987s ago: executing program 1 (id=1014): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5], 0x84}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.040845893s ago: executing program 4 (id=1015): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.033989822s ago: executing program 0 (id=1025): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r8, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000004c0)) 1.942528257s ago: executing program 2 (id=1017): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r8, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000004c0)) 1.745672226s ago: executing program 1 (id=1020): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0xfffffffffffffe97, &(0x7f0000000540)=[{&(0x7f0000000180)="f7", 0x101d0}, {&(0x7f0000000380)="af1dfe3adc55559f62fa02e60cec06843d84b48e6543e4ea0dd7abca5f6428dbf07f2b456581e7bbe9430599452faa1069cbe4ce4138ef65631d6aeb7cc45d80a98a53ca1c9b52fd4315b708e5aa2b8640fbd880f9f2f1e8045073a55b4856247cdb1f8d46fb297b0c81f8878dc0b86f319e195c96d0ffec2c181b2ac5d567dfc6b0d3b372d847688e089fde00443fb2159ddf3b20cf08b65b335f10295f4eb59bb90ecfc395fff83ca03cd436b006bd1c79cc4c22b0915ef69907a4a8"}, {&(0x7f00000004c0)="0a75fb52a0e2635dc6ed29408d382be89c4e2e4b18fb7524c9a670cf2a652b1a733e786232caacbb4a7c4e359d004ac60294eb43254ab4a5dcd51cd69d7807aa27a9c583f662b7405f7e8eca4d8d653350b143cd3250289a81204cca4508860ddc762bae5c2e4192cbeb4b806dee509ca9285d9546b890e038eca091"}, {&(0x7f0000000600)="18de697dc47172fa8e573dfc5d9c0019002c1f8a632f65cd7087b2e18c55ad52b843567ff7cf9f8c5f3adbfe607b8519c2b020b1358c99fb0556d27109add627dbfa252f362e44eb8e68e1c15777e98793dc5b226c8016ddb427725ae879861bd3da6e2d820a972ca8ee3949de191b7c54db8053c4f4301dffdf24c7a89a34"}], 0x1, 0x0, 0x0, 0x20000810}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 1.63534724s ago: executing program 1 (id=1022): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(0x0, 0x9) 1.500630246s ago: executing program 1 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0xb}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x19, 0x10, 0x0, @void, @value=r0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0d00000018000000", @ANYRES32=r3, @ANYBLOB="84f2f6772866a8106b934ffd020062deb0f7", @ANYRES32=r3, @ANYBLOB, @ANYRES64], 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') 1.474065247s ago: executing program 1 (id=1024): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r8, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000090000010073797a30000000000900030073797a32000000009c000000060a010400000000000001000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000012040005800c000480060001008a9500000900010073797a3000000000140000001100010000000000000000000700000a"], 0x110}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000004c0)) 1.412368959s ago: executing program 3 (id=1026): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000e00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f000000bb00)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0xfefe, 0x807, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0xfffffffd, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x17, 0xfa00, {0x0, 0x14, {0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, r1}}, 0x38) 1.080790644s ago: executing program 3 (id=1027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x561a, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 851.546454ms ago: executing program 2 (id=1028): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 840.520814ms ago: executing program 0 (id=1029): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000a200000000000000fff518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000f13009500000000000000000000000000000000a0e85f940000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e01010000000000002100020013000300000028bd7000033500003bae2dc010f351cb03000000ff7e11e36f5f88413a4e3d7d7b6fd0eb6dc35a809b34628a4a15f3513f26cecb9177c2c80666f180b7"], 0x78}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x100000000002, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r2}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) r7 = syz_io_uring_setup(0x13d4, &(0x7f0000000940)={0x0, 0x7718, 0x800, 0x8002, 0x1bf}, &(0x7f0000000440)=0x0, &(0x7f0000000680)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x52, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x2001064, 0x1000, 0x7, 0x40227}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r11, r9, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r12 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'dvmrp1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000d40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xfff1, 0x6}, {0xffe0, 0x8}, {0x0, 0x11}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7493}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb9}, @TCA_STAB={0x114, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xb, 0x4, 0x1, 0x2, 0x101, 0x9, 0x3}}, {0xa, 0x2, [0x9, 0x5, 0x1]}}, {{0x1c, 0x1, {0x7, 0x87, 0x7f, 0x3, 0x2, 0x4, 0x5, 0x9}}, {0x16, 0x2, [0x4, 0x200, 0x1, 0x7, 0x81, 0x7fff, 0x0, 0x2, 0x36]}}, {{0x1c, 0x1, {0x41, 0x7, 0xfffe, 0xca3, 0x2, 0xfffffffb, 0x0, 0x6}}, {0x10, 0x2, [0x6, 0x3, 0x100, 0x8, 0x2, 0x6]}}, {{0x1c, 0x1, {0x7f, 0x1, 0x4, 0x2, 0xf421d99d46886d4c, 0x3, 0x9, 0x7}}, {0x12, 0x2, [0xa8, 0xe, 0xfff9, 0x2000, 0xfff, 0x180, 0x1]}}, {{0x1c, 0x1, {0x81, 0xcc, 0x9, 0xf, 0x2, 0x80000001, 0x4, 0x3}}, {0xa, 0x2, [0x9, 0x7ff, 0x7]}}, {{0x1c, 0x1, {0x6, 0x7, 0x1ff, 0x4, 0x2, 0x80000001, 0x9, 0x8}}, {0x14, 0x2, [0xdfb, 0x8, 0xd, 0x2, 0x5, 0x9, 0x8, 0x5]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x170}, 0x1, 0x0, 0x0, 0x48010}, 0x145) io_uring_enter(r7, 0x488c, 0xd3c, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 762.985807ms ago: executing program 4 (id=1030): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080), 0x4) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) msgget$private(0x0, 0x0) msgget$private(0x0, 0x444) getpid() symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setuid(0x0) 546.520457ms ago: executing program 0 (id=1031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) umount2(0x0, 0x9) 546.234237ms ago: executing program 4 (id=1032): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080), 0x4) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) msgget$private(0x0, 0x0) msgget$private(0x0, 0x444) getpid() socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) 465.55517ms ago: executing program 0 (id=1033): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x1, 0x8, 0x7, 0x9ce6}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x4}]}}]}, 0x38}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x4}]}, {0xffffffffffffff1f}, {0xc}, {0xfffffffffffffcdc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a01010000000000eb00000a0000070900020000007a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 380.460854ms ago: executing program 4 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x628, 0xc88d, 0x43, 0x0, 0x0) 268.014999ms ago: executing program 3 (id=1035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0xb}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x19, 0x10, 0x0, @void, @value=r0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0d00000018000000", @ANYRES32=r3, @ANYBLOB="84f2f6772866a8106b934ffd020062deb0f7", @ANYRES32=r3, @ANYBLOB, @ANYRES64], 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') 211.465771ms ago: executing program 4 (id=1036): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_type={'obj_type', 0x3d, '^}'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x34, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x34, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") 191.211512ms ago: executing program 3 (id=1037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000e00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f000000bb00)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0xfefe, 0x807, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0xfffffffd, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x17, 0xfa00, {0x0, 0x14, {0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, r2}}, 0x38) 138.972944ms ago: executing program 0 (id=1038): ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000a80), 0x10000, 0x4000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 69.693217ms ago: executing program 3 (id=1039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r3 = dup2(r2, r1) recvmsg$can_j1939(r3, &(0x7f0000000880)={&(0x7f00000007c0)=@alg, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/37, 0x25}], 0x1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 63.517318ms ago: executing program 0 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 0s ago: executing program 3 (id=1041): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r8 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) kernel console output (not intermixed with test programs): op1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.988056][ T4031] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 53.999881][ T4031] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 54.038561][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 54.053005][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.160563][ T4049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.171236][ T4051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.192011][ T4051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.200763][ T4049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.408908][ T4071] FAULT_INJECTION: forcing a failure. [ 54.408908][ T4071] name failslab, interval 1, probability 0, space 0, times 0 [ 54.421718][ T4071] CPU: 1 UID: 0 PID: 4071 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.421750][ T4071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.421780][ T4071] Call Trace: [ 54.421788][ T4071] [ 54.421798][ T4071] __dump_stack+0x1d/0x30 [ 54.421826][ T4071] dump_stack_lvl+0xe8/0x140 [ 54.421849][ T4071] dump_stack+0x15/0x1b [ 54.421868][ T4071] should_fail_ex+0x265/0x280 [ 54.421911][ T4071] should_failslab+0x8c/0xb0 [ 54.421986][ T4071] kmem_cache_alloc_node_noprof+0x57/0x4c0 [ 54.422118][ T4071] ? __alloc_skb+0x324/0x4d0 [ 54.422147][ T4071] __alloc_skb+0x324/0x4d0 [ 54.422194][ T4071] ? __alloc_skb+0x24d/0x4d0 [ 54.422217][ T4071] alloc_skb_with_frags+0x7d/0x470 [ 54.422308][ T4071] ? ref_tracker_alloc+0x1f2/0x2f0 [ 54.422340][ T4071] sock_alloc_send_pskb+0x430/0x4e0 [ 54.422374][ T4071] ? __rcu_read_unlock+0x4f/0x70 [ 54.422402][ T4071] packet_sendmsg+0x222b/0x31f0 [ 54.422471][ T4071] ? avc_has_perm+0xf7/0x180 [ 54.422511][ T4071] ? selinux_socket_sendmsg+0x175/0x1b0 [ 54.422620][ T4071] ? __pfx_packet_sendmsg+0x10/0x10 [ 54.422663][ T4071] __sock_sendmsg+0x145/0x180 [ 54.422731][ T4071] __sys_sendto+0x268/0x330 [ 54.422767][ T4071] __x64_sys_sendto+0x76/0x90 [ 54.422788][ T4071] x64_sys_call+0x29a7/0x3000 [ 54.422843][ T4071] do_syscall_64+0xd8/0x2a0 [ 54.422873][ T4071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.422998][ T4071] RIP: 0033:0x7efcd101f749 [ 54.423013][ T4071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.423031][ T4071] RSP: 002b:00007efccfa7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 54.423055][ T4071] RAX: ffffffffffffffda RBX: 00007efcd1275fa0 RCX: 00007efcd101f749 [ 54.423072][ T4071] RDX: 000000000000000e RSI: 0000200000000100 RDI: 0000000000000005 [ 54.423088][ T4071] RBP: 00007efccfa7f090 R08: 0000200000000200 R09: 0000000000000014 [ 54.423103][ T4071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.423119][ T4071] R13: 00007efcd1276038 R14: 00007efcd1275fa0 R15: 00007ffe92094b98 [ 54.423177][ T4071] [ 54.655084][ T4073] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 54.674839][ T4073] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 54.701572][ T4077] siw: device registration error -23 [ 55.033709][ T4097] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 55.067445][ T4097] batadv1: entered promiscuous mode [ 55.072821][ T4097] batadv1: entered allmulticast mode [ 55.116403][ T4103] loop1: detected capacity change from 0 to 512 [ 55.145276][ T4103] EXT4-fs: dax option not supported [ 55.433198][ T4121] capability: warning: `syz.3.167' uses deprecated v2 capabilities in a way that may be insecure [ 55.712079][ T4132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.767292][ T4134] FAULT_INJECTION: forcing a failure. [ 55.767292][ T4134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.780443][ T4134] CPU: 1 UID: 0 PID: 4134 Comm: syz.1.169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.780473][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.780486][ T4134] Call Trace: [ 55.780493][ T4134] [ 55.780501][ T4134] __dump_stack+0x1d/0x30 [ 55.780553][ T4134] dump_stack_lvl+0xe8/0x140 [ 55.780575][ T4134] dump_stack+0x15/0x1b [ 55.780610][ T4134] should_fail_ex+0x265/0x280 [ 55.780646][ T4134] should_fail+0xb/0x20 [ 55.780675][ T4134] should_fail_usercopy+0x1a/0x20 [ 55.780696][ T4134] _copy_from_user+0x1c/0xb0 [ 55.780724][ T4134] ucma_resolve_ip+0x4a/0x1e0 [ 55.780775][ T4134] ucma_write+0x1b3/0x250 [ 55.780812][ T4134] vfs_writev+0x406/0x8b0 [ 55.780834][ T4134] ? __pfx_ucma_write+0x10/0x10 [ 55.780886][ T4134] do_writev+0xe7/0x210 [ 55.780980][ T4134] __x64_sys_writev+0x45/0x50 [ 55.781022][ T4134] x64_sys_call+0x1ba5/0x3000 [ 55.781049][ T4134] do_syscall_64+0xd8/0x2a0 [ 55.781108][ T4134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.781134][ T4134] RIP: 0033:0x7efcd101f749 [ 55.781149][ T4134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.781199][ T4134] RSP: 002b:00007efccfa7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 55.781281][ T4134] RAX: ffffffffffffffda RBX: 00007efcd1275fa0 RCX: 00007efcd101f749 [ 55.781294][ T4134] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 55.781374][ T4134] RBP: 00007efccfa7f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.781386][ T4134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.781399][ T4134] R13: 00007efcd1276038 R14: 00007efcd1275fa0 R15: 00007ffe92094b98 [ 55.781423][ T4134] [ 55.983103][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 55.983123][ T29] audit: type=1326 audit(1764882297.631:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 56.012793][ T29] audit: type=1326 audit(1764882297.641:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 56.033203][ T4140] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.037371][ T29] audit: type=1326 audit(1764882297.641:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 56.071268][ T29] audit: type=1326 audit(1764882297.641:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 56.094981][ T29] audit: type=1326 audit(1764882297.641:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 56.118426][ T29] audit: type=1326 audit(1764882297.641:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 56.138350][ T4143] loop0: detected capacity change from 0 to 512 [ 56.141769][ T29] audit: type=1326 audit(1764882297.641:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 56.171421][ T29] audit: type=1326 audit(1764882297.641:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 56.172147][ T4143] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 56.194682][ T29] audit: type=1326 audit(1764882297.641:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 56.194732][ T29] audit: type=1326 audit(1764882297.641:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f227b021667 code=0x7ffc0000 [ 56.265887][ T4132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.279515][ T4140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7528 sclass=netlink_route_socket pid=4140 comm=syz.4.174 [ 56.339538][ T4140] loop4: detected capacity change from 0 to 1024 [ 56.518353][ T4132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.543192][ T4140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.251391][ T4152] lo speed is unknown, defaulting to 1000 [ 57.271832][ T4143] syzkaller1: entered promiscuous mode [ 57.277781][ T4143] syzkaller1: entered allmulticast mode [ 57.355283][ T4132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.395372][ T814] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 57.442070][ T814] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.461929][ T814] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.494149][ T814] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.527719][ T814] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.632871][ T4177] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.174: reserved inode found cleared - inode=2 [ 57.646927][ T4176] __nla_validate_parse: 3 callbacks suppressed [ 57.646942][ T4176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 57.885339][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 58.185003][ T4196] openvswitch: netlink: Missing key (keys=40, expected=80) [ 58.354553][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.364518][ T4201] 9pnet: Could not find request transport:  [ 58.524120][ T4206] lo speed is unknown, defaulting to 1000 [ 58.605569][ T4206] loop0: detected capacity change from 0 to 512 [ 58.629116][ T4201] netlink: 'syz.2.187': attribute type 29 has an invalid length. [ 58.654349][ T4206] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.689918][ T4206] EXT4-fs (loop0): 1 truncate cleaned up [ 58.701729][ T4206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.784884][ T4205] random: crng reseeded on system resumption [ 58.861845][ T4201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.187'. [ 59.374076][ T4247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.385090][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.409335][ T4247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.555793][ T4255] loop2: detected capacity change from 0 to 2048 [ 59.593627][ T4266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.602697][ T4255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.619352][ T4266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.672067][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.483419][ T4303] netlink: 'syz.0.201': attribute type 29 has an invalid length. [ 60.523129][ T4300] 9pnet: Could not find request transport:  [ 60.566710][ T4300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'. [ 60.582100][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 60.721539][ T4328] loop1: detected capacity change from 0 to 512 [ 60.735872][ T4326] lo speed is unknown, defaulting to 1000 [ 60.763314][ T4328] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.779946][ T4331] serio: Serial port ptm0 [ 60.792292][ T4334] serio: Serial port ptm1 [ 60.798182][ T4328] EXT4-fs (loop1): 1 truncate cleaned up [ 60.804579][ T4328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.867679][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.011956][ T29] kauditd_printk_skb: 904 callbacks suppressed [ 61.011974][ T29] audit: type=1400 audit(1764882302.581:2225): avc: denied { execmem } for pid=4337 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.230658][ T4340] lo speed is unknown, defaulting to 1000 [ 61.324676][ T29] audit: type=1326 audit(1764882303.001:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 61.359791][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.366445][ T3045] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 61.374138][ T3045] audit: backlog limit exceeded [ 61.379125][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.385696][ T3045] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 61.393393][ T3045] audit: backlog limit exceeded [ 61.398405][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.404933][ T3045] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 61.505223][ T4343] 9pnet: Could not find request transport:  [ 61.520695][ T4342] 9pnet: Could not find request transport:  [ 61.554322][ T4348] netlink: 'syz.2.220': attribute type 29 has an invalid length. [ 61.644749][ T4343] netlink: 'syz.4.221': attribute type 29 has an invalid length. [ 61.691253][ T4342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.220'. [ 61.712489][ T4343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.221'. [ 61.832640][ T4375] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 61.908273][ T4375] batadv1: entered promiscuous mode [ 61.913578][ T4375] batadv1: entered allmulticast mode [ 62.208848][ T4391] lo speed is unknown, defaulting to 1000 [ 62.576289][ T4388] loop0: detected capacity change from 0 to 512 [ 62.613156][ T4398] loop4: detected capacity change from 0 to 512 [ 62.629876][ T4388] EXT4-fs: dax option not supported [ 62.714918][ T4398] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.744730][ T4403] loop2: detected capacity change from 0 to 512 [ 62.779091][ T4403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.788194][ T4385] lo speed is unknown, defaulting to 1000 [ 62.843196][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.853111][ T4398] EXT4-fs (loop4): 1 truncate cleaned up [ 62.860419][ T4403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 62.881303][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.889262][ T4403] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.903653][ T4403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 62.931002][ T4398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.041764][ T4429] loop3: detected capacity change from 0 to 512 [ 63.265891][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.541070][ T4445] loop2: detected capacity change from 0 to 1024 [ 63.564413][ T4445] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.609498][ T4445] netlink: 19 bytes leftover after parsing attributes in process `syz.2.247'. [ 63.783056][ T4451] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 63.793089][ T4451] batadv1: entered promiscuous mode [ 63.798450][ T4451] batadv1: entered allmulticast mode [ 63.852808][ T4455] loop0: detected capacity change from 0 to 512 [ 63.889111][ T4455] EXT4-fs: dax option not supported [ 63.903690][ T4452] 9pnet: Could not find request transport:  [ 63.936553][ T4458] loop2: detected capacity change from 0 to 512 [ 63.958518][ T4460] netlink: 'syz.1.245': attribute type 29 has an invalid length. [ 64.031777][ T4452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 64.054646][ T4458] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.108553][ T4458] EXT4-fs (loop2): 1 truncate cleaned up [ 64.121839][ T4454] lo speed is unknown, defaulting to 1000 [ 64.132569][ T4462] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.154700][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.170585][ T4470] batadv1: entered promiscuous mode [ 64.175878][ T4470] batadv1: entered allmulticast mode [ 64.223141][ T4462] loop0: detected capacity change from 0 to 512 [ 64.266082][ T4462] EXT4-fs: dax option not supported [ 64.319587][ T4480] loop1: detected capacity change from 0 to 512 [ 64.332298][ T4477] lo speed is unknown, defaulting to 1000 [ 64.349718][ T4480] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.415171][ T4480] EXT4-fs (loop1): 1 truncate cleaned up [ 64.415243][ T4479] loop3: detected capacity change from 0 to 8192 [ 64.440313][ T4480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.465194][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 64.489590][ T3537] loop3: p2 p3 p4 [ 64.500731][ T3537] loop3: p2 start 4293394690 is beyond EOD, truncated [ 64.507656][ T3537] loop3: p3 size 100663552 extends beyond EOD, truncated [ 64.532221][ T4483] loop0: detected capacity change from 0 to 1024 [ 64.557809][ T4483] EXT4-fs: Ignoring removed oldalloc option [ 64.563929][ T4483] EXT4-fs: Ignoring removed bh option [ 64.575806][ T3537] loop3: p4 size 50331648 extends beyond EOD, truncated [ 64.606332][ T4483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.620512][ T4479] loop3: p2 p3 p4 [ 64.624483][ T4479] loop3: p2 start 4293394690 is beyond EOD, truncated [ 64.631302][ T4479] loop3: p3 size 100663552 extends beyond EOD, truncated [ 64.644685][ T4479] loop3: p4 size 50331648 extends beyond EOD, truncated [ 64.742827][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.767965][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 64.768008][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 64.857190][ T3533] udevd[3533]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 64.859089][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 64.922530][ T4498] serio: Serial port ptm0 [ 64.937958][ T4502] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.970016][ T4502] batadv1: entered promiscuous mode [ 64.975340][ T4502] batadv1: entered allmulticast mode [ 65.032156][ T4503] loop4: detected capacity change from 0 to 512 [ 65.059402][ T4505] random: crng reseeded on system resumption [ 65.110348][ T4503] EXT4-fs: dax option not supported [ 65.139299][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.165442][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.519184][ T4518] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 65.585398][ T4518] batadv1: entered promiscuous mode [ 65.590798][ T4518] batadv1: entered allmulticast mode [ 65.676194][ T4521] loop1: detected capacity change from 0 to 512 [ 65.725416][ T4521] EXT4-fs: dax option not supported [ 65.991539][ T4524] 9pnet: Could not find request transport:  [ 66.025896][ T29] kauditd_printk_skb: 898 callbacks suppressed [ 66.025914][ T29] audit: type=1400 audit(1764882307.701:3124): avc: denied { create } for pid=4533 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.064413][ T4531] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.098671][ T4524] netlink: 'syz.0.268': attribute type 29 has an invalid length. [ 66.142865][ T4532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.268'. [ 66.193721][ T29] audit: type=1326 audit(1764882307.721:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 66.217146][ T29] audit: type=1326 audit(1764882307.731:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 66.240573][ T29] audit: type=1326 audit(1764882307.731:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 66.264541][ T29] audit: type=1326 audit(1764882307.731:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 66.288031][ T29] audit: type=1326 audit(1764882307.731:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 66.311389][ T29] audit: type=1326 audit(1764882307.731:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 66.334919][ T29] audit: type=1326 audit(1764882307.731:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 66.358359][ T29] audit: type=1326 audit(1764882307.731:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 66.381751][ T29] audit: type=1326 audit(1764882307.741:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 66.577319][ T4558] random: crng reseeded on system resumption [ 66.744241][ T4560] lo speed is unknown, defaulting to 1000 [ 66.825810][ T4560] loop3: detected capacity change from 0 to 512 [ 66.840630][ T4560] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.910959][ T4560] EXT4-fs (loop3): 1 truncate cleaned up [ 66.917688][ T4560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.369671][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.394955][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 67.404035][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 67.413553][ T4580] loop1: detected capacity change from 0 to 512 [ 67.459965][ T4580] ext4: Unknown parameter 'sit0' [ 67.502473][ T801] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.535085][ T4591] batadv1: entered promiscuous mode [ 67.540360][ T4591] batadv1: entered allmulticast mode [ 67.593277][ T801] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.607942][ T4598] EXT4-fs: dax option not supported [ 67.626733][ T4604] netlink: 'syz.4.297': attribute type 4 has an invalid length. [ 67.644450][ T801] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.664069][ T4601] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 67.693006][ T801] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.695158][ T4607] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 67.711685][ T4604] netlink: 'syz.4.297': attribute type 4 has an invalid length. [ 67.726430][ T4601] SELinux: failed to load policy [ 67.755958][ T4609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.798502][ T4609] EXT4-fs (loop1): 1 truncate cleaned up [ 67.907672][ T4609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.034875][ T4621] FAULT_INJECTION: forcing a failure. [ 68.034875][ T4621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.048084][ T4621] CPU: 0 UID: 0 PID: 4621 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.048234][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.048251][ T4621] Call Trace: [ 68.048259][ T4621] [ 68.048269][ T4621] __dump_stack+0x1d/0x30 [ 68.048300][ T4621] dump_stack_lvl+0xe8/0x140 [ 68.048329][ T4621] dump_stack+0x15/0x1b [ 68.048349][ T4621] should_fail_ex+0x265/0x280 [ 68.048413][ T4621] should_fail+0xb/0x20 [ 68.048510][ T4621] should_fail_usercopy+0x1a/0x20 [ 68.048592][ T4621] _copy_from_user+0x1c/0xb0 [ 68.048620][ T4621] ucma_resolve_ip+0x4a/0x1e0 [ 68.048658][ T4621] ucma_write+0x1b3/0x250 [ 68.048725][ T4621] vfs_writev+0x406/0x8b0 [ 68.048751][ T4621] ? __pfx_ucma_write+0x10/0x10 [ 68.048807][ T4621] do_writev+0xe7/0x210 [ 68.048842][ T4621] __x64_sys_writev+0x45/0x50 [ 68.048877][ T4621] x64_sys_call+0x1ba5/0x3000 [ 68.048909][ T4621] do_syscall_64+0xd8/0x2a0 [ 68.048986][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.049008][ T4621] RIP: 0033:0x7f6dfd92f749 [ 68.049024][ T4621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.049047][ T4621] RSP: 002b:00007f6dfc38f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 68.049069][ T4621] RAX: ffffffffffffffda RBX: 00007f6dfdb85fa0 RCX: 00007f6dfd92f749 [ 68.049081][ T4621] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 68.049093][ T4621] RBP: 00007f6dfc38f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.049108][ T4621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.049191][ T4621] R13: 00007f6dfdb86038 R14: 00007f6dfdb85fa0 R15: 00007ffd546fc888 [ 68.049210][ T4621] [ 68.312269][ T4606] lo speed is unknown, defaulting to 1000 [ 68.566819][ T4630] ------------[ cut here ]------------ [ 68.572406][ T4630] EA inode 11 i_nlink=2 [ 68.572437][ T4630] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#0: syz.0.302/4630 [ 68.584245][ T4630] Modules linked in: [ 68.588177][ T4630] CPU: 0 UID: 0 PID: 4630 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.597890][ T4630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.608169][ T4630] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 68.615028][ T4630] Code: 41 f4 9c ff 4c 8d 2d 2a dd 20 05 49 8d 7e 40 e8 d1 78 b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 73 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 4c 4f b7 03 66 66 66 2e 0f 1f 84 [ 68.634940][ T4630] RSP: 0018:ffffc90001a4f5a0 EFLAGS: 00010246 [ 68.641134][ T4630] RAX: ffff88810c61dd10 RBX: ffff88811a450610 RCX: ffffffff81bb0f4b [ 68.649166][ T4630] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dbec60 [ 68.657277][ T4630] RBP: 000000000000000b R08: 000188811a4505c3 R09: 0000000000000000 [ 68.665313][ T4630] R10: ffffc90001a4f4d0 R11: 0001c90001a4f4d0 R12: ffff88811a4505c0 [ 68.673324][ T4630] R13: ffffffff86dbec60 R14: ffff88811a450578 R15: 0000000000000001 [ 68.681370][ T4630] FS: 00007f6dfc38f6c0(0000) GS:ffff8882aeddf000(0000) knlGS:0000000000000000 [ 68.690352][ T4630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.691109][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 68.697078][ T4630] CR2: 00007f3ee34d7dac CR3: 000000011c602000 CR4: 00000000003506f0 [ 68.697102][ T4630] Call Trace: [ 68.717413][ T4630] [ 68.720383][ T4630] ext4_xattr_set_entry+0x77f/0x1020 [ 68.725828][ T4630] ext4_xattr_ibody_set+0x184/0x3c0 [ 68.731110][ T4630] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 68.737086][ T4630] __ext4_expand_extra_isize+0x246/0x280 [ 68.742766][ T4630] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 68.748355][ T4630] ext4_evict_inode+0x7c4/0xd40 [ 68.753247][ T4630] ? __pfx_ext4_evict_inode+0x10/0x10 [ 68.758748][ T4630] evict+0x2af/0x510 [ 68.762689][ T4630] ? __dquot_initialize+0x146/0x7c0 [ 68.767975][ T4630] iput+0x4bd/0x650 [ 68.771814][ T4630] ext4_process_orphan+0x1a9/0x1c0 [ 68.777070][ T4630] ext4_orphan_cleanup+0x6a8/0xa00 [ 68.782262][ T4630] ext4_fill_super+0x3411/0x37a0 [ 68.787322][ T4630] ? set_blocksize+0x1a8/0x310 [ 68.792127][ T4630] ? sb_set_blocksize+0xfc/0x170 [ 68.797148][ T4630] ? setup_bdev_super+0x30e/0x370 [ 68.802251][ T4630] ? __pfx_ext4_fill_super+0x10/0x10 [ 68.807788][ T4630] get_tree_bdev_flags+0x291/0x300 [ 68.812957][ T4630] ? __pfx_ext4_fill_super+0x10/0x10 [ 68.818329][ T4630] get_tree_bdev+0x1f/0x30 [ 68.822829][ T4630] ext4_get_tree+0x1c/0x30 [ 68.827750][ T4630] vfs_get_tree+0x57/0x1d0 [ 68.832580][ T4630] do_new_mount+0x24d/0x6a0 [ 68.837191][ T4630] path_mount+0x4ab/0xb80 [ 68.841588][ T4630] ? user_path_at+0xbf/0x130 [ 68.846290][ T4630] __se_sys_mount+0x28c/0x2e0 [ 68.851127][ T4630] __x64_sys_mount+0x67/0x80 [ 68.855837][ T4630] x64_sys_call+0x2cca/0x3000 [ 68.860616][ T4630] do_syscall_64+0xd8/0x2a0 [ 68.865193][ T4630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.871363][ T4630] RIP: 0033:0x7f6dfd930eea [ 68.875969][ T4630] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.895833][ T4630] RSP: 002b:00007f6dfc38ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.904367][ T4630] RAX: ffffffffffffffda RBX: 00007f6dfc38eef0 RCX: 00007f6dfd930eea [ 68.912373][ T4630] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6dfc38eeb0 [ 68.920422][ T4630] RBP: 0000200000000180 R08: 00007f6dfc38eef0 R09: 0000000000800700 [ 68.928473][ T4630] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 68.936585][ T4630] R13: 00007f6dfc38eeb0 R14: 000000000000046f R15: 000000000000002c [ 68.944602][ T4630] [ 68.947718][ T4630] ---[ end trace 0000000000000000 ]--- [ 68.954871][ T4630] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.302: iget: bad extra_isize 90 (inode size 256) [ 68.970576][ T4630] EXT4-fs (loop0): Remounting filesystem read-only [ 68.994222][ T4630] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 69.007732][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.019127][ T4630] EXT4-fs (loop0): 1 orphan inode deleted [ 69.037757][ T4630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.089310][ T4630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.111860][ T4660] FAULT_INJECTION: forcing a failure. [ 69.111860][ T4660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.125082][ T4660] CPU: 1 UID: 0 PID: 4660 Comm: syz.1.306 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.125131][ T4660] Tainted: [W]=WARN [ 69.125140][ T4660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.125225][ T4660] Call Trace: [ 69.125234][ T4660] [ 69.125244][ T4660] __dump_stack+0x1d/0x30 [ 69.125293][ T4660] dump_stack_lvl+0xe8/0x140 [ 69.125317][ T4660] dump_stack+0x15/0x1b [ 69.125341][ T4660] should_fail_ex+0x265/0x280 [ 69.125399][ T4660] should_fail+0xb/0x20 [ 69.125433][ T4660] should_fail_usercopy+0x1a/0x20 [ 69.125452][ T4660] _copy_from_user+0x1c/0xb0 [ 69.125516][ T4660] __copy_msghdr+0x244/0x300 [ 69.125563][ T4660] ___sys_sendmsg+0x109/0x1d0 [ 69.125601][ T4660] __sys_sendmmsg+0x178/0x300 [ 69.125639][ T4660] __x64_sys_sendmmsg+0x57/0x70 [ 69.125664][ T4660] x64_sys_call+0x1e28/0x3000 [ 69.125720][ T4660] do_syscall_64+0xd8/0x2a0 [ 69.125756][ T4660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.125842][ T4660] RIP: 0033:0x7efcd101f749 [ 69.125858][ T4660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.125876][ T4660] RSP: 002b:00007efccfa7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.125901][ T4660] RAX: ffffffffffffffda RBX: 00007efcd1275fa0 RCX: 00007efcd101f749 [ 69.125988][ T4660] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000a [ 69.126004][ T4660] RBP: 00007efccfa7f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.126021][ T4660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.126036][ T4660] R13: 00007efcd1276038 R14: 00007efcd1275fa0 R15: 00007ffe92094b98 [ 69.126059][ T4660] [ 69.319139][ T4665] set_capacity_and_notify: 3 callbacks suppressed [ 69.319156][ T4665] loop3: detected capacity change from 0 to 128 [ 69.427071][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 69.457030][ T4680] syz.3.314: attempt to access beyond end of device [ 69.457030][ T4680] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 69.487755][ T4682] loop1: detected capacity change from 0 to 512 [ 69.525343][ T4680] syz.3.314: attempt to access beyond end of device [ 69.525343][ T4680] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 69.588715][ T4690] loop4: detected capacity change from 0 to 512 [ 69.591793][ T4682] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.614185][ T4680] syz.3.314: attempt to access beyond end of device [ 69.614185][ T4680] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 69.635128][ T4690] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.658738][ T4680] syz.3.314: attempt to access beyond end of device [ 69.658738][ T4680] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 69.678308][ T4693] netlink: 'syz.0.324': attribute type 4 has an invalid length. [ 69.681838][ T4674] lo speed is unknown, defaulting to 1000 [ 69.693143][ T4682] EXT4-fs (loop1): 1 truncate cleaned up [ 69.715572][ T4693] netlink: 'syz.0.324': attribute type 4 has an invalid length. [ 69.723416][ T4680] syz.3.314: attempt to access beyond end of device [ 69.723416][ T4680] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 69.737140][ T4680] syz.3.314: attempt to access beyond end of device [ 69.737140][ T4680] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 69.747225][ T4696] siw: device registration error -23 [ 69.751406][ T4680] syz.3.314: attempt to access beyond end of device [ 69.751406][ T4680] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 69.756903][ T4682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.771025][ T4680] syz.3.314: attempt to access beyond end of device [ 69.771025][ T4680] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 69.795237][ T4680] syz.3.314: attempt to access beyond end of device [ 69.795237][ T4680] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 69.809527][ T4680] syz.3.314: attempt to access beyond end of device [ 69.809527][ T4680] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 70.119068][ T4706] loop2: detected capacity change from 0 to 256 [ 70.133259][ T4708] loop3: detected capacity change from 0 to 256 [ 70.470685][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.494656][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 70.605172][ T4719] lo speed is unknown, defaulting to 1000 [ 71.027100][ T4737] siw: device registration error -23 [ 71.054218][ T4742] serio: Serial port ptm0 [ 71.118895][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 71.118956][ T29] audit: type=1326 audit(1764882312.791:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.234568][ T29] audit: type=1326 audit(1764882312.821:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.258072][ T29] audit: type=1326 audit(1764882312.821:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.281556][ T29] audit: type=1326 audit(1764882312.821:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.305032][ T29] audit: type=1326 audit(1764882312.821:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.328923][ T29] audit: type=1326 audit(1764882312.821:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.352815][ T29] audit: type=1326 audit(1764882312.821:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.376467][ T29] audit: type=1326 audit(1764882312.821:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.400357][ T29] audit: type=1326 audit(1764882312.831:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.423824][ T29] audit: type=1326 audit(1764882312.841:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee327f749 code=0x7ffc0000 [ 71.483763][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 71.521027][ T4770] batadv1: entered promiscuous mode [ 71.526470][ T4770] batadv1: entered allmulticast mode [ 71.625308][ T4777] loop4: detected capacity change from 0 to 512 [ 71.646358][ T4777] EXT4-fs: dax option not supported [ 71.657985][ T4780] netlink: 'syz.3.348': attribute type 4 has an invalid length. [ 71.687196][ T4776] loop0: detected capacity change from 0 to 512 [ 71.698164][ T4774] batadv1: entered promiscuous mode [ 71.703428][ T4774] batadv1: entered allmulticast mode [ 71.703930][ T4776] EXT4-fs: dax option not supported [ 71.723919][ T4784] netlink: 'syz.3.348': attribute type 4 has an invalid length. [ 72.024256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.328789][ T12] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 72.835728][ T4812] loop2: detected capacity change from 0 to 512 [ 72.853120][ T4812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.952417][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 73.042149][ T4812] EXT4-fs (loop2): 1 truncate cleaned up [ 73.135761][ T4812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.213187][ T4807] lo speed is unknown, defaulting to 1000 [ 73.312427][ T4832] serio: Serial port ptm0 [ 73.648589][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.182181][ T4846] lo speed is unknown, defaulting to 1000 [ 74.405073][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 74.700772][ T4864] loop2: detected capacity change from 0 to 512 [ 74.725644][ T4864] EXT4-fs: dax option not supported [ 74.747143][ T4859] batadv1: entered promiscuous mode [ 74.752436][ T4859] batadv1: entered allmulticast mode [ 74.898171][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 75.128460][ T4897] loop1: detected capacity change from 0 to 512 [ 75.180932][ T4899] batadv1: entered promiscuous mode [ 75.186327][ T4899] batadv1: entered allmulticast mode [ 75.232083][ T4909] loop0: detected capacity change from 0 to 512 [ 75.284623][ T4897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.309463][ T4909] EXT4-fs: dax option not supported [ 75.401609][ T4897] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.472303][ T4897] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.374: corrupted inode contents [ 75.558401][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 75.684171][ T4897] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.374: mark_inode_dirty error [ 75.737431][ T4897] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.374: corrupted inode contents [ 75.886181][ T4939] lo speed is unknown, defaulting to 1000 [ 75.974014][ T4897] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.374: mark_inode_dirty error [ 76.133923][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 76.133943][ T29] audit: type=1400 audit(1764882317.801:3786): avc: denied { create } for pid=4961 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.264164][ T29] audit: type=1400 audit(1764882317.841:3787): avc: denied { connect } for pid=4961 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.353266][ T4966] FAULT_INJECTION: forcing a failure. [ 76.353266][ T4966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.366507][ T4966] CPU: 0 UID: 0 PID: 4966 Comm: syz.3.395 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.366547][ T4966] Tainted: [W]=WARN [ 76.366556][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.366571][ T4966] Call Trace: [ 76.366580][ T4966] [ 76.366590][ T4966] __dump_stack+0x1d/0x30 [ 76.366681][ T4966] dump_stack_lvl+0xe8/0x140 [ 76.366710][ T4966] dump_stack+0x15/0x1b [ 76.366762][ T4966] should_fail_ex+0x265/0x280 [ 76.366813][ T4966] should_fail+0xb/0x20 [ 76.366854][ T4966] should_fail_usercopy+0x1a/0x20 [ 76.366876][ T4966] _copy_from_user+0x1c/0xb0 [ 76.366970][ T4966] __sys_connect+0xd0/0x2b0 [ 76.367002][ T4966] __x64_sys_connect+0x3f/0x50 [ 76.367022][ T4966] x64_sys_call+0x2e09/0x3000 [ 76.367089][ T4966] do_syscall_64+0xd8/0x2a0 [ 76.367131][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.367160][ T4966] RIP: 0033:0x7f227b01f749 [ 76.367180][ T4966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.367220][ T4966] RSP: 002b:00007f2279a7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 76.367240][ T4966] RAX: ffffffffffffffda RBX: 00007f227b275fa0 RCX: 00007f227b01f749 [ 76.367255][ T4966] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000006 [ 76.367271][ T4966] RBP: 00007f2279a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.367287][ T4966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.367303][ T4966] R13: 00007f227b276038 R14: 00007f227b275fa0 R15: 00007ffc527add38 [ 76.367362][ T4966] [ 76.599447][ T29] audit: type=1400 audit(1764882318.271:3788): avc: denied { ioctl } for pid=4889 comm="syz.1.374" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.599871][ T4948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.673195][ T29] audit: type=1400 audit(1764882318.341:3789): avc: denied { bind } for pid=4977 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.678777][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 76.703357][ T29] audit: type=1400 audit(1764882318.351:3790): avc: denied { write } for pid=4977 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.798043][ T4985] batadv1: entered promiscuous mode [ 76.798063][ T4985] batadv1: entered allmulticast mode [ 76.815631][ T4982] serio: Serial port ptm0 [ 76.824271][ T4948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.839254][ T4979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.397'. [ 76.848317][ T4986] loop0: detected capacity change from 0 to 512 [ 76.850721][ T4986] EXT4-fs: dax option not supported [ 76.945238][ T29] audit: type=1326 audit(1764882318.621:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 77.062479][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 77.127783][ T29] audit: type=1326 audit(1764882318.641:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 77.151261][ T29] audit: type=1400 audit(1764882318.651:3793): avc: denied { append } for pid=4889 comm="syz.1.374" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.174760][ T29] audit: type=1400 audit(1764882318.721:3794): avc: denied { create } for pid=4889 comm="syz.1.374" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.256183][ T5005] siw: device registration error -23 [ 77.381106][ T29] audit: type=1326 audit(1764882318.991:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5007 comm="syz.4.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33253f749 code=0x7ffc0000 [ 77.456088][ T5022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.496199][ T5022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.686520][ T5029] loop0: detected capacity change from 0 to 512 [ 77.696676][ T5029] EXT4-fs: dax option not supported [ 78.098388][ T5035] lo speed is unknown, defaulting to 1000 [ 78.285910][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.296157][ T5037] 9pnet: Could not find request transport:  [ 78.377273][ T5038] 9pnet: Could not find request transport:  [ 78.393955][ T5037] netlink: 'syz.4.411': attribute type 29 has an invalid length. [ 78.451020][ T5037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.411'. [ 78.502034][ T5054] 9pnet_fd: Insufficient options for proto=fd [ 78.546765][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 78.567228][ T5038] netlink: 'syz.3.412': attribute type 29 has an invalid length. [ 78.597453][ T5068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.412'. [ 78.731672][ T5088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.752654][ T5093] loop4: detected capacity change from 0 to 512 [ 78.817626][ T5081] lo speed is unknown, defaulting to 1000 [ 78.857683][ T5088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.888153][ T5093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.056094][ T5103] lo speed is unknown, defaulting to 1000 [ 79.131532][ T5107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.186655][ T5093] EXT4-fs (loop4): 1 truncate cleaned up [ 79.202581][ T5107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.263724][ T5093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.278812][ T5114] siw: device registration error -23 [ 79.429852][ T5123] batadv1: entered promiscuous mode [ 79.435262][ T5123] batadv1: entered allmulticast mode [ 79.477168][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.495246][ T5128] loop3: detected capacity change from 0 to 512 [ 79.519901][ T5128] EXT4-fs: dax option not supported [ 79.648583][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 79.704110][ T5154] 9pnet_fd: Insufficient options for proto=fd [ 79.781795][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 79.807663][ T5166] team1: entered promiscuous mode [ 79.812762][ T5166] team1: entered allmulticast mode [ 79.830333][ T5166] 8021q: adding VLAN 0 to HW filter on device team1 [ 79.919499][ T5175] loop2: detected capacity change from 0 to 1024 [ 79.934460][ T5175] EXT4-fs: Ignoring removed orlov option [ 79.962378][ T5175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.226819][ T5189] random: crng reseeded on system resumption [ 80.246712][ T5191] loop3: detected capacity change from 0 to 512 [ 80.276632][ T5191] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.347120][ T5187] lo speed is unknown, defaulting to 1000 [ 80.369821][ T5191] EXT4-fs (loop3): 1 truncate cleaned up [ 80.465222][ T5190] 9pnet: Could not find request transport:  [ 80.521007][ T5191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.604228][ T5190] netlink: 'syz.0.433': attribute type 29 has an invalid length. [ 80.650469][ T5190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 80.680642][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.708317][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.817214][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 80.913338][ T5205] 9pnet_fd: Insufficient options for proto=fd [ 81.048246][ T5209] batadv1: entered promiscuous mode [ 81.053500][ T5209] batadv1: entered allmulticast mode [ 81.063791][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.089141][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.107022][ T5217] loop4: detected capacity change from 0 to 512 [ 81.114017][ T5217] journal_path: Non-blockdev passed as './bus' [ 81.120217][ T5217] EXT4-fs: error: could not find journal device path [ 81.120740][ T5219] loop1: detected capacity change from 0 to 512 [ 81.136704][ T29] kauditd_printk_skb: 898 callbacks suppressed [ 81.136722][ T29] audit: type=1400 audit(1764882322.811:4694): avc: denied { mounton } for pid=5208 comm="syz.0.449" path="/90/bus" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.168197][ T5220] loop0: detected capacity change from 0 to 512 [ 81.198530][ T5220] EXT4-fs: dax option not supported [ 81.206124][ T5219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.214195][ T29] audit: type=1400 audit(1764882322.871:4695): avc: denied { mounton } for pid=5208 comm="syz.0.449" path="/90/bus" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.264700][ T5219] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.289698][ T29] audit: type=1400 audit(1764882322.961:4696): avc: denied { write } for pid=5206 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.315107][ T5219] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.454: corrupted inode contents [ 81.329943][ T29] audit: type=1326 audit(1764882322.961:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 81.353456][ T29] audit: type=1326 audit(1764882322.961:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 81.376831][ T29] audit: type=1400 audit(1764882322.991:4699): avc: denied { add_name } for pid=5218 comm="syz.1.454" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.397606][ T29] audit: type=1400 audit(1764882322.991:4700): avc: denied { create } for pid=5218 comm="syz.1.454" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.421003][ T5219] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.454: mark_inode_dirty error [ 81.434249][ T29] audit: type=1400 audit(1764882323.091:4701): avc: denied { create } for pid=5213 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.456225][ T5219] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.454: corrupted inode contents [ 81.468461][ T5230] netlink: 'syz.4.456': attribute type 4 has an invalid length. [ 81.476998][ T29] audit: type=1400 audit(1764882323.131:4702): avc: denied { create } for pid=5213 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.496500][ T29] audit: type=1400 audit(1764882323.131:4703): avc: denied { bind } for pid=5213 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.515801][ T5219] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.454: mark_inode_dirty error [ 81.528538][ T5230] netlink: 'syz.4.456': attribute type 4 has an invalid length. [ 81.542051][ T5219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 81.587357][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.653910][ T5238] 9pnet_fd: Insufficient options for proto=fd [ 82.515192][ T5267] capability: warning: `syz.2.468' uses 32-bit capabilities (legacy support in use) [ 82.623213][ T5275] program syz.0.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.934518][ T5285] loop3: detected capacity change from 0 to 512 [ 82.941041][ T5285] journal_path: Non-blockdev passed as './bus' [ 82.947318][ T5285] EXT4-fs: error: could not find journal device path [ 82.973221][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 83.144612][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 83.153434][ T5295] netlink: 312 bytes leftover after parsing attributes in process `syz.1.478'. [ 83.162487][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 83.184862][ T5294] random: crng reseeded on system resumption [ 83.195684][ T5267] sch_fq: defrate 4294967295 ignored. [ 83.360195][ T5308] random: crng reseeded on system resumption [ 83.425029][ T5313] serio: Serial port ptm0 [ 83.439173][ T5314] loop4: detected capacity change from 0 to 512 [ 83.445809][ T5314] journal_path: Non-blockdev passed as './bus' [ 83.452306][ T5314] EXT4-fs: error: could not find journal device path [ 83.521326][ T5320] siw: device registration error -23 [ 83.543242][ T5322] siw: device registration error -23 [ 83.772362][ T5346] loop1: detected capacity change from 0 to 512 [ 83.793716][ T5346] journal_path: Non-blockdev passed as './bus' [ 83.799992][ T5346] EXT4-fs: error: could not find journal device path [ 83.839549][ T5348] siw: device registration error -23 [ 83.897186][ T5352] serio: Serial port ptm0 [ 83.973511][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 84.260574][ T5376] siw: device registration error -23 [ 84.261718][ T5369] infiniband !yz!: set active [ 84.270771][ T5369] infiniband !yz!: added team_slave_0 [ 84.283727][ T5369] RDS/IB: !yz!: added [ 84.287901][ T5369] smc: adding ib device !yz! with port count 1 [ 84.294234][ T5369] smc: ib device !yz! port 1 has no pnetid [ 84.382253][ T5380] loop4: detected capacity change from 0 to 512 [ 84.405905][ T5380] journal_path: Non-blockdev passed as './bus' [ 84.412213][ T5380] EXT4-fs: error: could not find journal device path [ 84.559753][ T5387] serio: Serial port ptm0 [ 84.682814][ T5400] random: crng reseeded on system resumption [ 84.872906][ T5416] loop4: detected capacity change from 0 to 512 [ 84.886434][ T5416] journal_path: Non-blockdev passed as './bus' [ 84.892753][ T5416] EXT4-fs: error: could not find journal device path [ 85.320680][ T5428] lo speed is unknown, defaulting to 1000 [ 85.692442][ T5435] serio: Serial port ptm0 [ 85.718523][ T5440] siw: device registration error -23 [ 85.780906][ T5444] loop4: detected capacity change from 0 to 512 [ 85.791235][ T5444] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 85.824481][ T5445] loop0: detected capacity change from 0 to 2048 [ 85.872613][ T5445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.949307][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.965779][ T5459] loop1: detected capacity change from 0 to 512 [ 86.020760][ T5453] lo speed is unknown, defaulting to 1000 [ 86.030684][ T5456] syzkaller1: entered promiscuous mode [ 86.036399][ T5456] syzkaller1: entered allmulticast mode [ 86.087267][ T5459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.118198][ T5459] EXT4-fs (loop1): 1 truncate cleaned up [ 86.147653][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 86.147671][ T29] audit: type=1400 audit(1764882327.821:5168): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 86.147710][ T801] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 86.156286][ T5459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.199213][ T29] audit: type=1400 audit(1764882327.871:5169): avc: denied { read write } for pid=5467 comm="syz.3.546" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.222871][ T29] audit: type=1400 audit(1764882327.871:5170): avc: denied { open } for pid=5467 comm="syz.3.546" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.247207][ T5468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.251026][ T5472] random: crng reseeded on system resumption [ 86.273304][ T5468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.340280][ T5470] loop0: detected capacity change from 0 to 512 [ 86.344098][ T29] audit: type=1400 audit(1764882327.921:5171): avc: denied { ioctl } for pid=5467 comm="syz.3.546" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.358287][ T5470] EXT4-fs: dax option not supported [ 86.371383][ T29] audit: type=1400 audit(1764882327.921:5172): avc: denied { create } for pid=5471 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.396848][ T29] audit: type=1400 audit(1764882327.921:5173): avc: denied { write } for pid=5471 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.417242][ T29] audit: type=1400 audit(1764882327.921:5174): avc: denied { nlmsg_write } for pid=5471 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.437876][ T29] audit: type=1400 audit(1764882327.921:5175): avc: denied { write } for pid=5471 comm="syz.2.547" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.460898][ T29] audit: type=1400 audit(1764882327.921:5176): avc: denied { open } for pid=5471 comm="syz.2.547" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.484709][ T29] audit: type=1326 audit(1764882327.961:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33253f749 code=0x7ffc0000 [ 86.512509][ T5478] siw: device registration error -23 [ 86.622925][ T5488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 86.706293][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.723548][ T5492] lo speed is unknown, defaulting to 1000 [ 87.095653][ T5514] siw: device registration error -23 [ 87.279462][ T5522] loop2: detected capacity change from 0 to 512 [ 87.286268][ T5522] journal_path: Non-blockdev passed as './bus' [ 87.292568][ T5522] EXT4-fs: error: could not find journal device path [ 87.294694][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 87.373530][ T5531] netlink: 'syz.3.569': attribute type 4 has an invalid length. [ 87.435790][ T5531] netlink: 'syz.3.569': attribute type 4 has an invalid length. [ 87.594095][ T5540] 9pnet: Could not find request transport:  [ 87.811995][ T5527] netlink: 'syz.1.558': attribute type 29 has an invalid length. [ 88.085808][ T5554] loop0: detected capacity change from 0 to 512 [ 88.268240][ T5554] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.294498][ T5554] EXT4-fs (loop0): 1 truncate cleaned up [ 88.307162][ T5554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.323180][ T5552] lo speed is unknown, defaulting to 1000 [ 88.361936][ T5558] random: crng reseeded on system resumption [ 88.640309][ T5580] loop2: detected capacity change from 0 to 512 [ 88.655182][ T5580] journal_path: Non-blockdev passed as './bus' [ 88.661609][ T5580] EXT4-fs: error: could not find journal device path [ 88.669781][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 88.751648][ T5588] netlink: 'syz.2.583': attribute type 4 has an invalid length. [ 88.777500][ T5588] netlink: 'syz.2.583': attribute type 4 has an invalid length. [ 88.851869][ T5586] lo speed is unknown, defaulting to 1000 [ 88.938238][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.733456][ T5598] 9pnet: Could not find request transport:  [ 89.795893][ T5598] netlink: 'syz.1.584': attribute type 29 has an invalid length. [ 89.985394][ T5614] FAULT_INJECTION: forcing a failure. [ 89.985394][ T5614] name failslab, interval 1, probability 0, space 0, times 0 [ 89.998331][ T5614] CPU: 1 UID: 0 PID: 5614 Comm: syz.4.591 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.998393][ T5614] Tainted: [W]=WARN [ 89.998409][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.998425][ T5614] Call Trace: [ 89.998431][ T5614] [ 89.998439][ T5614] __dump_stack+0x1d/0x30 [ 89.998463][ T5614] dump_stack_lvl+0xe8/0x140 [ 89.998536][ T5614] dump_stack+0x15/0x1b [ 89.998556][ T5614] should_fail_ex+0x265/0x280 [ 89.998661][ T5614] should_failslab+0x8c/0xb0 [ 89.998702][ T5614] kmem_cache_alloc_node_noprof+0x57/0x4c0 [ 89.998749][ T5614] ? __alloc_skb+0x324/0x4d0 [ 89.998774][ T5614] __alloc_skb+0x324/0x4d0 [ 89.998810][ T5614] ? __alloc_skb+0x24d/0x4d0 [ 89.998830][ T5614] netlink_alloc_large_skb+0xbf/0xf0 [ 89.998863][ T5614] netlink_sendmsg+0x3cf/0x6b0 [ 89.998952][ T5614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.998996][ T5614] __sock_sendmsg+0x145/0x180 [ 89.999148][ T5614] ____sys_sendmsg+0x31e/0x4a0 [ 89.999179][ T5614] ___sys_sendmsg+0x17b/0x1d0 [ 89.999221][ T5614] __x64_sys_sendmsg+0xd4/0x160 [ 89.999250][ T5614] x64_sys_call+0x17ba/0x3000 [ 89.999300][ T5614] do_syscall_64+0xd8/0x2a0 [ 89.999341][ T5614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.999370][ T5614] RIP: 0033:0x7fb33253f749 [ 89.999389][ T5614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.999424][ T5614] RSP: 002b:00007fb330fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.999450][ T5614] RAX: ffffffffffffffda RBX: 00007fb332795fa0 RCX: 00007fb33253f749 [ 89.999519][ T5614] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 89.999531][ T5614] RBP: 00007fb330fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.999545][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.999617][ T5614] R13: 00007fb332796038 R14: 00007fb332795fa0 R15: 00007fff21a0f418 [ 89.999637][ T5614] [ 90.334706][ T5616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 90.456573][ T5629] netlink: 'syz.2.588': attribute type 29 has an invalid length. [ 90.462083][ T5619] 9pnet: Could not find request transport:  [ 90.485461][ T5629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'. [ 90.888128][ T5635] random: crng reseeded on system resumption [ 91.107381][ T5637] serio: Serial port ptm0 [ 91.154919][ T29] kauditd_printk_skb: 798 callbacks suppressed [ 91.154936][ T29] audit: type=1400 audit(1764882332.811:5976): avc: denied { prog_run } for pid=5646 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.180141][ T29] audit: type=1400 audit(1764882332.811:5977): avc: denied { create } for pid=5646 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.200899][ T29] audit: type=1400 audit(1764882332.811:5978): avc: denied { write } for pid=5646 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.272385][ T5652] serio: Serial port ptm1 [ 91.323992][ T29] audit: type=1400 audit(1764882332.901:5979): avc: denied { name_bind } for pid=5648 comm="syz.3.603" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 91.345856][ T29] audit: type=1400 audit(1764882332.901:5980): avc: denied { node_bind } for pid=5648 comm="syz.3.603" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 91.464351][ T5649] lo speed is unknown, defaulting to 1000 [ 91.490455][ T29] audit: type=1400 audit(1764882333.091:5981): avc: denied { create } for pid=5656 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.509913][ T29] audit: type=1400 audit(1764882333.091:5982): avc: denied { write } for pid=5656 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.514154][ T5661] loop1: detected capacity change from 0 to 512 [ 91.529218][ T29] audit: type=1400 audit(1764882333.111:5983): avc: denied { allowed } for pid=5656 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.554745][ T29] audit: type=1400 audit(1764882333.111:5984): avc: denied { create } for pid=5656 comm="syz.4.606" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.576036][ T29] audit: type=1400 audit(1764882333.111:5985): avc: denied { map } for pid=5656 comm="syz.4.606" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.852395][ T5670] siw: device registration error -23 [ 91.964417][ T5674] serio: Serial port ptm0 [ 92.218215][ T5694] random: crng reseeded on system resumption [ 92.319733][ T5705] loop3: detected capacity change from 0 to 512 [ 92.372140][ T5705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.442982][ T5705] EXT4-fs (loop3): 1 truncate cleaned up [ 92.546608][ T5705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.623796][ T5697] lo speed is unknown, defaulting to 1000 [ 92.655415][ T5723] loop4: detected capacity change from 0 to 512 [ 92.671649][ T5723] journal_path: Non-blockdev passed as './bus' [ 92.677929][ T5723] EXT4-fs: error: could not find journal device path [ 92.884244][ T5726] lo speed is unknown, defaulting to 1000 [ 93.134163][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.176663][ T5736] serio: Serial port ptm0 [ 93.319337][ T5746] FAULT_INJECTION: forcing a failure. [ 93.319337][ T5746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.332552][ T5746] CPU: 0 UID: 0 PID: 5746 Comm: syz.3.634 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.332591][ T5746] Tainted: [W]=WARN [ 93.332598][ T5746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.332666][ T5746] Call Trace: [ 93.332673][ T5746] [ 93.332681][ T5746] __dump_stack+0x1d/0x30 [ 93.332709][ T5746] dump_stack_lvl+0xe8/0x140 [ 93.332779][ T5746] dump_stack+0x15/0x1b [ 93.332868][ T5746] should_fail_ex+0x265/0x280 [ 93.332912][ T5746] should_fail+0xb/0x20 [ 93.332951][ T5746] should_fail_usercopy+0x1a/0x20 [ 93.333033][ T5746] _copy_from_user+0x1c/0xb0 [ 93.333058][ T5746] __sys_bpf+0x183/0x7c0 [ 93.333092][ T5746] __x64_sys_bpf+0x41/0x50 [ 93.333132][ T5746] x64_sys_call+0x28e1/0x3000 [ 93.333163][ T5746] do_syscall_64+0xd8/0x2a0 [ 93.333244][ T5746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.333265][ T5746] RIP: 0033:0x7f227b01f749 [ 93.333288][ T5746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.333306][ T5746] RSP: 002b:00007f2279a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.333352][ T5746] RAX: ffffffffffffffda RBX: 00007f227b275fa0 RCX: 00007f227b01f749 [ 93.333365][ T5746] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000001 [ 93.333377][ T5746] RBP: 00007f2279a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.333449][ T5746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.333461][ T5746] R13: 00007f227b276038 R14: 00007f227b275fa0 R15: 00007ffc527add38 [ 93.333503][ T5746] [ 93.766245][ T5748] lo speed is unknown, defaulting to 1000 [ 94.394029][ T5755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.424427][ T5755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.502896][ T5765] random: crng reseeded on system resumption [ 94.579537][ T5774] loop0: detected capacity change from 0 to 512 [ 94.586286][ T5774] journal_path: Non-blockdev passed as './bus' [ 94.592482][ T5774] EXT4-fs: error: could not find journal device path [ 94.983149][ T5781] lo speed is unknown, defaulting to 1000 [ 95.681161][ T5797] 9pnet: Could not find request transport:  [ 95.783655][ T5787] netlink: 'syz.4.646': attribute type 29 has an invalid length. [ 95.817979][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 96.264110][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 96.264125][ T29] audit: type=1400 audit(1764882337.931:6458): avc: denied { create } for pid=5833 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.290037][ T29] audit: type=1400 audit(1764882337.931:6459): avc: denied { mount } for pid=5835 comm="syz.3.660" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.312057][ T29] audit: type=1400 audit(1764882337.931:6460): avc: denied { setopt } for pid=5833 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.331736][ T29] audit: type=1400 audit(1764882337.931:6461): avc: denied { unmount } for pid=5835 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.354510][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 96.569231][ T29] audit: type=1400 audit(1764882338.021:6462): avc: denied { ioctl } for pid=5833 comm="syz.4.658" path="socket:[12339]" dev="sockfs" ino=12339 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.595224][ T29] audit: type=1400 audit(1764882338.081:6463): avc: denied { sys_module } for pid=5833 comm="syz.4.658" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 96.616393][ T29] audit: type=1400 audit(1764882338.201:6464): avc: denied { ioctl } for pid=5848 comm="syz.1.663" path="socket:[12258]" dev="sockfs" ino=12258 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.635514][ T5855] netlink: 'syz.4.665': attribute type 4 has an invalid length. [ 96.666815][ T5854] loop3: detected capacity change from 0 to 512 [ 96.704955][ T29] audit: type=1400 audit(1764882338.371:6465): avc: denied { mount } for pid=5845 comm="syz.3.662" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 97.349148][ T29] audit: type=1326 audit(1764882339.021:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd101f749 code=0x7ffc0000 [ 97.523112][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 97.542915][ T29] audit: type=1326 audit(1764882339.041:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd101f749 code=0x7ffc0000 [ 97.692130][ T5872] loop2: detected capacity change from 0 to 512 [ 97.714158][ T5872] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.756351][ T5872] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.672: corrupted xattr entries [ 97.821930][ T5872] EXT4-fs (loop2): Remounting filesystem read-only [ 97.866321][ T5872] EXT4-fs (loop2): 1 truncate cleaned up [ 97.900970][ T5872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.940691][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 98.000469][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.098345][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.155596][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.170090][ T5901] loop4: detected capacity change from 0 to 512 [ 98.184683][ T5901] journal_path: Non-blockdev passed as './bus' [ 98.190932][ T5901] EXT4-fs: error: could not find journal device path [ 98.220090][ T5905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5905 comm=syz.2.684 [ 98.374005][ T5913] netlink: 'syz.4.686': attribute type 16 has an invalid length. [ 98.381818][ T5913] netlink: 156 bytes leftover after parsing attributes in process `syz.4.686'. [ 98.413575][ T5917] serio: Serial port ptm0 [ 98.454382][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 98.544139][ T5928] netlink: 96 bytes leftover after parsing attributes in process `syz.1.692'. [ 98.623355][ T5935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5935 comm=syz.2.696 [ 98.676054][ T5937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.684790][ T5937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.782690][ T5938] lo speed is unknown, defaulting to 1000 [ 99.150502][ T5958] siw: device registration error -23 [ 99.267152][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 99.292779][ T5972] netlink: 96 bytes leftover after parsing attributes in process `syz.3.704'. [ 99.408691][ T5982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5982 comm=syz.0.707 [ 99.468749][ T5991] serio: Serial port ptm0 [ 99.508923][ T5997] loop1: detected capacity change from 0 to 512 [ 99.524173][ T5997] journal_path: Non-blockdev passed as './bus' [ 99.530395][ T5997] EXT4-fs: error: could not find journal device path [ 99.688988][ T6017] netlink: 96 bytes leftover after parsing attributes in process `syz.2.717'. [ 99.863493][ T6021] lo speed is unknown, defaulting to 1000 [ 100.190352][ T6040] netlink: 'syz.3.723': attribute type 4 has an invalid length. [ 100.202956][ T6032] 9pnet: Could not find request transport:  [ 100.250508][ T6040] netlink: 'syz.3.723': attribute type 4 has an invalid length. [ 100.403134][ T6032] netlink: 'syz.4.710': attribute type 29 has an invalid length. [ 100.614363][ T6053] loop0: detected capacity change from 0 to 512 [ 100.650285][ T6053] journal_path: Non-blockdev passed as './bus' [ 100.656638][ T6053] EXT4-fs: error: could not find journal device path [ 100.738185][ T6055] siw: device registration error -23 [ 100.912946][ T6059] smc: net device bond0 applied user defined pnetid SYZ0 [ 100.924899][ T6057] serio: Serial port ptm0 [ 100.931724][ T6059] smc: net device bond0 erased user defined pnetid SYZ0 [ 101.137826][ T6069] __nla_validate_parse: 2 callbacks suppressed [ 101.137846][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 101.338716][ T6078] loop0: detected capacity change from 0 to 512 [ 101.383198][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 101.383217][ T29] audit: type=1326 audit(1764882343.051:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.419910][ T6082] loop1: detected capacity change from 0 to 512 [ 101.490460][ T6082] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.506159][ T6084] serio: Serial port ptm0 [ 101.512680][ T29] audit: type=1326 audit(1764882343.091:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.536199][ T29] audit: type=1326 audit(1764882343.091:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.560095][ T29] audit: type=1326 audit(1764882343.111:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.583450][ T29] audit: type=1326 audit(1764882343.111:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.606766][ T29] audit: type=1326 audit(1764882343.111:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.630177][ T29] audit: type=1326 audit(1764882343.111:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.653656][ T29] audit: type=1326 audit(1764882343.111:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.677009][ T29] audit: type=1326 audit(1764882343.111:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.700336][ T29] audit: type=1326 audit(1764882343.111:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 101.700612][ T6079] lo speed is unknown, defaulting to 1000 [ 101.772269][ T6082] EXT4-fs (loop1): 1 truncate cleaned up [ 101.787146][ T6082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.807953][ T6091] loop4: detected capacity change from 0 to 512 [ 101.823924][ T6091] journal_path: Non-blockdev passed as './bus' [ 101.830257][ T6091] EXT4-fs: error: could not find journal device path [ 101.853451][ T6092] siw: device registration error -23 [ 102.042733][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 102.084003][ T6102] 9pnet: Could not find request transport:  [ 102.129749][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.159604][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.225933][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.311783][ T6121] serio: Serial port ptm0 [ 102.448558][ T6102] netlink: 'syz.3.738': attribute type 29 has an invalid length. [ 102.507878][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'. [ 102.520176][ T6133] siw: device registration error -23 [ 102.551100][ T6132] random: crng reseeded on system resumption [ 102.634057][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 102.706239][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.715574][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.740151][ T6144] loop2: detected capacity change from 0 to 512 [ 102.750507][ T6144] journal_path: Non-blockdev passed as './bus' [ 102.756807][ T6144] EXT4-fs: error: could not find journal device path [ 102.813917][ T6149] loop2: detected capacity change from 0 to 512 [ 102.841762][ T6149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.859671][ T6149] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.874093][ T6149] SELinux: Context @ is not valid (left unmapped). [ 102.899173][ T6154] loop4: detected capacity change from 0 to 512 [ 102.908756][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'. [ 102.917874][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'. [ 102.986135][ T6154] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.041606][ T6155] 9pnet: Could not find request transport:  [ 103.056330][ T6153] lo speed is unknown, defaulting to 1000 [ 103.075693][ T6154] EXT4-fs (loop4): 1 truncate cleaned up [ 103.092115][ T6154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.135371][ T6155] netlink: 'syz.0.754': attribute type 29 has an invalid length. [ 103.348626][ T6166] serio: Serial port ptm0 [ 103.373355][ T6168] loop3: detected capacity change from 0 to 512 [ 103.423929][ T6172] netlink: 'syz.1.770': attribute type 16 has an invalid length. [ 103.431758][ T6172] netlink: 156 bytes leftover after parsing attributes in process `syz.1.770'. [ 103.461960][ T6174] siw: device registration error -23 [ 103.601522][ T6183] loop0: detected capacity change from 0 to 512 [ 103.623707][ T6183] journal_path: Non-blockdev passed as './bus' [ 103.630093][ T6183] EXT4-fs: error: could not find journal device path [ 103.662431][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 103.716661][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.777745][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.792523][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.802010][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.866896][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 103.902434][ T6197] random: crng reseeded on system resumption [ 103.964584][ T6204] siw: device registration error -23 [ 104.007389][ T6208] siw: device registration error -23 [ 104.036010][ T6210] netlink: 'syz.0.784': attribute type 16 has an invalid length. [ 104.043850][ T6210] netlink: 156 bytes leftover after parsing attributes in process `syz.0.784'. [ 104.056719][ T6211] loop3: detected capacity change from 0 to 512 [ 104.443805][ T6222] 9pnet: Could not find request transport:  [ 104.460666][ T6222] netlink: 'syz.1.777': attribute type 29 has an invalid length. [ 104.809190][ T6245] loop1: detected capacity change from 0 to 512 [ 104.816040][ T6245] journal_path: Non-blockdev passed as './bus' [ 104.822236][ T6245] EXT4-fs: error: could not find journal device path [ 104.898828][ T6248] 9pnet: Could not find request transport:  [ 104.930255][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.956828][ T6248] netlink: 'syz.3.786': attribute type 29 has an invalid length. [ 104.968852][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.071924][ T6271] random: crng reseeded on system resumption [ 105.170923][ T6278] siw: device registration error -23 [ 105.238368][ T6283] loop3: detected capacity change from 0 to 512 [ 105.245249][ T6283] journal_path: Non-blockdev passed as './bus' [ 105.251456][ T6283] EXT4-fs: error: could not find journal device path [ 105.304239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.447952][ T6284] lo speed is unknown, defaulting to 1000 [ 105.606753][ T6291] siw: device registration error -23 [ 105.752048][ T6292] 9pnet: Could not find request transport:  [ 105.832377][ T6292] netlink: 'syz.2.804': attribute type 29 has an invalid length. [ 105.850146][ T6303] smc: net device bond0 applied user defined pnetid SYZ0 [ 105.859614][ T6303] smc: net device bond0 erased user defined pnetid SYZ0 [ 105.972873][ T6313] loop0: detected capacity change from 0 to 512 [ 106.019445][ T6313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.024865][ T6318] serio: Serial port ptm0 [ 106.040122][ T6313] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.098273][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.098777][ T6326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.120313][ T6326] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.142615][ T6330] siw: device registration error -23 [ 106.150767][ T6326] __nla_validate_parse: 4 callbacks suppressed [ 106.150786][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.825'. [ 106.155955][ T6330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.826'. [ 106.157040][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.825'. [ 106.185960][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.212982][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.221890][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.250958][ T6334] random: crng reseeded on system resumption [ 106.260506][ T6336] netlink: 96 bytes leftover after parsing attributes in process `syz.2.828'. [ 106.495730][ T29] kauditd_printk_skb: 1391 callbacks suppressed [ 106.495749][ T29] audit: type=1326 audit(1764882348.171:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd101f749 code=0x7ffc0000 [ 106.526703][ T29] audit: type=1326 audit(1764882348.171:8317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd101f749 code=0x7ffc0000 [ 106.550200][ T29] audit: type=1326 audit(1764882348.171:8318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd101f749 code=0x7ffc0000 [ 106.573712][ T29] audit: type=1326 audit(1764882348.171:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd101f749 code=0x7ffc0000 [ 106.597339][ T29] audit: type=1326 audit(1764882348.171:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efcd101f783 code=0x7ffc0000 [ 106.620668][ T29] audit: type=1326 audit(1764882348.171:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efcd101f807 code=0x7ffc0000 [ 106.643998][ T29] audit: type=1326 audit(1764882348.171:8322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7efcd0fd6bdd code=0x7ffc0000 [ 106.667247][ T29] audit: type=1326 audit(1764882348.171:8323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7efcd1053e89 code=0x7ffc0000 [ 106.690651][ T29] audit: type=1326 audit(1764882348.171:8324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7efcd0fd6c47 code=0x7ffc0000 [ 106.713983][ T29] audit: type=1326 audit(1764882348.171:8325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd101f749 code=0x7ffc0000 [ 106.756958][ T6341] 9pnet: Could not find request transport:  [ 106.775518][ T6341] netlink: 'syz.1.819': attribute type 29 has an invalid length. [ 106.949098][ T6356] set_capacity_and_notify: 1 callbacks suppressed [ 106.949115][ T6356] loop1: detected capacity change from 0 to 512 [ 107.125516][ T6361] lo speed is unknown, defaulting to 1000 [ 107.288115][ T6356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.301066][ T6365] netlink: 96 bytes leftover after parsing attributes in process `syz.2.840'. [ 107.315025][ T6366] siw: device registration error -23 [ 107.349662][ T6366] netlink: 32 bytes leftover after parsing attributes in process `syz.3.839'. [ 107.375889][ T6356] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.479786][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.836'. [ 107.489027][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.836'. [ 107.559082][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.656901][ T6404] loop1: detected capacity change from 0 to 512 [ 107.667706][ T6403] random: crng reseeded on system resumption [ 107.673784][ T6401] smc: net device bond0 applied user defined pnetid SYZ0 [ 107.684497][ T6404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.706425][ T6401] smc: net device bond0 erased user defined pnetid SYZ0 [ 107.726026][ T6404] EXT4-fs (loop1): 1 truncate cleaned up [ 107.766175][ T6404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.799405][ T6394] lo speed is unknown, defaulting to 1000 [ 107.823633][ T6420] netlink: 96 bytes leftover after parsing attributes in process `syz.2.854'. [ 107.863034][ T6424] serio: Serial port ptm0 [ 107.962827][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.061515][ T6441] loop1: detected capacity change from 0 to 512 [ 108.082639][ T6441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.132779][ T6441] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.169540][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.859'. [ 108.213572][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.301095][ T6452] netlink: 'syz.2.864': attribute type 16 has an invalid length. [ 108.309127][ T6451] 9pnet: Could not find request transport:  [ 108.333534][ T6451] netlink: 'syz.4.852': attribute type 29 has an invalid length. [ 108.340902][ T6458] netlink: 'syz.1.865': attribute type 4 has an invalid length. [ 108.353522][ T10] lo speed is unknown, defaulting to 1000 [ 108.359380][ T10] syz2: Port: 1 Link DOWN [ 108.366523][ T6458] netlink: 'syz.1.865': attribute type 4 has an invalid length. [ 108.377200][ T10] lo speed is unknown, defaulting to 1000 [ 108.382974][ T10] syz2: Port: 1 Link ACTIVE [ 108.649884][ T6462] lo speed is unknown, defaulting to 1000 [ 109.362191][ T6474] serio: Serial port ptm0 [ 109.398849][ T6482] siw: device registration error -23 [ 109.434072][ T6489] loop4: detected capacity change from 0 to 512 [ 109.466070][ T6489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.509429][ T6489] EXT4-fs (loop4): 1 truncate cleaned up [ 109.523796][ T6489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.636678][ T6501] loop2: detected capacity change from 0 to 512 [ 109.647767][ T6502] loop0: detected capacity change from 0 to 512 [ 109.665055][ T6501] journal_path: Non-blockdev passed as './bus' [ 109.671325][ T6501] EXT4-fs: error: could not find journal device path [ 109.681011][ T6502] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.735546][ T6479] lo speed is unknown, defaulting to 1000 [ 109.774313][ T6502] EXT4-fs (loop0): 1 truncate cleaned up [ 109.811883][ T6502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.987457][ T6529] loop2: detected capacity change from 0 to 512 [ 110.048733][ T6498] lo speed is unknown, defaulting to 1000 [ 110.056486][ T6529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.107134][ T6529] EXT4-fs (loop2): 1 truncate cleaned up [ 110.113262][ T6529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.171970][ T6508] siw: device registration error -23 [ 110.208482][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.244675][ T6522] lo speed is unknown, defaulting to 1000 [ 110.394463][ T6535] 9pnet: Could not find request transport:  [ 110.415466][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.457129][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.466958][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.482654][ T6544] smc: net device bond0 applied user defined pnetid SYZ0 [ 110.493867][ T6535] netlink: 'syz.1.878': attribute type 29 has an invalid length. [ 110.505676][ T6544] smc: net device bond0 erased user defined pnetid SYZ0 [ 110.524945][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.578392][ T6546] siw: device registration error -23 [ 110.719942][ T6563] siw: device registration error -23 [ 110.800572][ T6570] loop1: detected capacity change from 0 to 512 [ 110.873142][ T6570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.890167][ T6577] loop3: detected capacity change from 0 to 512 [ 110.900483][ T6578] loop0: detected capacity change from 0 to 512 [ 110.904925][ T6577] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.942087][ T6577] EXT4-fs (loop3): 1 truncate cleaned up [ 110.954073][ T6570] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.975983][ T6578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.984672][ T6577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.001199][ T6578] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.107346][ T6571] lo speed is unknown, defaulting to 1000 [ 111.279657][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.358547][ T6596] siw: device registration error -23 [ 111.387632][ T6600] netlink: 'syz.4.907': attribute type 16 has an invalid length. [ 111.395478][ T6600] __nla_validate_parse: 18 callbacks suppressed [ 111.395493][ T6600] netlink: 156 bytes leftover after parsing attributes in process `syz.4.907'. [ 111.398704][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 111.508692][ T29] kauditd_printk_skb: 972 callbacks suppressed [ 111.508707][ T29] audit: type=1326 audit(1764882353.181:9298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 111.603358][ T29] audit: type=1326 audit(1764882353.181:9299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 111.626845][ T29] audit: type=1326 audit(1764882353.231:9300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 111.650218][ T29] audit: type=1326 audit(1764882353.231:9301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 111.674104][ T29] audit: type=1326 audit(1764882353.231:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 111.697520][ T29] audit: type=1326 audit(1764882353.251:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 111.721032][ T29] audit: type=1326 audit(1764882353.251:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 111.744553][ T29] audit: type=1326 audit(1764882353.251:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 111.767895][ T29] audit: type=1326 audit(1764882353.251:9306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f227b01df90 code=0x7ffc0000 [ 111.791269][ T29] audit: type=1326 audit(1764882353.251:9307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227b01f749 code=0x7ffc0000 [ 111.869597][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.945182][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.992893][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.028468][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 112.061356][ T6621] siw: device registration error -23 [ 112.070368][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.081281][ T6625] netlink: 96 bytes leftover after parsing attributes in process `syz.1.916'. [ 112.127859][ T6622] team1: entered promiscuous mode [ 112.132961][ T6622] team1: entered allmulticast mode [ 112.194445][ T6622] 8021q: adding VLAN 0 to HW filter on device team1 [ 112.257279][ T6640] loop0: detected capacity change from 0 to 512 [ 112.269108][ T6639] loop1: detected capacity change from 0 to 512 [ 112.277833][ T6640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.288246][ T6639] journal_path: Non-blockdev passed as './bus' [ 112.294499][ T6639] EXT4-fs: error: could not find journal device path [ 112.332781][ T6640] EXT4-fs (loop0): 1 truncate cleaned up [ 112.354964][ T6640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.407927][ T6632] lo speed is unknown, defaulting to 1000 [ 112.414156][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 112.430764][ T6648] loop4: detected capacity change from 0 to 512 [ 112.507763][ T6648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.568384][ T6648] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.659320][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 112.668377][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 112.857163][ T6655] 9pnet: Could not find request transport:  [ 113.018478][ T6665] loop3: detected capacity change from 0 to 512 [ 113.038028][ T6665] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.059599][ T3006] udevd[3006]: worker [3537] terminated by signal 33 (Unknown signal 33) [ 113.073586][ T6655] netlink: 'syz.2.924': attribute type 29 has an invalid length. [ 113.085262][ T3006] udevd[3006]: worker [3537] failed while handling '/devices/virtual/block/loop3' [ 113.089086][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.116717][ T6665] EXT4-fs (loop3): 1 truncate cleaned up [ 113.126565][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.924'. [ 113.152671][ T6659] lo speed is unknown, defaulting to 1000 [ 113.158035][ T6665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.179458][ T3006] udevd[3006]: worker [3307] terminated by signal 33 (Unknown signal 33) [ 113.201030][ T3006] udevd[3006]: worker [3307] failed while handling '/devices/virtual/block/loop3' [ 113.267546][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.322464][ T6672] netlink: 96 bytes leftover after parsing attributes in process `syz.4.934'. [ 113.461591][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 113.490482][ T6683] team1: entered promiscuous mode [ 113.495623][ T6683] team1: entered allmulticast mode [ 113.516246][ T6685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.517436][ T6683] 8021q: adding VLAN 0 to HW filter on device team1 [ 113.554788][ T6685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.613726][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.823246][ T6692] lo speed is unknown, defaulting to 1000 [ 113.905002][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.083758][ T6690] 9pnet: Could not find request transport:  [ 114.116176][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.154633][ T6701] netlink: 'syz.1.932': attribute type 29 has an invalid length. [ 114.410593][ T6720] loop4: detected capacity change from 0 to 512 [ 114.448217][ T6720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.478115][ T6720] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.741899][ T6753] loop2: detected capacity change from 0 to 512 [ 114.777183][ T6755] loop1: detected capacity change from 0 to 512 [ 114.792304][ T6753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.809164][ T6755] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.860768][ T6753] EXT4-fs (loop2): 1 truncate cleaned up [ 114.870410][ T6753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.895305][ T6758] team1: entered promiscuous mode [ 114.900385][ T6758] team1: entered allmulticast mode [ 114.906146][ T6755] EXT4-fs (loop1): 1 truncate cleaned up [ 114.912343][ T6755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.941956][ T6758] 8021q: adding VLAN 0 to HW filter on device team1 [ 114.969210][ T6747] lo speed is unknown, defaulting to 1000 [ 115.098295][ T6752] lo speed is unknown, defaulting to 1000 [ 115.471124][ T6767] lo speed is unknown, defaulting to 1000 [ 115.582716][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.762563][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.785151][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.017994][ T6788] smc: net device bond0 applied user defined pnetid SYZ0 [ 116.054241][ T6788] smc: net device bond0 erased user defined pnetid SYZ0 [ 116.077205][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.118316][ T6800] serio: Serial port ptm0 [ 116.127307][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.236498][ T6811] loop3: detected capacity change from 0 to 512 [ 116.248149][ T6811] journal_path: Non-blockdev passed as './bus' [ 116.254427][ T6811] EXT4-fs: error: could not find journal device path [ 116.282849][ T6816] loop1: detected capacity change from 0 to 512 [ 116.334821][ T6816] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.416678][ T6816] EXT4-fs (loop1): 1 truncate cleaned up [ 116.487914][ T6808] lo speed is unknown, defaulting to 1000 [ 116.520410][ T6816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.557195][ T6831] netlink: 'syz.3.972': attribute type 16 has an invalid length. [ 116.565052][ T6831] __nla_validate_parse: 7 callbacks suppressed [ 116.565066][ T6831] netlink: 156 bytes leftover after parsing attributes in process `syz.3.972'. [ 116.582003][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 116.582019][ T29] audit: type=1326 audit(1764882358.231:9982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33253f749 code=0x7ffc0000 [ 116.611686][ T29] audit: type=1326 audit(1764882358.231:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb33253f783 code=0x7ffc0000 [ 116.634834][ T29] audit: type=1326 audit(1764882358.231:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb33253f807 code=0x7ffc0000 [ 116.658106][ T29] audit: type=1326 audit(1764882358.231:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb3324f6bdd code=0x7ffc0000 [ 116.681393][ T29] audit: type=1326 audit(1764882358.231:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb332573e89 code=0x7ffc0000 [ 116.704758][ T29] audit: type=1326 audit(1764882358.231:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb3324f6c47 code=0x7ffc0000 [ 116.728234][ T29] audit: type=1326 audit(1764882358.231:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33253f749 code=0x7ffc0000 [ 116.752175][ T29] audit: type=1326 audit(1764882358.231:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33253f749 code=0x7ffc0000 [ 116.775594][ T29] audit: type=1326 audit(1764882358.251:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb3324f6357 code=0x7ffc0000 [ 116.798999][ T29] audit: type=1326 audit(1764882358.251:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb3324f63b6 code=0x7ffc0000 [ 117.025322][ T6826] siw: device registration error -23 [ 117.050148][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.963'. [ 117.105632][ T6832] 9pnet: Could not find request transport:  [ 117.321947][ T6853] smc: net device bond0 applied user defined pnetid SYZ0 [ 117.372769][ T6857] serio: Serial port ptm0 [ 117.372807][ T6853] smc: net device bond0 erased user defined pnetid SYZ0 [ 117.510906][ T6865] siw: device registration error -23 [ 117.783421][ T6868] 9pnet: Could not find request transport:  [ 117.809263][ T6868] netlink: 'syz.2.975': attribute type 29 has an invalid length. [ 117.903493][ T6873] lo speed is unknown, defaulting to 1000 [ 118.056997][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.419030][ T6896] smc: net device bond0 applied user defined pnetid SYZ0 [ 118.437710][ T6894] loop3: detected capacity change from 0 to 512 [ 118.476470][ T6902] smc: net device bond0 erased user defined pnetid SYZ0 [ 118.605119][ T6894] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.715081][ T6894] EXT4-fs (loop3): 1 truncate cleaned up [ 118.731780][ T6894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.808424][ T6892] lo speed is unknown, defaulting to 1000 [ 118.868788][ T6914] 9pnet: Could not find request transport:  [ 118.928086][ T6914] netlink: 'syz.2.990': attribute type 29 has an invalid length. [ 118.992965][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'. [ 119.024160][ T6921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.992'. [ 119.033077][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.992'. [ 119.042105][ T6921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.992'. [ 119.051698][ T6920] netlink: 'syz.1.997': attribute type 16 has an invalid length. [ 119.059573][ T6920] netlink: 156 bytes leftover after parsing attributes in process `syz.1.997'. [ 119.073753][ T6921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.992'. [ 119.116443][ T6919] 9pnet: Could not find request transport:  [ 119.215261][ T6919] netlink: 'syz.0.993': attribute type 29 has an invalid length. [ 119.229902][ T6934] loop2: detected capacity change from 0 to 512 [ 119.272284][ T6934] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.372348][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.455344][ T6928] lo speed is unknown, defaulting to 1000 [ 119.604623][ T6934] EXT4-fs (loop2): 1 truncate cleaned up [ 119.651089][ T6961] serio: Serial port ptm0 [ 119.971469][ T6934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.147248][ T6950] siw: device registration error -23 [ 120.174989][ T6976] siw: device registration error -23 [ 120.302659][ T6986] loop4: detected capacity change from 0 to 512 [ 120.338415][ T6986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.404415][ T6986] EXT4-fs (loop4): 1 truncate cleaned up [ 120.458226][ T6986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.531664][ T6981] lo speed is unknown, defaulting to 1000 [ 120.565610][ T6993] loop1: detected capacity change from 0 to 512 [ 120.604898][ T6993] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.615682][ T6994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1012'. [ 120.624727][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1012'. [ 120.638314][ T6993] EXT4-fs (loop1): 1 truncate cleaned up [ 120.670566][ T6993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.764155][ T6992] lo speed is unknown, defaulting to 1000 [ 120.855715][ T7001] netlink: 'syz.0.1009': attribute type 29 has an invalid length. [ 120.867839][ T6999] 9pnet: Could not find request transport:  [ 121.056307][ T7005] FAULT_INJECTION: forcing a failure. [ 121.056307][ T7005] name failslab, interval 1, probability 0, space 0, times 0 [ 121.069611][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.3.1016 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.069653][ T7005] Tainted: [W]=WARN [ 121.069661][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.069683][ T7005] Call Trace: [ 121.069691][ T7005] [ 121.069699][ T7005] __dump_stack+0x1d/0x30 [ 121.069824][ T7005] dump_stack_lvl+0xe8/0x140 [ 121.069848][ T7005] dump_stack+0x15/0x1b [ 121.069869][ T7005] should_fail_ex+0x265/0x280 [ 121.069912][ T7005] should_failslab+0x8c/0xb0 [ 121.070006][ T7005] kmem_cache_alloc_noprof+0x50/0x4a0 [ 121.070050][ T7005] ? audit_log_start+0x342/0x720 [ 121.070096][ T7005] audit_log_start+0x342/0x720 [ 121.070148][ T7005] ? kstrtouint+0x76/0xc0 [ 121.070178][ T7005] audit_seccomp+0x48/0x100 [ 121.070212][ T7005] ? __seccomp_filter+0x832/0x1260 [ 121.070325][ T7005] __seccomp_filter+0x843/0x1260 [ 121.070360][ T7005] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.070387][ T7005] ? vfs_write+0x7e8/0x960 [ 121.070421][ T7005] ? __rcu_read_unlock+0x4f/0x70 [ 121.070484][ T7005] ? __fget_files+0x184/0x1c0 [ 121.070513][ T7005] __secure_computing+0x82/0x150 [ 121.070540][ T7005] syscall_trace_enter+0xcf/0x1e0 [ 121.070565][ T7005] do_syscall_64+0xb2/0x2a0 [ 121.070647][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.070727][ T7005] RIP: 0033:0x7f227b01f749 [ 121.070748][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.070771][ T7005] RSP: 002b:00007f2279a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 121.070794][ T7005] RAX: ffffffffffffffda RBX: 00007f227b275fa0 RCX: 00007f227b01f749 [ 121.070818][ T7005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 121.070832][ T7005] RBP: 00007f2279a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.070844][ T7005] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 121.070917][ T7005] R13: 00007f227b276038 R14: 00007f227b275fa0 R15: 00007ffc527add38 [ 121.070942][ T7005] [ 121.071797][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.292536][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.334881][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.390038][ T7012] loop4: detected capacity change from 0 to 512 [ 121.425481][ T7012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.464104][ T7012] EXT4-fs (loop4): 1 truncate cleaned up [ 121.471727][ T7019] serio: Serial port ptm0 [ 121.510742][ T7012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.568087][ T7010] lo speed is unknown, defaulting to 1000 [ 121.609739][ T29] kauditd_printk_skb: 1104 callbacks suppressed [ 121.609757][ T29] audit: type=1326 audit(1764882363.281:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 121.682865][ T7031] __nla_validate_parse: 3 callbacks suppressed [ 121.682884][ T7031] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1015'. [ 121.694029][ T29] audit: type=1326 audit(1764882363.311:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 121.698219][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1015'. [ 121.721680][ T29] audit: type=1326 audit(1764882363.311:11096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6dfd92f783 code=0x7ffc0000 [ 121.730646][ T7031] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1015'. [ 121.753988][ T29] audit: type=1326 audit(1764882363.311:11097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6dfd92f807 code=0x7ffc0000 [ 121.786327][ T29] audit: type=1326 audit(1764882363.311:11098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6dfd8e6bdd code=0x7ffc0000 [ 121.809791][ T29] audit: type=1326 audit(1764882363.311:11099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6dfd963e89 code=0x7ffc0000 [ 121.833590][ T29] audit: type=1326 audit(1764882363.311:11100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6dfd8e6c47 code=0x7ffc0000 [ 121.857406][ T29] audit: type=1326 audit(1764882363.311:11101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 121.880976][ T29] audit: type=1326 audit(1764882363.311:11102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfd92f749 code=0x7ffc0000 [ 121.904552][ T29] audit: type=1326 audit(1764882363.311:11103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6dfd8e6357 code=0x7ffc0000 [ 121.930382][ T7031] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1015'. [ 121.982085][ T7026] 9pnet: Could not find request transport:  [ 122.016339][ T7034] 9pnet: Could not find request transport:  [ 122.041332][ T7026] netlink: 'syz.0.1025': attribute type 29 has an invalid length. [ 122.065704][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1025'. [ 122.085542][ T7034] netlink: 'syz.2.1017': attribute type 29 has an invalid length. [ 122.324436][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.349284][ T7048] loop2: detected capacity change from 0 to 512 [ 122.369604][ T7046] lo speed is unknown, defaulting to 1000 [ 122.395261][ T7048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.469058][ T7048] EXT4-fs (loop2): 1 truncate cleaned up [ 122.538232][ T7048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.637773][ T7060] loop0: detected capacity change from 0 to 512 [ 122.668451][ T7060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.713476][ T7057] 9pnet: Could not find request transport:  [ 122.724367][ T7060] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.813444][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1033'. [ 122.822496][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1033'. [ 122.846580][ T7070] siw: device registration error -23 [ 122.878086][ T7057] netlink: 'syz.1.1024': attribute type 29 has an invalid length. [ 122.916634][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1024'. [ 122.941275][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.019749][ T7075] loop4: detected capacity change from 0 to 512 [ 123.039843][ T7081] serio: Serial port ptm0 [ 123.065006][ T7075] journal_path: Non-blockdev passed as './bus' [ 123.071214][ T7075] EXT4-fs: error: could not find journal device path [ 123.150071][ T3320] ================================================================== [ 123.158302][ T3320] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 123.166412][ T3320] [ 123.168799][ T3320] read-write to 0xffff88811ae56de0 of 8 bytes by task 7068 on cpu 0: [ 123.176884][ T3320] shmem_add_to_page_cache+0x414/0x530 [ 123.182484][ T3320] shmem_get_folio_gfp+0x4e8/0xd60 [ 123.187635][ T3320] shmem_write_begin+0xa8/0x190 [ 123.192523][ T3320] generic_perform_write+0x184/0x490 [ 123.197836][ T3320] shmem_file_write_iter+0xc5/0xf0 [ 123.202973][ T3320] __kernel_write_iter+0x2d6/0x540 [ 123.208113][ T3320] dump_user_range+0x61e/0x8f0 [ 123.212895][ T3320] elf_core_dump+0x1de7/0x1f80 [ 123.217701][ T3320] coredump_write+0xacf/0xdf0 [ 123.222571][ T3320] vfs_coredump+0x24f7/0x2e60 [ 123.227426][ T3320] get_signal+0xd84/0xf70 [ 123.231784][ T3320] arch_do_signal_or_restart+0x96/0x450 [ 123.237367][ T3320] irqentry_exit+0xfb/0x560 [ 123.241888][ T3320] asm_exc_page_fault+0x26/0x30 [ 123.246779][ T3320] [ 123.249109][ T3320] read to 0xffff88811ae56de0 of 8 bytes by task 3320 on cpu 1: [ 123.256666][ T3320] shmem_getattr+0x68/0x200 [ 123.261382][ T3320] vfs_getattr_nosec+0x146/0x1e0 [ 123.266362][ T3320] vfs_statx+0x113/0x390 [ 123.270723][ T3320] vfs_fstatat+0x115/0x170 [ 123.275169][ T3320] __se_sys_newfstatat+0x55/0x260 [ 123.280226][ T3320] __x64_sys_newfstatat+0x55/0x70 [ 123.285268][ T3320] x64_sys_call+0x111f/0x3000 [ 123.289977][ T3320] do_syscall_64+0xd8/0x2a0 [ 123.294510][ T3320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.300425][ T3320] [ 123.302765][ T3320] value changed: 0x0000000000000e22 -> 0x0000000000000e24 [ 123.309968][ T3320] [ 123.312301][ T3320] Reported by Kernel Concurrency Sanitizer on: [ 123.318509][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.330015][ T3320] Tainted: [W]=WARN [ 123.333832][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.343915][ T3320] ================================================================== [ 123.476887][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.686234][ T7086] 9pnet: Could not find request transport:  [ 123.728892][ T7086] netlink: 'syz.3.1041': attribute type 29 has an invalid length.