last executing test programs: 1m1.954110988s ago: executing program 0 (id=1758): r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, 0x0) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 1m1.890884371s ago: executing program 0 (id=1759): r0 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./bus\x00', 0x0, &(0x7f0000000000)={[{@noquota}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@norecovery}]}, 0xfe, 0x275, &(0x7f0000000980)="$eJzs3T1onHUcB/Dfcy8mMUGiLoL4AiKigRAHQXDRRSEgIYgIKkREnCQRYoJbzsnFwc5tydQllG5NO5YuoUuha9pmSJcODR0aOrTDleeeu3BJLiS515Ln84HL8/zv/m8H9/0/d8PzTwC5NR4RX0ZEMSImIqIcEUlzhfezx3i9uDqyMRdRrX73OKnVy8qZRrvRiKhExOcRpcZry+s/bT/d/Oaj/5bKH15a/3GkX+8vYnjvbGd769vdizP/Xp3+dLlQf26sfmx+H92UtHiulES80YvBXhJJadAz4CRm/75yN839mxHxQS3/5SjUI/v/4is3y/HJhaPannt05+1+zhXovmq1nF4DK1Ugdwq178BJYTIisvNCYXIy+w5/r5jEHwuLf038vrA0/1vL5aPY9wUL6ESS/jZPf4B/fX3o2uiB/D8sZvk/kc96PFOgJ8Yitr6fXbufnu+6ikM+vJMd0vxP/LLyccg/5I78Q37JP+SX/MMZ0GZ25R/yqzn/Q4OeDNBXrv9whpUbJ5WWL8s/5Jf8Q34dyH8f78cFBq05/wBAvlSHBn0HMjAog15/AAAAAAAAAAAAAAAAAACAw1ZHNuYaj36Neet8xM5XEVHaP362H3mx9v+II4Zrf199kqTV9iRZs478/F6HHXTocpfvvp455Uburz3o7vindfvd3vT7z/7ikXvbrcxHVNLKU6XS4c9/Uv/8HevI/l8/pmH515MN0C3JgfIXP3Sv75U22jxf69747ZjejLiRrj9Trda/QrxVO7Zef8aat1hu05/POuwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvnkRAAD//0x2aeA=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x71, 0x7, 0x80b, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, @empty, 0x10, 0x8, 0x6, 0xfffffe71}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008815}, 0x4010) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x10, 0x7fffffff, 0x19, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8, 0x0, 0x7fffffff}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000e00)={'gre0\x00', 0x0, 0x10, 0x8700, 0x1, 0x3, {{0x2c, 0x4, 0x3, 0x3, 0xb0, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @private=0xa010100, {[@timestamp={0x44, 0x18, 0xc1, 0x0, 0x2, [0x9, 0x155, 0x1, 0xe, 0xe944, 0x5, 0x1, 0x0, 0x3]}, @end, @timestamp_prespec={0x44, 0x34, 0xb7, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x16}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010101, 0xa16}, {@empty, 0xdc}, {@rand_addr=0x64010102, 0x1}, {@broadcast, 0xb}]}, @lsrr={0x83, 0x2b, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, @remote, @initdev={0xac, 0x1e, 0x3, 0x0}, @empty, @empty, @local]}, @generic={0x13, 0xe, "72980020e44ebb271888cfc831b27a38"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000c00)={0x1d8, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x54) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), &(0x7f0000000400)) 1m1.807299805s ago: executing program 0 (id=1761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x40000000, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$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") r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x800000a1e) 1m1.724796648s ago: executing program 0 (id=1762): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x41ee, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x2a00, 0x2101, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r2, 0x100}, 0x8) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@noauto_da_alloc}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x4, 0x7fffffff}]}, 0xc, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x5}, 0x94) 1m1.702916599s ago: executing program 0 (id=1764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000008cf3db4cbbac5c060000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000000d000000110000002057e268ff6a14e1c5b8ed8f763c055d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000009c0)='f2fs_gc_begin\x00', r2}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000006c0)=0xc) readv(r4, &(0x7f0000000b40)=[{&(0x7f0000001200)=""/4088, 0x1000}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000880)=""/126, 0x7e}, {&(0x7f0000002200)=""/4096, 0xfffffc53}, {&(0x7f0000003200)=""/202, 0xca}], 0x6) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7d, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000680)={[{@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x4040, 0x4d) ptrace(0x10, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000001c0)='./file0\x00', r6, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES8=r3], 0x50) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) read$ptp(r7, &(0x7f0000000640)=""/47, 0x2f) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f00000004c0)={0xc, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e1d, @remote}}}, 0x108) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x0) ioctl$EVIOCGPHYS(r8, 0x80404507, &(0x7f0000000380)=""/183) 1m1.176893992s ago: executing program 0 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x1b, r5, 0x1, 0xff, 0x6, @local}, 0x14) sendto(r4, 0x0, 0x0, 0x4, 0x0, 0x0) r6 = io_uring_setup(0x491, &(0x7f00000004c0)={0x0, 0x3a29, 0x800, 0x2, 0x4000157}) close_range(r6, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x823, 0x3ffb, 0xd, 0x0, 0x17) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x2, 0x80805, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) sendmmsg$inet_sctp(r10, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1m1.163864922s ago: executing program 32 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x1b, r5, 0x1, 0xff, 0x6, @local}, 0x14) sendto(r4, 0x0, 0x0, 0x4, 0x0, 0x0) r6 = io_uring_setup(0x491, &(0x7f00000004c0)={0x0, 0x3a29, 0x800, 0x2, 0x4000157}) close_range(r6, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x823, 0x3ffb, 0xd, 0x0, 0x17) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x2, 0x80805, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) sendmmsg$inet_sctp(r10, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 38.638486953s ago: executing program 1 (id=2032): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x163e, 0x80, 0x1fffff, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200002d9, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kyber_adjust\x00', r4, 0x0, 0xae8}, 0x18) io_uring_enter(r0, 0x47b8, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140007000000000000008400"/25], 0x28}}, 0x40088) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) clock_adjtime(0x0, &(0x7f0000000040)={0xf4f, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100, 0x0, 0x1000000000, 0x104}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r7, 0x0, 0x40020) 38.278609649s ago: executing program 1 (id=2036): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (fail_nth: 3) 37.919074354s ago: executing program 1 (id=2041): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', 0xffffffffffffffff, 0x0, 0x80000001}, 0x18) r1 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) 37.862710817s ago: executing program 1 (id=2042): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000080)=@deltaction={0x28, 0x30, 0x9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$eJzs28tvG8UfAPDv2kn66zP5VeXRBxAoiIpH0qSl9MAFBBIHkJDgUI4hSatQt0FNkGgVQUCoHFEl7ogjEv8AnOCCgBMSV7ijShXKpYWT0dq7ie3aaZI62RR/PtK2M7tjzXw9O/bMThxAzxpO/0ki9kTE7xExWM82Fxiu/3draWHy76WFySSq1Tf/Smrlbi4tTOZF89ftzjN9EaVPkzjcpt65y1fOT1Qq05ey/Oj8hfdG5y5feXbmwsS56XPTF8dPnz55Yuz5U+PPdSXONK6bhz6cPXLw1bevvT555to7P3+T5PG3xNElw6tdfKJa7XJ1xdrbkE76CmwI61KuD9Por43/wSjHSucNxiufFNo4YFNVq9Xq/Z0vL1aB/7Akim4BUIz8iz5d/+bHFk09toUbL9YXQGnct7KjfqUvSlmZ/pb1bTcNR8SZxX++TI/YnOcQAABNvk/nP8+0m/+VovG50L5sD2UoIv4fEfsj4lREHIiI+yJqZR+IiAfXWX/rJsnt85/S9Q0Ftkbp/O+FbG+ref6Xz/5iqJzl9tbi70/OzlSmj2fvybHo35Hmx1ap44eXf/u807XG+V96pPXnc8GsHdf7djS/ZmpifuJuYm504+OIQ33t4k+WdwKSiDgYEYc2WMfMU18f6XTtzvGvogv7TNWvIp6s9/9itMSfS1bfnxz9X1Smj4/md8Xtfvn16hud6r+r+Lsg7f9dbe//5fiHksb92rn113H1j8/ar2n2bfz+H0jeajr3wcT8/KWxiIHktXqjG8+Pt5QbXymfxn/saPvxvz9W3onDEZHexA9FxMMR8UjWd49GxGMRcXSV+H966fF3O13bDv0/ta7+X0kMROuZ9ony+R+/a6p0aD3xp/1/spY6lp1Zy+ffWtq1sbsZAAAA7j2liNgTSWlkOV0qjYzU/4b/QOwqVWbn5p8+O/v+xan6bwSGor+UP+kabHgeOpYt6/P8eEv+RPbc+Ivyzlp+ZHK2MlV08NDjdncY/6k/y0W3Dth0fq8Fvcv4h95l/EPvMv6hd7UZ/zuLaAew9dp9/39UQDuArdcy/m37QQ+x/ofe1Tj+kwLbAWw93//Qk+Z2xp1/JN8DiYHt0Yx7KBGltRf+Nrvbim6zxNoTBX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMm/AQAA//8iOuPQ") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010001f04000002000000000000000000", @ANYRES32=r1, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYRESHEX=r1, @ANYRES64=r0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, 0x3f, 0x1, 0x70bd2c, 0x25dfdbff, {0x1}, [@typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_ifreq(r2, 0x8993, &(0x7f0000000000)={'lo\x00', @ifru_addrs=@sco}) 37.147309928s ago: executing program 1 (id=2044): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xffd, 0x6}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) read$ptp(r7, &(0x7f0000000500)=""/81, 0x51) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x2c0, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 35.973009778s ago: executing program 1 (id=2057): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r5, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x1}}]}}]}, 0x3c}}, 0x40) 35.972718179s ago: executing program 33 (id=2057): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r5, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x1}}]}}]}, 0x3c}}, 0x40) 2.923838753s ago: executing program 6 (id=2433): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x2000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) pause() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2.047468431s ago: executing program 6 (id=2451): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4e4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 2.019292562s ago: executing program 6 (id=2452): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r2}}, 0x18) 1.953025725s ago: executing program 6 (id=2453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b0001006970366772650000", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) socket$nl_route(0x10, 0x3, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@xdp, &(0x7f00000000c0)=0xfffffffffffffea6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 1.670392728s ago: executing program 3 (id=2461): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x2000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) pause() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.584931851s ago: executing program 6 (id=2463): socket(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.491745825s ago: executing program 5 (id=2467): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 1.444254417s ago: executing program 4 (id=2469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000014000000000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 1.38898888s ago: executing program 5 (id=2470): socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r0}) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="ea05f15c9d1f2e242a35f5f47dbf054d34b339ae6f07006a", 0x18}, {&(0x7f0000000200)="2ef400beed37d440431c634afe7419022d1f8e4028248463947020805f330d20644319adee6abec9b3b213a1b2f01bf6744741e12de259c65807c11b88d0", 0x3e}, {&(0x7f00000027c0)="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", 0x20b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004d80)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000005400)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000005480)=[{0x0}], 0x1}}], 0x5, 0x0) 1.36247498s ago: executing program 5 (id=2471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000008cf3db4cbbac5c060000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000000d000000110000002057e268ff6a14e1c5b8ed8f763c055d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000009c0)='f2fs_gc_begin\x00', r2}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000006c0)=0xc) readv(r4, &(0x7f0000000b40)=[{&(0x7f0000001200)=""/4088, 0x1000}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000880)=""/126, 0x7e}, {&(0x7f0000002200)=""/4096, 0xfffffc53}, {&(0x7f0000003200)=""/202, 0xca}], 0x6) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x1000, 0x4e2e9c81fae8902b, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7d, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 820.444624ms ago: executing program 3 (id=2479): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffa8) 806.833534ms ago: executing program 2 (id=2480): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 703.036179ms ago: executing program 3 (id=2481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 673.247451ms ago: executing program 2 (id=2482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0), &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r2, 0x6a}], 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000300)={0x0, 0x7a12, 0x10000, 0xfffffffe, 0x3a1, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000340), &(0x7f0000000300)=r4}, 0x20) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0502000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00'}, 0x18) perf_event_open(&(0x7f0000000900)={0x8, 0x80, 0x0, 0x0, 0x5, 0x83, 0x0, 0x0, 0x84040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x5, 0x50}, 0xa002, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xffff}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f00000005c0)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000c0800450000b0000000000011907800000000ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b519158490f5b0d94c6fa66abcd4fbe40a23424dbcfd56f1375461caaa1d746c1a8ca4e40d6ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8defe09"], 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 515.484627ms ago: executing program 2 (id=2483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 496.173048ms ago: executing program 5 (id=2484): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10001) 475.833419ms ago: executing program 4 (id=2485): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@struct={0x4, 0x5, 0x0, 0x4, 0x1, 0x1, [{0x5, 0x1, 0x2}, {0x3, 0x3, 0x6}, {0x1, 0x0, 0xffff}, {0xe, 0x1, 0x9}, {0xd, 0x2, 0xfffffffd}]}]}, {0x0, [0x2e, 0x2e, 0x6f, 0x5f, 0x2e, 0x30]}}, &(0x7f00000005c0)=""/235, 0x68, 0xeb, 0x1, 0x51}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x10000, 0x0, @rand_addr=' \x01\x00', @loopback, 0x10, 0x80, 0x5, 0x3}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9, 0x9, 0x400, 0x0, 0xe, 0x0, r0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) 443.28424ms ago: executing program 3 (id=2486): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b0001006970366772650000", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) socket$nl_route(0x10, 0x3, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@xdp, &(0x7f00000000c0)=0xfffffffffffffea6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 427.121671ms ago: executing program 2 (id=2487): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x38020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x13, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2}, @exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x3, 0x0, 0x3, 0x81, 0x80}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x5, 0xcb, &(0x7f0000000c40)=""/203, 0x41000, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x6, 0xbd2, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000fc0)=[r1, r4, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6], &(0x7f0000001000)=[{0x3, 0x5, 0xa, 0x5}, {0x3, 0x1, 0x5, 0x6}, {0x3, 0x3, 0xc, 0xb}, {0x2, 0x4, 0x6, 0xb}, {0x2, 0x4, 0xa, 0x2}, {0x0, 0x1, 0x6, 0xc}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x1}, 0x18) r8 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x9284, 0x4, 0x8000, 0x400250}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x10400, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d6d61702c6163637573733d616e852c61756469742c00"]) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51, {0x0, r13}}) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r14 = memfd_secret(0x80000) close(r14) 418.877952ms ago: executing program 4 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000000ee2ac3e978f916950074000000000000000079"], 0x0, 0x2}, 0x94) syz_emit_ethernet(0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="f61a"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000180)="0f1544d4286c50463e36fad2dab72eb4de389c2f", &(0x7f0000000300)=""/71, &(0x7f0000000200)="5934010fb912c742977c67349855232dd6ee349f4a337c74a665edfb46c4a3536370b09c", &(0x7f0000001780)="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", 0xe, r0, 0x4}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000840)="a2afd3808331326e688c2799ec1c63db0443820c12fc9043473566d87d398429c77ab7a220a178b74a60a0fed73f216bd1c9551d13dadb4b3233a4ab33b81a57cea9d9f97766b1d38b9e074b35ea041187eeb16644e6eca430873eff0b4e126fecd38ce95328e4e7ab8db68a27b7edaac8", 0x71}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) tgkill(0x0, 0x0, 0x8000021) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009b4b3b93fd0573000000000000f5ff000000000000000000785c7b6e43ebc3753245b27c1cc209d833ca003e0b35eb23fd030000005f24d34622dac4a3b189b08cdf6c7f4ca6dc06e8fbdcb259051e47c4a2479ab628214fbc639f56bea3dedcf421f5723c5888344ae8b8a5fb48b605bff51ade6df95fac11304fcf31353687e78e8f5a3c14580bc0a0f6550811042aebcd3fa3ae963a4d3fd62fa7005b0316b3b3033415e116feee075116311a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095000000000000009000b86ad961cee1da57e9ad3a17ebe042584ab700f5ee28b740d1cafbcf4a883a66b7dd9e92eaa1eba8ef416748f57fc1fbf1b566d74567dd38ae9ee9ba2781e024076abcde404c0a7146566844823aa08c9d37dd"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x1, 0x1, 0x1, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r6}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x18) fadvise64(r8, 0x9, 0x3, 0x4) r9 = getpgid(0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_getfd(r10, r10, 0x0) 332.895985ms ago: executing program 5 (id=2489): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0x0, 0x531, &(0x7f0000000640)="$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") setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r4) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x108}}, 0x4000000) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x6048800) 319.152646ms ago: executing program 5 (id=2490): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x2000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) pause() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 317.033556ms ago: executing program 2 (id=2491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x27, 0x2, 0x0, @mcast2, @mcast2, 0x7, 0x8000, 0x4, 0x74b}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="feffffffffffffff1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x14, 0x4, 0x20, @mcast2, @private1, 0x840f742b97df3462, 0x20, 0x80000000, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x8, 0x8, 0x1, 0x8, {{0xb, 0x4, 0x2, 0xd, 0x2c, 0x67, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x14, 0xbe, 0x0, 0x9, [0x51, 0x7, 0x101, 0x10000]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x4, 0xb, 0x0, 0x3857, 0x1, @private1, @ipv4={'\x00', '\xff\xff', @empty}, 0x669b4a1f2aad0af, 0x1, 0xfff, 0x4}}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000c40)=0x0, &(0x7f0000000c80)=0x4) r17 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r19 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r19, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r18, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x6, 0x5, 0x7, 0x10, 0xfff, 0x2}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, 'E1'}]}}}]}, 0x54}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000cc0)={0x6d0, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8}, {0x2c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x9, 0x4, 0x1, 0x194}, {0x5, 0x0, 0x4, 0x800}, {0x4, 0x5, 0x5, 0x3}, {0x504, 0x2, 0x8, 0x3b1}, {0x3, 0x0, 0x1c, 0x1}, {0x40, 0x5, 0xf, 0x4}, {0x7f, 0xe, 0x58, 0x3}, {0x9, 0x3, 0x4}, {0xbf94, 0x9, 0x6, 0x5}, {0x104e, 0x40, 0x0, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4450}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0xcc, 0x3, 0x7}, {0x4, 0x9, 0x0, 0x35}, {0x9, 0x7, 0x8}, {0x8, 0x3, 0x8, 0x595b}, {0x7, 0x4, 0xff, 0x5}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}]}}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@empty, 0x4e24, 0x0, 0x4e24, 0x3, 0xa, 0x20, 0x80, 0x3a, 0x0, r5}, {0x10001, 0x400, 0x5, 0x400, 0x1, 0x400, 0x6, 0x97}, {0xff6, 0x4, 0x80000000000000, 0x5}, 0x6, 0x6e6bbe, 0x0, 0x0, 0x2, 0x1}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x0, 0x3, 0xf3, 0x9, 0xe0d3125, 0x1}}, 0xe8) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d6974"], 0x118}}, 0x0) 258.324309ms ago: executing program 3 (id=2492): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 196.044121ms ago: executing program 4 (id=2493): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) 189.540471ms ago: executing program 4 (id=2494): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB]) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="f674ed6e890a7cb7db6486d8325cc844491ec1c7958cc3356be58a3c47bd4005780b924224fea6c94f8e5081f51332c82f6ab64d16bef9075f2645c4a7c035577d35a9ccc58ca9a3c3b274c25ba7780f7498b6bc741d4719da2a5a06cf46570163", 0x61}, {&(0x7f0000000040)="c7e02c683c5d044661a3433c2179d23b00e353eb53f596717f6ce4a68aa494b2fd660f44202d3d653aed7889ea63e95ed4dbf587799e94", 0x37}, {&(0x7f0000000380)="c9ff72b8eb9525f5f82f8bbf841790d5e21fde2b4e4d1c8e0bdef250b2081e8723c70ee7e0b321a99a7c6ca7f2328458569caf584e3f481b042f17cfc757d23fa8de1946d1152efcce4c34a49123ecd3377c5ac7767f44d2d6c554d6abe13b8aef410d860b4a18ea6c0775a2e6d1cef31950e1b8c0d4f603a21ab1bc56d4c9ad009d28b40e25f428fc6720243e2801be48e115f6e8e9c2c5cc42f3e724bacd9e478acd6cd4a180f77e", 0xa9}], 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000dc0)="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", 0x1ef}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f00000005c0)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b03", 0x16}, {&(0x7f0000000040)='ch', 0x2}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x44040) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffd) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) 143.235683ms ago: executing program 6 (id=2495): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x214313b4073dae39, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffffdffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x8010) 100.625646ms ago: executing program 3 (id=2496): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x3}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x80) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000900)=[{&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000780)=""/147, 0x93}, {&(0x7f0000000840)=""/179, 0xb3}, {&(0x7f0000000040)=""/3, 0x3}], 0x6, &(0x7f00000000c0)=""/1, 0x1}}, {{&(0x7f0000000980)=@can, 0x80, &(0x7f0000000140)=[{&(0x7f0000000a00)=""/199, 0xc7}], 0x1, &(0x7f0000000b00)=""/95, 0x5f}, 0x8a08}], 0x2, 0x40000000, &(0x7f0000000280)={0x0, 0x989680}) r4 = dup3(r3, r2, 0x80000) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x7bb6, 0x3, 0xa688, 0x7, 0x1b, "0f56538491d5e135bc43611a71f390674e153b"}) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfdef) r5 = dup3(r1, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) recvmmsg$unix(r5, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/48, 0x30}], 0x1}}, {{0xffffffffffffffff, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1}}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000003040)=""/60, 0x3c}], 0x1}}], 0x4, 0x58ca2280, 0x0) 40.489208ms ago: executing program 2 (id=2497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 4 (id=2498): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@struct={0x4, 0x5, 0x0, 0x4, 0x1, 0x1, [{0x5, 0x1, 0x2}, {0x3, 0x3, 0x6}, {0x1, 0x0, 0xffff}, {0xe, 0x1, 0x9}, {0xd, 0x2, 0xfffffffd}]}]}, {0x0, [0x2e, 0x2e, 0x6f, 0x5f, 0x2e, 0x30]}}, &(0x7f00000005c0)=""/235, 0x68, 0xeb, 0x1, 0x51}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x10000, 0x0, @rand_addr=' \x01\x00', @loopback, 0x10, 0x80, 0x5, 0x3}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9, 0x9, 0x400, 0x0, 0xe, 0x0, r0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) kernel console output (not intermixed with test programs): 4] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.052044][ T8497] syzkaller0: entered promiscuous mode [ 142.057702][ T8497] syzkaller0: entered allmulticast mode [ 142.080583][ T8494] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.171205][ T8510] loop2: detected capacity change from 0 to 512 [ 142.180152][ T8510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.205062][ T8514] vhci_hcd: invalid port number 236 [ 142.221160][ T8510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.240051][ T8510] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.297497][ T8523] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8523 comm=syz.3.1812 [ 142.310062][ T8523] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8523 comm=syz.3.1812 [ 142.329275][ T8510] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1807: iget: bad i_size value: 2533274857506816 [ 142.359382][ T8523] xt_hashlimit: max too large, truncated to 1048576 [ 142.369718][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.381474][ T8523] loop3: detected capacity change from 0 to 128 [ 142.432825][ T8538] loop2: detected capacity change from 0 to 512 [ 142.444352][ T8538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.585437][ T29] audit: type=1400 audit(1764903251.224:1863): avc: denied { ioctl } for pid=8543 comm="syz.5.1816" path="socket:[25454]" dev="sockfs" ino=25454 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.744314][ T8538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.765009][ T8538] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.903522][ T8538] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1813: iget: bad i_size value: 2533274857506816 [ 143.019057][ T8555] syzkaller0: entered promiscuous mode [ 143.024609][ T8555] syzkaller0: entered allmulticast mode [ 143.055070][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.087817][ T8559] loop2: detected capacity change from 0 to 512 [ 143.096446][ T8559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.114869][ T8559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.127660][ T8559] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.173981][ T8559] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1818: iget: bad i_size value: 2533274857506816 [ 143.198893][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.230984][ T8563] loop2: detected capacity change from 0 to 128 [ 143.388060][ T29] audit: type=1400 audit(1764903252.045:1864): avc: denied { write } for pid=8568 comm="syz.1.1821" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.388313][ T8570] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 143.388313][ T8570] program syz.1.1821 not setting count and/or reply_len properly [ 143.435102][ T8571] ip6gre1: entered promiscuous mode [ 143.440359][ T8571] ip6gre1: entered allmulticast mode [ 143.458932][ T8571] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8571 comm=syz.3.1823 [ 143.472812][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 143.514892][ T8581] loop2: detected capacity change from 0 to 128 [ 143.651987][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 143.658048][ T4085] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.714566][ T29] audit: type=1400 audit(1764903252.375:1865): avc: denied { mount } for pid=8582 comm="syz.1.1829" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 144.092593][ T8596] loop2: detected capacity change from 0 to 512 [ 144.114121][ T8596] EXT4-fs: Ignoring removed i_version option [ 144.120206][ T8596] EXT4-fs: Ignoring removed bh option [ 144.134076][ T8596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.146791][ T8596] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.175085][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.233383][ T8605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.246246][ T8605] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.257152][ T8605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.305656][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 144.306328][ T29] audit: type=1400 audit(1764903252.965:1866): avc: denied { ioctl } for pid=8608 comm="syz.2.1835" path="socket:[26315]" dev="sockfs" ino=26315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.340334][ T8609] team0: Port device team_slave_1 removed [ 144.535943][ T8619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.551560][ T8619] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.579990][ T8619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.676105][ T29] audit: type=1326 audit(1764903253.335:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.709596][ T29] audit: type=1326 audit(1764903253.335:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.710419][ T8625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.733148][ T29] audit: type=1326 audit(1764903253.335:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.733175][ T29] audit: type=1326 audit(1764903253.335:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.752123][ T8625] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.769020][ T29] audit: type=1326 audit(1764903253.335:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.826097][ T29] audit: type=1326 audit(1764903253.335:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.826721][ T8625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.849496][ T29] audit: type=1326 audit(1764903253.335:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.881875][ T29] audit: type=1326 audit(1764903253.335:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.905305][ T29] audit: type=1326 audit(1764903253.335:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.928695][ T29] audit: type=1326 audit(1764903253.335:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.2.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 144.963998][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 144.973249][ T8628] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1842'. [ 144.982612][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 144.991592][ T8628] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1842'. [ 145.002729][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 145.102746][ T8647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.156246][ T8647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.168864][ T8647] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.201024][ T8647] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1850: iget: bad i_size value: 2533274857506816 [ 145.234899][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.776351][ T8673] FAULT_INJECTION: forcing a failure. [ 145.776351][ T8673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.789614][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.4.1859 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.789643][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.789656][ T8673] Call Trace: [ 145.789664][ T8673] [ 145.789672][ T8673] __dump_stack+0x1d/0x30 [ 145.789699][ T8673] dump_stack_lvl+0xe8/0x140 [ 145.789724][ T8673] dump_stack+0x15/0x1b [ 145.789768][ T8673] should_fail_ex+0x265/0x280 [ 145.789805][ T8673] should_fail+0xb/0x20 [ 145.789982][ T8673] should_fail_usercopy+0x1a/0x20 [ 145.790003][ T8673] _copy_from_user+0x1c/0xb0 [ 145.790026][ T8673] ___sys_sendmsg+0xc1/0x1d0 [ 145.790060][ T8673] __x64_sys_sendmsg+0xd4/0x160 [ 145.790112][ T8673] x64_sys_call+0x17ba/0x3000 [ 145.790213][ T8673] do_syscall_64+0xd8/0x2a0 [ 145.790243][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.790266][ T8673] RIP: 0033:0x7f0cd209f749 [ 145.790339][ T8673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.790359][ T8673] RSP: 002b:00007f0cd0b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.790424][ T8673] RAX: ffffffffffffffda RBX: 00007f0cd22f5fa0 RCX: 00007f0cd209f749 [ 145.790437][ T8673] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 145.790451][ T8673] RBP: 00007f0cd0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 145.790465][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.790479][ T8673] R13: 00007f0cd22f6038 R14: 00007f0cd22f5fa0 R15: 00007fff762a7918 [ 145.790589][ T8673] [ 146.117444][ T8692] FAULT_INJECTION: forcing a failure. [ 146.117444][ T8692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.130609][ T8692] CPU: 0 UID: 0 PID: 8692 Comm: syz.1.1867 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.130638][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.130687][ T8692] Call Trace: [ 146.130694][ T8692] [ 146.130701][ T8692] __dump_stack+0x1d/0x30 [ 146.130722][ T8692] dump_stack_lvl+0xe8/0x140 [ 146.130741][ T8692] dump_stack+0x15/0x1b [ 146.130762][ T8692] should_fail_ex+0x265/0x280 [ 146.130858][ T8692] should_fail+0xb/0x20 [ 146.130886][ T8692] should_fail_usercopy+0x1a/0x20 [ 146.130904][ T8692] _copy_to_user+0x20/0xa0 [ 146.130929][ T8692] simple_read_from_buffer+0xb5/0x130 [ 146.131012][ T8692] proc_fail_nth_read+0x10e/0x150 [ 146.131042][ T8692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.131069][ T8692] vfs_read+0x1a8/0x770 [ 146.131098][ T8692] ? __rcu_read_unlock+0x4f/0x70 [ 146.131245][ T8692] ? __fget_files+0x184/0x1c0 [ 146.131261][ T8692] ? mutex_lock+0x58/0x90 [ 146.131286][ T8692] ksys_read+0xda/0x1a0 [ 146.131382][ T8692] __x64_sys_read+0x40/0x50 [ 146.131407][ T8692] x64_sys_call+0x2889/0x3000 [ 146.131431][ T8692] do_syscall_64+0xd8/0x2a0 [ 146.131462][ T8692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.131488][ T8692] RIP: 0033:0x7f6d6fffe15c [ 146.131502][ T8692] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.131519][ T8692] RSP: 002b:00007f6d6ea67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.131555][ T8692] RAX: ffffffffffffffda RBX: 00007f6d70255fa0 RCX: 00007f6d6fffe15c [ 146.131570][ T8692] RDX: 000000000000000f RSI: 00007f6d6ea670a0 RDI: 0000000000000003 [ 146.131598][ T8692] RBP: 00007f6d6ea67090 R08: 0000000000000000 R09: 0000000000000000 [ 146.131612][ T8692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.131639][ T8692] R13: 00007f6d70256038 R14: 00007f6d70255fa0 R15: 00007ffd613d2c98 [ 146.131702][ T8692] [ 146.204477][ T8702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1871'. [ 146.290954][ T8707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8707 comm=syz.1.1871 [ 146.459153][ T8714] SELinux: Context Ü is not valid (left unmapped). [ 146.955142][ T8727] syz.3.1877 uses obsolete (PF_INET,SOCK_PACKET) [ 147.377090][ T1640] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.415779][ T8738] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1880'. [ 147.467899][ T8738] hsr_slave_0: left promiscuous mode [ 147.481516][ T8738] hsr_slave_1: left promiscuous mode [ 147.565651][ T8759] syzkaller0: entered promiscuous mode [ 147.571241][ T8759] syzkaller0: entered allmulticast mode [ 147.821739][ T8771] set_capacity_and_notify: 6 callbacks suppressed [ 147.821756][ T8771] loop5: detected capacity change from 0 to 128 [ 148.344015][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.352716][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.414431][ T8790] syzkaller0: entered promiscuous mode [ 148.419981][ T8790] syzkaller0: entered allmulticast mode [ 148.427967][ T8790] xt_SECMARK: invalid mode: 2 [ 148.436631][ T8790] loop1: detected capacity change from 0 to 1024 [ 148.460758][ T8790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.473340][ T8790] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.577192][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.641806][ T8801] loop1: detected capacity change from 0 to 512 [ 148.651850][ T8801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.664505][ T8801] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.675447][ T8801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.752532][ T8811] loop1: detected capacity change from 0 to 128 [ 148.936887][ T8820] ip6gre1: entered promiscuous mode [ 148.942216][ T8820] ip6gre1: entered allmulticast mode [ 148.953027][ T8820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8820 comm=syz.4.1909 [ 148.966104][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1909'. [ 149.030991][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 149.306690][ T8839] FAULT_INJECTION: forcing a failure. [ 149.306690][ T8839] name failslab, interval 1, probability 0, space 0, times 0 [ 149.319338][ T8839] CPU: 1 UID: 0 PID: 8839 Comm: syz.2.1915 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.319366][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.319430][ T8839] Call Trace: [ 149.319435][ T8839] [ 149.319443][ T8839] __dump_stack+0x1d/0x30 [ 149.319470][ T8839] dump_stack_lvl+0xe8/0x140 [ 149.319494][ T8839] dump_stack+0x15/0x1b [ 149.319510][ T8839] should_fail_ex+0x265/0x280 [ 149.319593][ T8839] should_failslab+0x8c/0xb0 [ 149.319626][ T8839] kmem_cache_alloc_noprof+0x50/0x4a0 [ 149.319670][ T8839] ? skb_clone+0x151/0x1f0 [ 149.319697][ T8839] skb_clone+0x151/0x1f0 [ 149.319724][ T8839] __netlink_deliver_tap+0x2c9/0x500 [ 149.319835][ T8839] netlink_unicast+0x66b/0x690 [ 149.319863][ T8839] netlink_sendmsg+0x58b/0x6b0 [ 149.319892][ T8839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.319917][ T8839] __sock_sendmsg+0x145/0x180 [ 149.319989][ T8839] ____sys_sendmsg+0x31e/0x4a0 [ 149.320018][ T8839] ___sys_sendmsg+0x17b/0x1d0 [ 149.320060][ T8839] __x64_sys_sendmsg+0xd4/0x160 [ 149.320084][ T8839] x64_sys_call+0x17ba/0x3000 [ 149.320164][ T8839] do_syscall_64+0xd8/0x2a0 [ 149.320197][ T8839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.320261][ T8839] RIP: 0033:0x7fb6c90ff749 [ 149.320277][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.320318][ T8839] RSP: 002b:00007fb6c7b5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.320406][ T8839] RAX: ffffffffffffffda RBX: 00007fb6c9355fa0 RCX: 00007fb6c90ff749 [ 149.320421][ T8839] RDX: 0000000004000010 RSI: 0000200000000d80 RDI: 0000000000000003 [ 149.320436][ T8839] RBP: 00007fb6c7b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 149.320451][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.320465][ T8839] R13: 00007fb6c9356038 R14: 00007fb6c9355fa0 R15: 00007ffee9a4ffd8 [ 149.320485][ T8839] [ 149.534589][ T4085] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.572541][ T8842] syz.1.1911 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 149.682948][ T8847] SELinux: failed to load policy [ 149.692169][ T8849] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 149.723956][ T8849] SELinux: failed to load policy [ 149.793874][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 149.793940][ T29] audit: type=1400 audit(1764903258.458:2072): avc: denied { ioctl } for pid=8859 comm="syz.3.1922" path="socket:[27706]" dev="sockfs" ino=27706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.892539][ T8871] loop5: detected capacity change from 0 to 512 [ 149.928823][ T29] audit: type=1400 audit(1764903258.498:2073): avc: denied { search } for pid=8863 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.951005][ T29] audit: type=1400 audit(1764903258.498:2074): avc: denied { search } for pid=8863 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.973796][ T29] audit: type=1400 audit(1764903258.498:2075): avc: denied { search } for pid=8863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.996854][ T29] audit: type=1400 audit(1764903258.498:2076): avc: denied { search } for pid=8863 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.020178][ T29] audit: type=1400 audit(1764903258.508:2077): avc: denied { read open } for pid=8864 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.045590][ T29] audit: type=1400 audit(1764903258.508:2078): avc: denied { getattr } for pid=8864 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.070883][ T29] audit: type=1400 audit(1764903258.508:2079): avc: denied { getattr } for pid=8864 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.097167][ T29] audit: type=1400 audit(1764903258.528:2080): avc: denied { read } for pid=8866 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.119058][ T29] audit: type=1400 audit(1764903258.528:2081): avc: denied { open } for pid=8866 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.170093][ T8871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.195781][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 150.222481][ T8871] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.236174][ T8871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.539752][ T52] Bluetooth: hci2: Frame reassembly failed (-84) [ 150.724426][ T8928] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1933'. [ 150.733804][ T8921] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1933'. [ 151.518857][ T8983] infiniband syz!: set active [ 151.523582][ T8983] infiniband syz!: added team_slave_0 [ 151.538224][ T8983] RDS/IB: syz!: added [ 151.543187][ T8983] smc: adding ib device syz! with port count 1 [ 151.549815][ T8983] smc: ib device syz! port 1 has no pnetid [ 152.127470][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.207422][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 152.207449][ T4085] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 152.488659][ T9020] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1948'. [ 152.640719][ T3500] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 153.125014][ T9034] loop2: detected capacity change from 0 to 128 [ 153.328078][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.610084][ T9059] SELinux: failed to load policy [ 154.628841][ T9069] loop2: detected capacity change from 0 to 512 [ 154.642987][ T9069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.727877][ T9076] loop1: detected capacity change from 0 to 512 [ 154.746837][ T9069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.764714][ T9069] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.789111][ T9076] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1969: EA inode hash validation failed [ 154.802709][ T9076] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 154.817862][ T9076] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1969: corrupted inode contents [ 154.831585][ T9076] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.1969: mark_inode_dirty error [ 154.930509][ T9076] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1969: corrupted inode contents [ 154.958274][ T9076] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.1969: mark_inode_dirty error [ 154.971671][ T9076] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.1969: mark inode dirty (error -117) [ 154.985775][ T9076] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 155.026039][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 155.026052][ T29] audit: type=1400 audit(1764903263.691:2132): avc: denied { ioctl } for pid=9066 comm="syz.2.1964" path="/454/bus/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.058987][ T9069] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1964: iget: bad i_size value: 2533274857506816 [ 155.072037][ T9076] EXT4-fs (loop1): 1 orphan inode deleted [ 155.089749][ T9076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.122244][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.138088][ T29] audit: type=1326 audit(1764903263.801:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d6fffdf90 code=0x7ffc0000 [ 155.161508][ T29] audit: type=1326 audit(1764903263.801:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d6fffdf90 code=0x7ffc0000 [ 155.185054][ T29] audit: type=1326 audit(1764903263.801:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6ffff749 code=0x7ffc0000 [ 155.208480][ T29] audit: type=1326 audit(1764903263.811:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6ffff749 code=0x7ffc0000 [ 155.235313][ T29] audit: type=1326 audit(1764903263.831:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d6ffff749 code=0x7ffc0000 [ 155.258754][ T29] audit: type=1326 audit(1764903263.831:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6ffff749 code=0x7ffc0000 [ 155.282163][ T29] audit: type=1326 audit(1764903263.831:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6d6ffff749 code=0x7ffc0000 [ 155.305544][ T29] audit: type=1326 audit(1764903263.831:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6ffff749 code=0x7ffc0000 [ 155.328962][ T29] audit: type=1326 audit(1764903263.831:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.1.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d6ffff749 code=0x7ffc0000 [ 155.406012][ T9098] blktrace: Concurrent blktraces are not allowed on sg0 [ 155.406649][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 155.419041][ T4085] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 155.533968][ T9105] loop3: detected capacity change from 0 to 512 [ 155.546079][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.574240][ T9108] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 155.590990][ T9108] SELinux: failed to load policy [ 155.605336][ T9105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.653640][ T9114] ip6gre1: entered promiscuous mode [ 155.658876][ T9114] ip6gre1: entered allmulticast mode [ 155.672702][ T9105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.686729][ T9118] ip6gre1: entered promiscuous mode [ 155.691930][ T9118] ip6gre1: entered allmulticast mode [ 155.701186][ T9114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9114 comm=syz.2.1980 [ 155.714599][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 155.719681][ T9105] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.725310][ T9123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9123 comm=syz.4.1982 [ 155.795722][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1982'. [ 155.829489][ T9105] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1976: iget: bad i_size value: 2533274857506816 [ 155.914406][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.122855][ T9136] loop3: detected capacity change from 0 to 512 [ 156.156562][ T9136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.191372][ T9136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.193311][ T9113] net_ratelimit: 94 callbacks suppressed [ 156.193374][ T9113] Set syz1 is full, maxelem 65536 reached [ 156.204997][ T9136] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.263869][ T9142] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.321698][ T9145] lo speed is unknown, defaulting to 1000 [ 156.338196][ T9145] lo speed is unknown, defaulting to 1000 [ 156.358012][ T9145] lo speed is unknown, defaulting to 1000 [ 156.369839][ T9145] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.377428][ T9145] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.380592][ T9136] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1987: iget: bad i_size value: 2533274857506816 [ 156.394026][ T9145] lo speed is unknown, defaulting to 1000 [ 156.403110][ T9145] lo speed is unknown, defaulting to 1000 [ 156.409402][ T9145] lo speed is unknown, defaulting to 1000 [ 156.423244][ T9142] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.554936][ T9145] lo speed is unknown, defaulting to 1000 [ 156.567697][ T9154] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 156.604113][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.619321][ T9145] lo speed is unknown, defaulting to 1000 [ 156.635764][ T9154] SELinux: failed to load policy [ 156.673609][ T9148] smc: removing ib device syz! [ 156.720236][ T9142] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.845016][ T9142] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.871212][ T9161] tipc: Started in network mode [ 156.876142][ T9161] tipc: Node identity ac14140f, cluster identity 4711 [ 156.883520][ T9161] tipc: New replicast peer: 255.255.255.255 [ 156.889577][ T9161] tipc: Enabled bearer , priority 10 [ 156.914765][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.935121][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.971969][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.988966][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.001647][ T9171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.014114][ T9173] loop5: detected capacity change from 0 to 512 [ 157.044067][ T9173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.070115][ T9173] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.081597][ T9173] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.093426][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 157.105752][ T9182] FAULT_INJECTION: forcing a failure. [ 157.105752][ T9182] name failslab, interval 1, probability 0, space 0, times 0 [ 157.118425][ T9182] CPU: 0 UID: 0 PID: 9182 Comm: syz.2.2002 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.118451][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.118463][ T9182] Call Trace: [ 157.118469][ T9182] [ 157.118475][ T9182] __dump_stack+0x1d/0x30 [ 157.118536][ T9182] dump_stack_lvl+0xe8/0x140 [ 157.118611][ T9182] dump_stack+0x15/0x1b [ 157.118630][ T9182] should_fail_ex+0x265/0x280 [ 157.118663][ T9182] ? audit_log_d_path+0x8d/0x150 [ 157.118734][ T9182] should_failslab+0x8c/0xb0 [ 157.118768][ T9182] __kmalloc_cache_noprof+0x4c/0x4c0 [ 157.118791][ T9182] audit_log_d_path+0x8d/0x150 [ 157.118812][ T9182] audit_log_d_path_exe+0x42/0x70 [ 157.118895][ T9182] audit_log_task+0x1e9/0x250 [ 157.119015][ T9182] ? kstrtouint+0x76/0xc0 [ 157.119043][ T9182] audit_seccomp+0x61/0x100 [ 157.119095][ T9182] ? __seccomp_filter+0x832/0x1260 [ 157.119128][ T9182] __seccomp_filter+0x843/0x1260 [ 157.119155][ T9182] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.119189][ T9182] ? vfs_write+0x7e8/0x960 [ 157.119271][ T9182] ? __rcu_read_unlock+0x4f/0x70 [ 157.119291][ T9182] ? __fget_files+0x184/0x1c0 [ 157.119312][ T9182] __secure_computing+0x82/0x150 [ 157.119335][ T9182] syscall_trace_enter+0xcf/0x1e0 [ 157.119366][ T9182] do_syscall_64+0xb2/0x2a0 [ 157.119400][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.119422][ T9182] RIP: 0033:0x7fb6c90ff749 [ 157.119436][ T9182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.119469][ T9182] RSP: 002b:00007fb6c7b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 157.119489][ T9182] RAX: ffffffffffffffda RBX: 00007fb6c9355fa0 RCX: 00007fb6c90ff749 [ 157.119501][ T9182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 157.119513][ T9182] RBP: 00007fb6c7b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 157.119524][ T9182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.119537][ T9182] R13: 00007fb6c9356038 R14: 00007fb6c9355fa0 R15: 00007ffee9a4ffd8 [ 157.119556][ T9182] [ 157.566030][ T9201] tmpfs: Bad value for 'mpol' [ 157.582776][ T9201] netlink: 'syz.2.2008': attribute type 46 has an invalid length. [ 157.590664][ T9201] netlink: 'syz.2.2008': attribute type 19 has an invalid length. [ 157.598503][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 157.957675][ T9062] tipc: Node number set to 2886997007 [ 158.535510][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 158.543495][ T4085] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 158.605870][ T9222] ip6gre1: entered promiscuous mode [ 158.611138][ T9222] ip6gre1: entered allmulticast mode [ 158.619537][ T9222] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9222 comm=syz.2.2014 [ 158.632469][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 158.650730][ T9226] loop4: detected capacity change from 0 to 512 [ 158.668303][ T9228] ip6gre1: entered promiscuous mode [ 158.673536][ T9228] ip6gre1: entered allmulticast mode [ 158.684717][ T9228] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9228 comm=syz.1.2016 [ 158.724671][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 158.734170][ T9226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.774132][ T9226] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.811551][ T9226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.985649][ T9245] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.034047][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 159.136768][ T9245] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.157318][ T9259] team0: Port device team_slave_1 removed [ 159.190309][ T9245] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.316108][ T9245] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.364925][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.405091][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.430739][ T9264] ip6gre1: entered promiscuous mode [ 159.435998][ T9264] ip6gre1: entered allmulticast mode [ 159.471414][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.492717][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.498787][ T9264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9264 comm=syz.5.2027 [ 159.520640][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2027'. [ 159.542774][ T9268] loop2: detected capacity change from 0 to 512 [ 159.561934][ T9268] ext4: Unknown parameter 'fsuuid' [ 159.863994][ T9279] lo speed is unknown, defaulting to 1000 [ 160.044511][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.073201][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.094268][ T9285] netlink: 'syz.4.2034': attribute type 1 has an invalid length. [ 160.101987][ T9285] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2034'. [ 160.111503][ T9284] netlink: 'syz.4.2034': attribute type 1 has an invalid length. [ 160.119243][ T9284] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2034'. [ 160.140326][ T9290] FAULT_INJECTION: forcing a failure. [ 160.140326][ T9290] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 160.153659][ T9290] CPU: 0 UID: 0 PID: 9290 Comm: syz.1.2036 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.153728][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.153739][ T9290] Call Trace: [ 160.153745][ T9290] [ 160.153753][ T9290] __dump_stack+0x1d/0x30 [ 160.153839][ T9290] dump_stack_lvl+0xe8/0x140 [ 160.153863][ T9290] dump_stack+0x15/0x1b [ 160.153883][ T9290] should_fail_ex+0x265/0x280 [ 160.153915][ T9290] should_fail_alloc_page+0xf2/0x100 [ 160.153946][ T9290] __alloc_frozen_pages_noprof+0xff/0x360 [ 160.153977][ T9290] alloc_pages_mpol+0xb3/0x260 [ 160.154003][ T9290] alloc_pages_noprof+0x90/0x130 [ 160.154072][ T9290] get_zeroed_page_noprof+0x1a/0x40 [ 160.154093][ T9290] write_ldt+0x379/0x4b0 [ 160.154141][ T9290] __se_sys_modify_ldt+0x6c/0x270 [ 160.154226][ T9290] x64_sys_call+0x2d90/0x3000 [ 160.154250][ T9290] do_syscall_64+0xd8/0x2a0 [ 160.154282][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.154302][ T9290] RIP: 0033:0x7f6d6ffff749 [ 160.154342][ T9290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.154360][ T9290] RSP: 002b:00007f6d6ea67038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 160.154378][ T9290] RAX: ffffffffffffffda RBX: 00007f6d70255fa0 RCX: 00007f6d6ffff749 [ 160.154393][ T9290] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000011 [ 160.154407][ T9290] RBP: 00007f6d6ea67090 R08: 0000000000000000 R09: 0000000000000000 [ 160.154453][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.154464][ T9290] R13: 00007f6d70256038 R14: 00007f6d70255fa0 R15: 00007ffd613d2c98 [ 160.154487][ T9290] [ 160.504911][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 160.504925][ T29] audit: type=1400 audit(1764903269.173:2338): avc: denied { read } for pid=9300 comm="syz.4.2040" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.505424][ T9302] sd 0:0:1:0: device reset [ 160.559838][ T9308] loop1: detected capacity change from 0 to 512 [ 160.573550][ T9308] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.585718][ T9308] EXT4-fs (loop1): 1 truncate cleaned up [ 160.591889][ T9308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.774619][ T9316] loop5: detected capacity change from 0 to 512 [ 160.781104][ T29] audit: type=1326 audit(1764903269.434:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 160.804573][ T29] audit: type=1326 audit(1764903269.434:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 160.827951][ T29] audit: type=1326 audit(1764903269.434:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 160.851413][ T29] audit: type=1326 audit(1764903269.434:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3944f7f783 code=0x7ffc0000 [ 160.874781][ T29] audit: type=1326 audit(1764903269.434:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3944f7e1ff code=0x7ffc0000 [ 160.898083][ T29] audit: type=1326 audit(1764903269.444:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3944f7f7d7 code=0x7ffc0000 [ 160.921419][ T29] audit: type=1326 audit(1764903269.444:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3944f7df90 code=0x7ffc0000 [ 160.943194][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 160.944870][ T29] audit: type=1326 audit(1764903269.444:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3944f7f34b code=0x7ffc0000 [ 160.945393][ T29] audit: type=1326 audit(1764903269.504:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9315 comm="syz.5.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3944f7e3aa code=0x7ffc0000 [ 161.000655][ T9316] EXT4-fs (loop5): orphan cleanup on readonly fs [ 161.007624][ T9316] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2043: bad orphan inode 13 [ 161.027748][ T9316] ext4_test_bit(bit=12, block=18) = 1 [ 161.033172][ T9316] is_bad_inode(inode)=0 [ 161.037313][ T9316] NEXT_ORPHAN(inode)=2130706432 [ 161.042155][ T9316] max_ino=32 [ 161.045368][ T9316] i_nlink=1 [ 161.074137][ T9308] loop1: detected capacity change from 512 to 64 [ 161.082251][ T9316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.136897][ T9316] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2043: deleted inode referenced: 12 [ 161.152831][ T9316] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2043: deleted inode referenced: 12 [ 161.165536][ T9316] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2043: deleted inode referenced: 12 [ 161.214020][ T9316] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2043: deleted inode referenced: 12 [ 161.252842][ T3315] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /367/file2: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 161.295406][ T3315] EXT4-fs (loop1): Remounting filesystem read-only [ 161.321705][ T9320] loop2: detected capacity change from 0 to 512 [ 161.344090][ T8300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.361367][ T9320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.453027][ T9320] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.507025][ T9320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.566628][ T9324] SELinux: failed to load policy [ 161.683473][ T9333] loop3: detected capacity change from 0 to 128 [ 161.933321][ T9337] loop2: detected capacity change from 0 to 2048 [ 161.978985][ T52] bio_check_eod: 206 callbacks suppressed [ 161.979016][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.979016][ T52] loop3: rw=1, sector=153, nr_sectors = 16 limit=128 [ 162.019569][ T3535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.070897][ T9337] unsupported nla_type 52263 [ 162.081119][ T52] kworker/u8:3: attempt to access beyond end of device [ 162.081119][ T52] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 162.121761][ T9302] syz.4.2040 (9302) used greatest stack depth: 7088 bytes left [ 162.146315][ T52] kworker/u8:3: attempt to access beyond end of device [ 162.146315][ T52] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 162.161382][ T52] kworker/u8:3: attempt to access beyond end of device [ 162.161382][ T52] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 162.204572][ T9342] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 162.204572][ T9342] program syz.4.2054 not setting count and/or reply_len properly [ 162.214885][ T52] kworker/u8:3: attempt to access beyond end of device [ 162.214885][ T52] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 162.239434][ T52] kworker/u8:3: attempt to access beyond end of device [ 162.239434][ T52] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 162.254022][ T52] kworker/u8:3: attempt to access beyond end of device [ 162.254022][ T52] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 162.267659][ T52] kworker/u8:3: attempt to access beyond end of device [ 162.267659][ T52] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 162.289838][ T52] kworker/u8:3: attempt to access beyond end of device [ 162.289838][ T52] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 162.306394][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'. [ 162.316990][ T52] kworker/u8:3: attempt to access beyond end of device [ 162.316990][ T52] loop3: rw=1, sector=305, nr_sectors = 8 limit=128 [ 162.384664][ T52] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.433862][ T52] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.567924][ T9363] lo speed is unknown, defaulting to 1000 [ 162.581861][ T9362] SELinux: failed to load policy [ 162.608939][ T52] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.657379][ T52] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.681974][ T9381] blktrace: Concurrent blktraces are not allowed on sg0 [ 162.685426][ T9363] chnl_net:caif_netlink_parms(): no params data found [ 162.793342][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.800413][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.810479][ T9363] bridge_slave_0: entered allmulticast mode [ 162.817457][ T9363] bridge_slave_0: entered promiscuous mode [ 162.835396][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.842507][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.849830][ T9363] bridge_slave_1: entered allmulticast mode [ 162.857003][ T9363] bridge_slave_1: entered promiscuous mode [ 162.872410][ T52] bridge_slave_1: left allmulticast mode [ 162.878068][ T52] bridge_slave_1: left promiscuous mode [ 162.883831][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.892262][ T52] bridge_slave_0: left allmulticast mode [ 162.897922][ T52] bridge_slave_0: left promiscuous mode [ 162.903777][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.229176][ T9394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=9394 comm=syz.4.2065 [ 163.244277][ T9394] loop4: detected capacity change from 0 to 512 [ 163.250966][ T9394] EXT4-fs: Ignoring removed bh option [ 163.257198][ T9394] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.266307][ T9394] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 163.275283][ T9394] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 163.284684][ T9394] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 163.296177][ T9394] 9pnet_fd: Insufficient options for proto=fd [ 163.354414][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.364282][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.373587][ T52] bond0 (unregistering): Released all slaves [ 163.382413][ T9397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 163.404413][ T9398] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2065'. [ 163.406118][ T9363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.416849][ T9363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.427701][ T9391] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2065'. [ 163.471128][ T9400] loop5: detected capacity change from 0 to 512 [ 163.477428][ T52] tipc: Left network mode [ 163.499341][ T52] hsr_slave_0: left promiscuous mode [ 163.504888][ T52] hsr_slave_1: left promiscuous mode [ 163.505266][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.518131][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.519738][ T9400] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.537567][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.537582][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.554377][ T52] veth1_macvtap: left promiscuous mode [ 163.559912][ T52] veth0_macvtap: left promiscuous mode [ 163.577040][ T52] veth1_vlan: left promiscuous mode [ 163.577087][ T52] veth0_vlan: left promiscuous mode [ 163.741439][ T3304] loop3: unable to read partition table [ 163.741462][ T3304] loop3: partition table beyond EOD, truncated [ 163.795153][ T9402] loop3: unable to read partition table [ 163.795335][ T9402] loop3: partition table beyond EOD, truncated [ 163.795350][ T9402] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 163.815682][ T9415] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 163.815682][ T9415] The task syz.5.2070 (9415) triggered the difference, watch for misbehavior. [ 164.024680][ T9417] SELinux: failed to load policy [ 164.130907][ T52] team0 (unregistering): Port device team_slave_1 removed [ 164.140270][ T52] team0 (unregistering): Port device team_slave_0 removed [ 164.173971][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2072'. [ 164.184556][ T9363] team0: Port device team_slave_0 added [ 164.187857][ T9363] team0: Port device team_slave_1 added [ 164.223457][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.230453][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.230483][ T9363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.231722][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.273892][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.273930][ T9363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.330137][ T9363] hsr_slave_0: entered promiscuous mode [ 164.330714][ T9363] hsr_slave_1: entered promiscuous mode [ 164.331109][ T9363] debugfs: 'hsr0' already exists in 'hsr' [ 164.331120][ T9363] Cannot create hsr debugfs directory [ 164.428327][ T9363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.516833][ T9363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.519487][ T9363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.528817][ T9363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.539229][ T52] IPVS: stop unused estimator thread 0... [ 164.622740][ T9363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.635882][ T9363] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.691572][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.698625][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.713178][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.720247][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.738310][ T9463] xt_hashlimit: max too large, truncated to 1048576 [ 164.745852][ T9463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.877363][ T9363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.887760][ T9363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.277758][ T9363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.406250][ T9509] set_capacity_and_notify: 1 callbacks suppressed [ 165.406273][ T9509] loop3: detected capacity change from 0 to 128 [ 165.840746][ T9525] FAULT_INJECTION: forcing a failure. [ 165.840746][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 165.853409][ T9525] CPU: 1 UID: 0 PID: 9525 Comm: syz.3.2090 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.853493][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.853507][ T9525] Call Trace: [ 165.853553][ T9525] [ 165.853561][ T9525] __dump_stack+0x1d/0x30 [ 165.853582][ T9525] dump_stack_lvl+0xe8/0x140 [ 165.853604][ T9525] dump_stack+0x15/0x1b [ 165.853703][ T9525] should_fail_ex+0x265/0x280 [ 165.853739][ T9525] should_failslab+0x8c/0xb0 [ 165.853775][ T9525] kmem_cache_alloc_noprof+0x50/0x4a0 [ 165.853843][ T9525] ? getname_kernel+0x3c/0x1f0 [ 165.853861][ T9525] ? should_fail_ex+0xdb/0x280 [ 165.853917][ T9525] getname_kernel+0x3c/0x1f0 [ 165.853939][ T9525] kern_path+0x23/0x130 [ 165.853965][ T9525] bpf_uprobe_multi_link_attach+0x232/0x900 [ 165.854050][ T9525] ? __rcu_read_unlock+0x4f/0x70 [ 165.854109][ T9525] ? __fget_files+0x184/0x1c0 [ 165.854128][ T9525] link_create+0x680/0x6e0 [ 165.854149][ T9525] __sys_bpf+0x628/0x7c0 [ 165.854250][ T9525] __x64_sys_bpf+0x41/0x50 [ 165.854284][ T9525] x64_sys_call+0x28e1/0x3000 [ 165.854308][ T9525] do_syscall_64+0xd8/0x2a0 [ 165.854375][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.854400][ T9525] RIP: 0033:0x7f49261ef749 [ 165.854418][ T9525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.854438][ T9525] RSP: 002b:00007f4924c4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 165.854498][ T9525] RAX: ffffffffffffffda RBX: 00007f4926445fa0 RCX: 00007f49261ef749 [ 165.854541][ T9525] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 165.854556][ T9525] RBP: 00007f4924c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 165.854569][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.854584][ T9525] R13: 00007f4926446038 R14: 00007f4926445fa0 R15: 00007ffe98a49b98 [ 165.854603][ T9525] [ 165.914578][ T9363] veth0_vlan: entered promiscuous mode [ 166.160192][ T9363] veth1_vlan: entered promiscuous mode [ 166.176087][ T9363] veth0_macvtap: entered promiscuous mode [ 166.183502][ T9363] veth1_macvtap: entered promiscuous mode [ 166.189898][ T9545] SELinux: policydb string SE Li‚× does not match my string SE Linux [ 166.194645][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.222723][ T9545] SELinux: failed to load policy [ 166.251716][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.272476][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.301072][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.309820][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 166.309832][ T29] audit: type=1400 audit(1764903274.976:2501): avc: denied { mounton } for pid=9363 comm="syz-executor" path="/root/syzkaller.953pXW/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 166.340372][ T29] audit: type=1400 audit(1764903274.976:2502): avc: denied { mount } for pid=9363 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.362748][ T29] audit: type=1400 audit(1764903274.976:2503): avc: denied { mount } for pid=9363 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 166.381364][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.384856][ T29] audit: type=1400 audit(1764903274.976:2504): avc: denied { mounton } for pid=9363 comm="syz-executor" path="/root/syzkaller.953pXW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 166.403649][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.420370][ T29] audit: type=1400 audit(1764903274.976:2505): avc: denied { mounton } for pid=9363 comm="syz-executor" path="/root/syzkaller.953pXW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 166.458306][ T29] audit: type=1400 audit(1764903275.036:2506): avc: denied { mounton } for pid=9363 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 166.481230][ T29] audit: type=1400 audit(1764903275.036:2507): avc: denied { mount } for pid=9363 comm="syz-executor" name="/" dev="gadgetfs" ino=5145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 166.512213][ T9560] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9560 comm=syz.6.2058 [ 166.550443][ T29] audit: type=1400 audit(1764903275.216:2508): avc: denied { read write } for pid=9559 comm="syz.6.2058" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 166.574192][ T29] audit: type=1400 audit(1764903275.216:2509): avc: denied { open } for pid=9559 comm="syz.6.2058" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 166.597820][ T29] audit: type=1400 audit(1764903275.216:2510): avc: denied { ioctl } for pid=9559 comm="syz.6.2058" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 167.393572][ T9583] loop6: detected capacity change from 0 to 512 [ 167.477581][ T9583] EXT4-fs mount: 6 callbacks suppressed [ 167.477595][ T9583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.535626][ T9589] ip6gre1: entered promiscuous mode [ 167.540871][ T9589] ip6gre1: entered allmulticast mode [ 167.550172][ T9583] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.597540][ T9583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.611322][ T9589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9589 comm=syz.3.2100 [ 167.649980][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2100'. [ 167.778820][ T9601] loop2: detected capacity change from 0 to 128 [ 167.809307][ T9601] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.840125][ T9599] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.881726][ T9601] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.950382][ T9601] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.2104: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 167.989311][ T9601] EXT4-fs (loop2): Remounting filesystem read-only [ 168.032770][ T9612] FAULT_INJECTION: forcing a failure. [ 168.032770][ T9612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.046081][ T9612] CPU: 1 UID: 0 PID: 9612 Comm: syz.4.2107 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.046110][ T9612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.046124][ T9612] Call Trace: [ 168.046131][ T9612] [ 168.046139][ T9612] __dump_stack+0x1d/0x30 [ 168.046222][ T9612] dump_stack_lvl+0xe8/0x140 [ 168.046245][ T9612] dump_stack+0x15/0x1b [ 168.046266][ T9612] should_fail_ex+0x265/0x280 [ 168.046303][ T9612] should_fail_alloc_page+0xf2/0x100 [ 168.046481][ T9612] __alloc_frozen_pages_noprof+0xff/0x360 [ 168.046506][ T9612] alloc_pages_mpol+0xb3/0x260 [ 168.046530][ T9612] alloc_pages_noprof+0x90/0x130 [ 168.046604][ T9612] get_free_pages_noprof+0xc/0x40 [ 168.046629][ T9612] selinux_genfs_get_sid+0x33/0x180 [ 168.046679][ T9612] inode_doinit_with_dentry+0x5fd/0x7a0 [ 168.046725][ T9612] selinux_d_instantiate+0x27/0x40 [ 168.046759][ T9612] security_d_instantiate+0x7a/0xa0 [ 168.046785][ T9612] d_instantiate+0x3f/0x80 [ 168.046809][ T9612] __debugfs_create_file+0x1c1/0x330 [ 168.046879][ T9612] debugfs_create_file_full+0x3f/0x60 [ 168.046908][ T9612] ? __pfx_macsec_setup+0x10/0x10 [ 168.046948][ T9612] ref_tracker_dir_debugfs+0x100/0x1e0 [ 168.047094][ T9612] alloc_netdev_mqs+0x1a7/0xa40 [ 168.047119][ T9612] rtnl_create_link+0x239/0x6e0 [ 168.047144][ T9612] rtnl_newlink_create+0x14c/0x620 [ 168.047195][ T9612] ? security_capable+0x83/0x90 [ 168.047230][ T9612] ? netlink_ns_capable+0x86/0xa0 [ 168.047266][ T9612] rtnl_newlink+0xf5b/0x1360 [ 168.047391][ T9612] ? __rcu_read_unlock+0x34/0x70 [ 168.047408][ T9612] ? bpf_trace_run3+0x12c/0x1e0 [ 168.047433][ T9612] ? __memcg_slab_free_hook+0x135/0x230 [ 168.047475][ T9612] ? __rcu_read_unlock+0x4f/0x70 [ 168.047492][ T9612] ? avc_has_perm_noaudit+0xab/0x130 [ 168.047575][ T9612] ? cred_has_capability+0x210/0x280 [ 168.047600][ T9612] ? selinux_capable+0x31/0x40 [ 168.047705][ T9612] ? security_capable+0x83/0x90 [ 168.047727][ T9612] ? ns_capable+0x7d/0xb0 [ 168.047751][ T9612] ? __pfx_rtnl_newlink+0x10/0x10 [ 168.047776][ T9612] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 168.047809][ T9612] netlink_rcv_skb+0x123/0x220 [ 168.047831][ T9612] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.047859][ T9612] rtnetlink_rcv+0x1c/0x30 [ 168.047925][ T9612] netlink_unicast+0x5c0/0x690 [ 168.047947][ T9612] netlink_sendmsg+0x58b/0x6b0 [ 168.047972][ T9612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.048061][ T9612] __sock_sendmsg+0x145/0x180 [ 168.048088][ T9612] ____sys_sendmsg+0x31e/0x4a0 [ 168.048118][ T9612] ___sys_sendmsg+0x17b/0x1d0 [ 168.048147][ T9612] __x64_sys_sendmsg+0xd4/0x160 [ 168.048171][ T9612] x64_sys_call+0x17ba/0x3000 [ 168.048221][ T9612] do_syscall_64+0xd8/0x2a0 [ 168.048299][ T9612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.048318][ T9612] RIP: 0033:0x7f0cd209f749 [ 168.048336][ T9612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.048352][ T9612] RSP: 002b:00007f0cd0b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.048474][ T9612] RAX: ffffffffffffffda RBX: 00007f0cd22f5fa0 RCX: 00007f0cd209f749 [ 168.048485][ T9612] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 168.048517][ T9612] RBP: 00007f0cd0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 168.048528][ T9612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.048539][ T9612] R13: 00007f0cd22f6038 R14: 00007f0cd22f5fa0 R15: 00007fff762a7918 [ 168.048555][ T9612] [ 168.390821][ T9612] erspan0: entered promiscuous mode [ 168.396762][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.489149][ T9621] loop2: detected capacity change from 0 to 512 [ 168.496163][ T9623] erspan0: entered promiscuous mode [ 168.505727][ T9625] ip6gre1: entered promiscuous mode [ 168.511008][ T9625] ip6gre1: entered allmulticast mode [ 168.549516][ T9625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9625 comm=syz.5.2112 [ 168.589777][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2112'. [ 168.637025][ T9621] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 168.644940][ T9621] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 168.659368][ T9621] System zones: 0-1, 15-15, 18-18, 34-34 [ 168.665184][ T9621] EXT4-fs (loop2): orphan cleanup on readonly fs [ 168.673220][ T9621] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2108: Failed to acquire dquot type 1 [ 168.733356][ T9633] blktrace: Concurrent blktraces are not allowed on sg0 [ 168.771738][ T9621] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2108: bg 0: block 40: padding at end of block bitmap is not set [ 168.938274][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2118'. [ 169.038345][ T9621] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 169.083706][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 169.107200][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 169.109462][ T9656] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2118'. [ 169.116202][ T9655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2120'. [ 169.116220][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 169.116243][ T9655] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2120'. [ 169.123468][ T9621] EXT4-fs (loop2): 1 truncate cleaned up [ 169.159496][ T9655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2120'. [ 169.161430][ T9621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.221329][ T9662] FAULT_INJECTION: forcing a failure. [ 169.221329][ T9662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.234557][ T9662] CPU: 0 UID: 0 PID: 9662 Comm: syz.3.2122 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.234664][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.234678][ T9662] Call Trace: [ 169.234684][ T9662] [ 169.234712][ T9662] __dump_stack+0x1d/0x30 [ 169.234738][ T9662] dump_stack_lvl+0xe8/0x140 [ 169.234763][ T9662] dump_stack+0x15/0x1b [ 169.234784][ T9662] should_fail_ex+0x265/0x280 [ 169.234821][ T9662] should_fail+0xb/0x20 [ 169.234982][ T9662] should_fail_usercopy+0x1a/0x20 [ 169.235009][ T9662] _copy_to_user+0x20/0xa0 [ 169.235035][ T9662] simple_read_from_buffer+0xb5/0x130 [ 169.235071][ T9662] proc_fail_nth_read+0x10e/0x150 [ 169.235098][ T9662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.235124][ T9662] vfs_read+0x1a8/0x770 [ 169.235335][ T9662] ? __rcu_read_unlock+0x4f/0x70 [ 169.235359][ T9662] ? __fget_files+0x184/0x1c0 [ 169.235380][ T9662] ? mutex_lock+0x58/0x90 [ 169.235406][ T9662] ksys_read+0xda/0x1a0 [ 169.235440][ T9662] __x64_sys_read+0x40/0x50 [ 169.235485][ T9662] x64_sys_call+0x2889/0x3000 [ 169.235511][ T9662] do_syscall_64+0xd8/0x2a0 [ 169.235545][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.235570][ T9662] RIP: 0033:0x7f49261ee15c [ 169.235587][ T9662] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.235627][ T9662] RSP: 002b:00007f4924c4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.235649][ T9662] RAX: ffffffffffffffda RBX: 00007f4926445fa0 RCX: 00007f49261ee15c [ 169.235664][ T9662] RDX: 000000000000000f RSI: 00007f4924c4f0a0 RDI: 0000000000000005 [ 169.235679][ T9662] RBP: 00007f4924c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 169.235694][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.235708][ T9662] R13: 00007f4926446038 R14: 00007f4926445fa0 R15: 00007ffe98a49b98 [ 169.235822][ T9662] [ 169.492931][ T9667] lo speed is unknown, defaulting to 1000 [ 169.574410][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.676192][ T9677] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 169.686855][ T9677] SELinux: failed to load policy [ 169.742798][ T9679] lo speed is unknown, defaulting to 1000 [ 169.793332][ T1640] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.897255][ T9685] loop2: detected capacity change from 0 to 2048 [ 169.943682][ T9690] lo speed is unknown, defaulting to 1000 [ 169.960286][ T9685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.932111][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.133723][ T9727] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.172197][ T9732] netlink: 'syz.5.2138': attribute type 21 has an invalid length. [ 171.232576][ T9740] hsr_slave_0: left promiscuous mode [ 171.238670][ T9740] hsr_slave_1: left promiscuous mode [ 171.339946][ T9757] sd 0:0:1:0: device reset [ 171.877723][ T3500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.037567][ T4085] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 172.043863][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 172.506376][ T9877] loop6: detected capacity change from 0 to 512 [ 172.531289][ T9879] loop5: detected capacity change from 0 to 128 [ 172.531683][ T9877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.577883][ T9877] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.602060][ T9877] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.689675][ T9888] loop6: detected capacity change from 0 to 512 [ 172.718854][ T9888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.739445][ T9888] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.760428][ T9888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.912600][ T9904] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 172.961731][ T9908] lo speed is unknown, defaulting to 1000 [ 172.998151][ T982] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.093486][ T9915] loop4: detected capacity change from 0 to 128 [ 173.602820][ T9922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 174.026087][ T9945] loop3: detected capacity change from 0 to 1024 [ 174.034737][ T9945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.049283][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 174.049296][ T29] audit: type=1400 audit(1764903282.730:2538): avc: denied { setattr } for pid=9944 comm="syz.3.2169" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.106073][ T9947] __nla_validate_parse: 6 callbacks suppressed [ 174.106084][ T9947] netlink: 82908 bytes leftover after parsing attributes in process `syz.3.2169'. [ 174.121552][ T9947] netlink: zone id is out of range [ 174.126743][ T9947] netlink: zone id is out of range [ 174.131839][ T9947] netlink: zone id is out of range [ 174.136983][ T9947] netlink: zone id is out of range [ 174.142143][ T9947] netlink: zone id is out of range [ 174.147383][ T9947] netlink: zone id is out of range [ 174.152514][ T9947] netlink: zone id is out of range [ 174.157735][ T9947] netlink: zone id is out of range [ 174.159773][ T29] audit: type=1400 audit(1764903282.840:2539): avc: denied { relabelfrom } for pid=9944 comm="syz.3.2169" name="" dev="pipefs" ino=30779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 174.162835][ T9947] netlink: zone id is out of range [ 174.162848][ T9947] netlink: zone id is out of range [ 174.195537][ T29] audit: type=1400 audit(1764903282.840:2540): avc: denied { mac_admin } for pid=9944 comm="syz.3.2169" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.216665][ T29] audit: type=1400 audit(1764903282.840:2541): avc: denied { relabelto } for pid=9944 comm="syz.3.2169" name="" dev="pipefs" ino=30779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 174.494721][ T29] audit: type=1400 audit(1764903283.170:2542): avc: denied { ioctl } for pid=9956 comm="syz.4.2172" path="socket:[30787]" dev="sockfs" ino=30787 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.531277][ T9957] syz.4.2172: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 174.545928][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.4.2172 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.545945][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.545952][ T9957] Call Trace: [ 174.545957][ T9957] [ 174.545961][ T9957] __dump_stack+0x1d/0x30 [ 174.545976][ T9957] dump_stack_lvl+0xe8/0x140 [ 174.546031][ T9957] dump_stack+0x15/0x1b [ 174.546115][ T9957] warn_alloc+0x12b/0x1a0 [ 174.546127][ T9957] ? __schedule+0x85f/0xcd0 [ 174.546219][ T9957] ? __rcu_read_unlock+0x4f/0x70 [ 174.546246][ T9957] __vmalloc_node_range_noprof+0x9d/0xed0 [ 174.546270][ T9957] ? __futex_wait+0x1fa/0x260 [ 174.546354][ T9957] ? __pfx_futex_wake_mark+0x10/0x10 [ 174.546373][ T9957] ? __rcu_read_unlock+0x4f/0x70 [ 174.546384][ T9957] ? avc_has_perm_noaudit+0xab/0x130 [ 174.546483][ T9957] ? should_fail_ex+0x30/0x280 [ 174.546513][ T9957] ? xskq_create+0x36/0xe0 [ 174.546530][ T9957] vmalloc_user_noprof+0x7d/0xb0 [ 174.546601][ T9957] ? xskq_create+0x80/0xe0 [ 174.546616][ T9957] xskq_create+0x80/0xe0 [ 174.546688][ T9957] xsk_init_queue+0x95/0xf0 [ 174.546706][ T9957] xsk_setsockopt+0x3f5/0x640 [ 174.546756][ T9957] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.546837][ T9957] __sys_setsockopt+0x184/0x200 [ 174.546851][ T9957] __x64_sys_setsockopt+0x64/0x80 [ 174.546864][ T9957] x64_sys_call+0x21d5/0x3000 [ 174.546897][ T9957] do_syscall_64+0xd8/0x2a0 [ 174.546964][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.547040][ T9957] RIP: 0033:0x7f0cd209f749 [ 174.547049][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.547105][ T9957] RSP: 002b:00007f0cd0b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.547117][ T9957] RAX: ffffffffffffffda RBX: 00007f0cd22f5fa0 RCX: 00007f0cd209f749 [ 174.547167][ T9957] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 174.547175][ T9957] RBP: 00007f0cd2123f91 R08: 0000000000000004 R09: 0000000000000000 [ 174.547182][ T9957] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.547190][ T9957] R13: 00007f0cd22f6038 R14: 00007f0cd22f5fa0 R15: 00007fff762a7918 [ 174.547200][ T9957] [ 174.762433][ T9957] Mem-Info: [ 174.765597][ T9957] active_anon:4975 inactive_anon:11650 isolated_anon:0 [ 174.765597][ T9957] active_file:22973 inactive_file:2311 isolated_file:0 [ 174.765597][ T9957] unevictable:0 dirty:720 writeback:0 [ 174.765597][ T9957] slab_reclaimable:3463 slab_unreclaimable:15105 [ 174.765597][ T9957] mapped:29565 shmem:12020 pagetables:1379 [ 174.765597][ T9957] sec_pagetables:0 bounce:0 [ 174.765597][ T9957] kernel_misc_reclaimable:0 [ 174.765597][ T9957] free:1832351 free_pcp:34827 free_cma:0 [ 174.810993][ T9957] Node 0 active_anon:19900kB inactive_anon:46600kB active_file:91892kB inactive_file:9244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118260kB dirty:2880kB writeback:0kB shmem:48080kB kernel_stack:4032kB pagetables:5516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.838826][ T9957] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.868467][ T9957] lowmem_reserve[]: 0 2880 7859 7859 [ 174.873742][ T9957] Node 0 DMA32 free:2946120kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949752kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 174.905043][ T9957] lowmem_reserve[]: 0 0 4978 4978 [ 174.910166][ T9957] Node 0 Normal free:4367924kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19900kB inactive_anon:46600kB active_file:91892kB inactive_file:9244kB unevictable:0kB writepending:2880kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:135664kB local_pcp:43296kB free_cma:0kB [ 174.943696][ T9957] lowmem_reserve[]: 0 0 0 0 [ 174.948230][ T9957] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.961145][ T9957] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2946120kB [ 174.977294][ T9957] Node 0 Normal: 1022*4kB (UM) 566*8kB (UME) 378*16kB (UME) 390*32kB (UME) 372*64kB (UME) 355*128kB (UME) 202*256kB (UM) 80*512kB (UM) 59*1024kB (UME) 17*2048kB (UM) 997*4096kB (UM) = 4368008kB [ 174.991103][ T29] audit: type=1400 audit(1764903283.571:2543): avc: denied { bind } for pid=9956 comm="syz.4.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.996934][ T9957] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 175.025399][ T9957] 37305 total pagecache pages [ 175.030280][ T9957] 7 pages in swap cache [ 175.034434][ T9957] Free swap = 92580kB [ 175.038604][ T9957] Total swap = 124996kB [ 175.042727][ T9957] 2097051 pages RAM [ 175.046618][ T9957] 0 pages HighMem/MovableOnly [ 175.051326][ T9957] 81213 pages reserved [ 175.076307][ T4085] Bluetooth: hci0: command 0x1003 tx timeout [ 175.082298][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.177538][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.222174][ T9971] loop3: detected capacity change from 0 to 512 [ 175.580192][ T9971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.593275][ T9971] ext4 filesystem being mounted at /462/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.608083][ T9971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.661486][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2179'. [ 175.987299][ T29] audit: type=1326 audit(1764903284.671:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6def749 code=0x7ffc0000 [ 176.010983][ T29] audit: type=1326 audit(1764903284.671:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6def749 code=0x7ffc0000 [ 176.034550][ T29] audit: type=1326 audit(1764903284.671:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7f6def749 code=0x7ffc0000 [ 176.057949][ T29] audit: type=1326 audit(1764903284.671:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6def749 code=0x7ffc0000 [ 176.063510][T10007] blktrace: Concurrent blktraces are not allowed on sg0 [ 176.127733][T10014] loop6: detected capacity change from 0 to 512 [ 176.137387][T10014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.150161][T10014] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.160992][T10014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.190982][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 176.213324][T10020] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2192'. [ 177.372753][T10057] blktrace: Concurrent blktraces are not allowed on sg0 [ 177.516033][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2204'. [ 177.602998][T10080] team0: Port device team_slave_1 removed [ 177.712814][T10093] loop5: detected capacity change from 0 to 1024 [ 177.740760][T10093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.831456][T10106] netlink: 82908 bytes leftover after parsing attributes in process `syz.5.2208'. [ 178.548432][ T8300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.602118][T10131] blktrace: Concurrent blktraces are not allowed on sg0 [ 178.699423][T10149] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2216'. [ 178.762559][T10156] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2218'. [ 178.779823][T10156] netem: change failed [ 178.784557][T10160] sd 0:0:1:0: device reset [ 178.807723][T10156] loop6: detected capacity change from 0 to 256 [ 178.820272][T10156] vfat: Unknown parameter 'utÿ' [ 179.920793][T10185] loop6: detected capacity change from 0 to 512 [ 179.986023][T10185] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 179.993954][T10185] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 180.010024][T10185] System zones: 0-1, 15-15, 18-18, 34-34 [ 180.012207][T10189] blktrace: Concurrent blktraces are not allowed on sg0 [ 180.015959][T10185] EXT4-fs (loop6): orphan cleanup on readonly fs [ 180.031632][T10185] __quota_error: 29 callbacks suppressed [ 180.031696][T10185] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 180.047588][T10185] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 180.056982][T10185] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2224: Failed to acquire dquot type 1 [ 180.083506][T10193] FAULT_INJECTION: forcing a failure. [ 180.083506][T10193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.096610][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.5.2227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.096641][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.096653][T10193] Call Trace: [ 180.096660][T10193] [ 180.096668][T10193] __dump_stack+0x1d/0x30 [ 180.096694][T10193] dump_stack_lvl+0xe8/0x140 [ 180.096734][T10193] dump_stack+0x15/0x1b [ 180.096824][T10193] should_fail_ex+0x265/0x280 [ 180.096859][T10193] should_fail+0xb/0x20 [ 180.096885][T10193] should_fail_usercopy+0x1a/0x20 [ 180.096932][T10193] _copy_from_iter+0xcf/0xe70 [ 180.096951][T10193] ? __alloc_skb+0x3bb/0x4d0 [ 180.096969][T10193] ? __alloc_skb+0x24d/0x4d0 [ 180.096994][T10193] netlink_sendmsg+0x471/0x6b0 [ 180.097023][T10193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.097048][T10193] __sock_sendmsg+0x145/0x180 [ 180.097077][T10193] ____sys_sendmsg+0x31e/0x4a0 [ 180.097130][T10193] ___sys_sendmsg+0x17b/0x1d0 [ 180.097170][T10193] __x64_sys_sendmsg+0xd4/0x160 [ 180.097196][T10193] x64_sys_call+0x17ba/0x3000 [ 180.097217][T10193] do_syscall_64+0xd8/0x2a0 [ 180.097326][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.097346][T10193] RIP: 0033:0x7f3944f7f749 [ 180.097360][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.097447][T10193] RSP: 002b:00007f39439df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.097464][T10193] RAX: ffffffffffffffda RBX: 00007f39451d5fa0 RCX: 00007f3944f7f749 [ 180.097486][T10193] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 180.097499][T10193] RBP: 00007f39439df090 R08: 0000000000000000 R09: 0000000000000000 [ 180.097511][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.097522][T10193] R13: 00007f39451d6038 R14: 00007f39451d5fa0 R15: 00007ffe2f59b0c8 [ 180.097539][T10193] [ 180.365581][T10185] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2224: bg 0: block 40: padding at end of block bitmap is not set [ 180.394845][T10202] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2229'. [ 180.415041][T10185] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 180.424200][T10185] EXT4-fs (loop6): 1 truncate cleaned up [ 180.430374][T10185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.510912][T10207] SELinux: failed to load policy [ 180.534459][T10214] loop5: detected capacity change from 0 to 512 [ 180.540977][T10214] EXT4-fs: Ignoring removed bh option [ 180.634458][T10220] loop2: detected capacity change from 0 to 128 [ 180.649117][ T9363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.661265][T10214] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2235: corrupted in-inode xattr: invalid ea_ino [ 180.675118][T10214] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2235: couldn't read orphan inode 15 (err -117) [ 180.689248][T10214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.704166][ T29] audit: type=1400 audit(1764903289.383:2577): avc: denied { getopt } for pid=10213 comm="syz.5.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.793804][ T8300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.141813][T10237] loop5: detected capacity change from 0 to 512 [ 181.231784][T10237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.247401][T10237] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.259273][T10237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.281114][T10244] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2242'. [ 181.487669][T10258] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 181.647599][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'. [ 181.656555][T10262] netlink: 'syz.3.2248': attribute type 30 has an invalid length. [ 181.664358][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 181.686722][T10262] lo speed is unknown, defaulting to 1000 [ 181.862107][ T29] audit: type=1400 audit(1764903290.534:2578): avc: denied { setopt } for pid=10266 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.882231][ T29] audit: type=1400 audit(1764903290.534:2579): avc: denied { write } for pid=10266 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.914348][ T29] audit: type=1400 audit(1764903290.584:2580): avc: denied { write } for pid=10266 comm="syz.3.2249" name="event2" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 181.937747][ T29] audit: type=1400 audit(1764903290.584:2581): avc: denied { open } for pid=10266 comm="syz.3.2249" path="/dev/input/event2" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 181.962236][ T29] audit: type=1400 audit(1764903290.584:2582): avc: denied { ioctl } for pid=10266 comm="syz.3.2249" path="/dev/input/event2" dev="devtmpfs" ino=252 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 181.988017][ T29] audit: type=1326 audit(1764903290.584:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49261ef749 code=0x7ffc0000 [ 182.011735][ T29] audit: type=1326 audit(1764903290.584:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.3.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f49261ef749 code=0x7ffc0000 [ 182.101169][T10276] 9pnet_fd: Insufficient options for proto=fd [ 182.111974][T10279] loop6: detected capacity change from 0 to 512 [ 182.119992][T10281] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2256'. [ 182.135091][T10278] loop5: detected capacity change from 0 to 2048 [ 182.160402][T10279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.173405][T10279] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.184356][T10279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.214987][T10278] loop5: unable to read partition table [ 182.220626][T10278] loop5: partition table beyond EOD, truncated [ 182.226808][T10278] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 182.281428][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2252'. [ 182.843022][T10301] lo speed is unknown, defaulting to 1000 [ 183.087768][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2266'. [ 183.163626][T10316] netlink: 'syz.4.2267': attribute type 1 has an invalid length. [ 183.192159][T10310] loop2: detected capacity change from 0 to 1024 [ 183.198887][T10310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.207778][T10319] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2268'. [ 183.235067][T10310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.515724][T10355] capability: warning: `syz.4.2278' uses deprecated v2 capabilities in a way that may be insecure [ 183.530091][T10355] loop4: detected capacity change from 0 to 512 [ 183.537526][T10346] loop6: detected capacity change from 0 to 1024 [ 183.556329][T10346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.672435][T10350] netlink: 82908 bytes leftover after parsing attributes in process `syz.6.2276'. [ 183.681888][T10350] net_ratelimit: 34 callbacks suppressed [ 183.681900][T10350] netlink: zone id is out of range [ 183.692678][T10350] netlink: zone id is out of range [ 183.697773][T10350] netlink: zone id is out of range [ 183.717059][T10358] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 183.751314][T10358] netlink: 'syz.4.2278': attribute type 10 has an invalid length. [ 183.768058][T10350] netlink: zone id is out of range [ 183.807193][T10358] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.818691][T10350] netlink: zone id is out of range [ 183.824309][T10350] netlink: zone id is out of range [ 183.838605][T10350] netlink: zone id is out of range [ 183.852439][T10350] netlink: zone id is out of range [ 183.864781][T10361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.887777][T10361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=10361 comm=syz.5.2279 [ 184.312435][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2282'. [ 184.333091][ T9363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.430024][T10388] SELinux: failed to load policy [ 184.466661][T10395] FAULT_INJECTION: forcing a failure. [ 184.466661][T10395] name failslab, interval 1, probability 0, space 0, times 0 [ 184.479319][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.3.2290 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.479354][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.479369][T10395] Call Trace: [ 184.479375][T10395] [ 184.479382][T10395] __dump_stack+0x1d/0x30 [ 184.479403][T10395] dump_stack_lvl+0xe8/0x140 [ 184.479503][T10395] dump_stack+0x15/0x1b [ 184.479524][T10395] should_fail_ex+0x265/0x280 [ 184.479555][T10395] should_failslab+0x8c/0xb0 [ 184.479584][T10395] __kmalloc_noprof+0xa5/0x590 [ 184.479625][T10395] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 184.479653][T10395] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 184.479679][T10395] genl_family_rcv_msg_doit+0x48/0x1b0 [ 184.479697][T10395] ? selinux_capable+0x31/0x40 [ 184.479758][T10395] ? security_capable+0x83/0x90 [ 184.479783][T10395] ? ns_capable+0x7d/0xb0 [ 184.479810][T10395] genl_rcv_msg+0x422/0x460 [ 184.479913][T10395] ? __pfx_ovs_flow_cmd_del+0x10/0x10 [ 184.479945][T10395] netlink_rcv_skb+0x123/0x220 [ 184.480011][T10395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.480053][T10395] genl_rcv+0x28/0x40 [ 184.480160][T10395] netlink_unicast+0x5c0/0x690 [ 184.480185][T10395] netlink_sendmsg+0x58b/0x6b0 [ 184.480218][T10395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.480249][T10395] __sock_sendmsg+0x145/0x180 [ 184.480284][T10395] ____sys_sendmsg+0x31e/0x4a0 [ 184.480426][T10395] ___sys_sendmsg+0x17b/0x1d0 [ 184.480510][T10395] __x64_sys_sendmsg+0xd4/0x160 [ 184.480539][T10395] x64_sys_call+0x17ba/0x3000 [ 184.480560][T10395] do_syscall_64+0xd8/0x2a0 [ 184.480715][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.480736][T10395] RIP: 0033:0x7f49261ef749 [ 184.480753][T10395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.480772][T10395] RSP: 002b:00007f4924c4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.480807][T10395] RAX: ffffffffffffffda RBX: 00007f4926445fa0 RCX: 00007f49261ef749 [ 184.480822][T10395] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 184.480854][T10395] RBP: 00007f4924c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 184.480868][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.480880][T10395] R13: 00007f4926446038 R14: 00007f4926445fa0 R15: 00007ffe98a49b98 [ 184.480898][T10395] [ 184.731095][T10310] syz.2.2265 (10310) used greatest stack depth: 6416 bytes left [ 184.743193][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.847057][T10399] loop3: detected capacity change from 0 to 1024 [ 184.873283][T10399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.013025][T10420] lo speed is unknown, defaulting to 1000 [ 185.454339][T10425] SELinux: failed to load policy [ 185.593440][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 185.593455][ T29] audit: type=1400 audit(1764903294.276:2612): avc: denied { append } for pid=10432 comm="syz.5.2304" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.681962][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.699081][T10435] blktrace: Concurrent blktraces are not allowed on sg0 [ 185.732158][T10436] lo speed is unknown, defaulting to 1000 [ 185.762508][T10433] loop5: detected capacity change from 0 to 128 [ 185.789091][ T29] audit: type=1326 audit(1764903294.456:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.5.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 185.812702][ T29] audit: type=1326 audit(1764903294.456:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.5.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 185.836159][ T29] audit: type=1326 audit(1764903294.456:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.5.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 185.859679][ T29] audit: type=1326 audit(1764903294.456:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.5.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 185.883169][ T29] audit: type=1326 audit(1764903294.456:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.5.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 185.906659][ T29] audit: type=1326 audit(1764903294.456:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.5.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 185.930243][ T29] audit: type=1326 audit(1764903294.456:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.5.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 185.953765][ T29] audit: type=1326 audit(1764903294.456:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.5.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 185.977310][ T29] audit: type=1326 audit(1764903294.456:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.5.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 186.064932][T10448] __nla_validate_parse: 3 callbacks suppressed [ 186.064947][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 186.113811][T10453] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2310'. [ 186.238086][T10463] process 'syz.2.2314' launched './file1' with NULL argv: empty string added [ 186.485291][T10471] loop2: detected capacity change from 0 to 1024 [ 186.494203][T10471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.559883][T10473] netlink: 82908 bytes leftover after parsing attributes in process `syz.2.2316'. [ 186.819412][T10483] sd 0:0:1:0: device reset [ 187.031560][T10495] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2322'. [ 187.622441][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.971478][T10483] syz.4.2319 (10483) used greatest stack depth: 6008 bytes left [ 188.060433][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2329'. [ 188.125086][T10521] team0: Port device team_slave_1 removed [ 188.145844][T10525] loop2: detected capacity change from 0 to 512 [ 188.162626][T10525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.175730][T10525] ext4 filesystem being mounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.187368][T10525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.474693][T10536] loop2: detected capacity change from 0 to 1024 [ 188.552733][T10536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.557963][T10543] loop3: detected capacity change from 0 to 512 [ 188.582877][T10543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.595824][T10543] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.606750][T10543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.629689][T10538] netlink: 82908 bytes leftover after parsing attributes in process `syz.2.2335'. [ 188.976279][T10563] loop4: detected capacity change from 0 to 128 [ 189.350398][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.528997][T10583] loop6: detected capacity change from 0 to 512 [ 189.588844][T10583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.615672][T10583] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.630890][T10583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.731462][T10606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.757365][T10602] loop6: detected capacity change from 0 to 1024 [ 189.757602][T10609] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2362'. [ 189.776432][T10609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10609 comm=syz.2.2362 [ 189.789679][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2362'. [ 189.790956][T10602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.896799][T10607] netlink: 82908 bytes leftover after parsing attributes in process `syz.6.2360'. [ 189.912235][T10607] net_ratelimit: 96 callbacks suppressed [ 189.912250][T10607] netlink: zone id is out of range [ 189.923173][T10607] netlink: zone id is out of range [ 189.928260][T10607] netlink: zone id is out of range [ 189.934293][T10607] netlink: zone id is out of range [ 189.939518][T10607] netlink: zone id is out of range [ 189.944770][T10607] netlink: zone id is out of range [ 189.953445][T10607] netlink: zone id is out of range [ 189.958863][T10607] netlink: zone id is out of range [ 189.972106][T10616] loop2: detected capacity change from 0 to 2048 [ 189.978581][T10607] netlink: zone id is out of range [ 189.983786][T10607] netlink: zone id is out of range [ 189.989582][T10616] EXT4-fs: Ignoring removed bh option [ 190.002983][T10616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.023816][T10616] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.038891][T10616] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 201 with error 28 [ 190.051232][T10616] EXT4-fs (loop2): This should not happen!! Data will be lost [ 190.051232][T10616] [ 190.060997][T10616] EXT4-fs (loop2): Total free blocks count 0 [ 190.067042][T10616] EXT4-fs (loop2): Free/Dirty block details [ 190.072989][T10616] EXT4-fs (loop2): free_blocks=2415919104 [ 190.078776][T10616] EXT4-fs (loop2): dirty_blocks=208 [ 190.083996][T10616] EXT4-fs (loop2): Block reservation details [ 190.089142][T10621] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2365'. [ 190.090033][T10616] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 190.099114][T10621] 0ªX¹¦À: renamed from caif0 [ 190.112374][T10621] 0ªX¹¦À: entered allmulticast mode [ 190.126613][T10616] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.175449][T10621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10621 comm=syz.2.2365 [ 190.201385][T10616] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.282332][T10616] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.332122][T10616] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.414027][ T1730] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.432485][ T1730] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.461396][ T1730] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.484231][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.494230][ T1730] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.534711][ T9363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.580558][T10627] lo speed is unknown, defaulting to 1000 [ 190.588974][T10629] blktrace: Concurrent blktraces are not allowed on sg0 [ 190.622994][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.643238][T10632] loop6: detected capacity change from 0 to 512 [ 190.675685][T10632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.688422][T10632] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.699520][T10632] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.780436][T10642] blktrace: Concurrent blktraces are not allowed on sg0 [ 190.800353][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 190.800373][ T29] audit: type=1400 audit(1764903299.489:2713): avc: denied { accept } for pid=10645 comm="syz.5.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.833506][T10648] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 190.874540][T10652] lo speed is unknown, defaulting to 1000 [ 190.892923][ T29] audit: type=1400 audit(1764903299.579:2714): avc: denied { write } for pid=10653 comm="syz.6.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 190.915027][T10655] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 190.929244][ T149] Bluetooth: hci1: Frame reassembly failed (-84) [ 190.953918][ T29] audit: type=1400 audit(1764903299.639:2715): avc: denied { relabelfrom } for pid=10653 comm="syz.6.2378" name="SCTPv6" dev="sockfs" ino=32496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.977325][T10654] SELinux: Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped). [ 191.040390][ T29] audit: type=1400 audit(1764903299.679:2716): avc: denied { relabelto } for pid=10653 comm="syz.6.2378" name="SCTPv6" dev="sockfs" ino=32496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 191.068139][ T29] audit: type=1400 audit(1764903299.699:2717): avc: denied { associate } for pid=10659 comm="syz.6.2378" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 191.089133][ T29] audit: type=1400 audit(1764903299.699:2718): avc: denied { mounton } for pid=10653 comm="syz.6.2378" path="/proc/182/task" dev="proc" ino=33045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 191.196772][T10661] loop6: detected capacity change from 0 to 1024 [ 191.206266][T10661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.278620][T10663] __nla_validate_parse: 1 callbacks suppressed [ 191.278635][T10663] netlink: 82908 bytes leftover after parsing attributes in process `syz.6.2379'. [ 191.396814][T10668] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.449862][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 191.821443][T10687] SELinux: failed to load policy [ 191.861238][T10689] SELinux: failed to load policy [ 191.882156][ T9363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.997662][T10701] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.038238][T10705] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2395'. [ 192.048079][T10705] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10705 comm=syz.6.2395 [ 192.061186][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2395'. [ 192.149610][T10707] lo speed is unknown, defaulting to 1000 [ 192.202550][ T29] audit: type=1326 audit(1764903300.889:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6def749 code=0x7ffc0000 [ 192.226146][ T29] audit: type=1326 audit(1764903300.889:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.6.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f6def749 code=0x7ffc0000 [ 192.288287][T10710] loop6: detected capacity change from 0 to 1024 [ 192.294868][T10710] EXT4-fs: Ignoring removed orlov option [ 192.302427][T10710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.335632][ T9363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.667342][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 192.698020][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.761374][T10722] lo speed is unknown, defaulting to 1000 [ 192.931799][T10730] loop2: detected capacity change from 0 to 1024 [ 193.037051][ T3500] Bluetooth: hci1: command 0x1003 tx timeout [ 193.043106][ T4085] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 193.118441][T10730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.187815][T10730] netlink: 82908 bytes leftover after parsing attributes in process `syz.2.2401'. [ 193.358908][T10746] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.374251][T10748] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2406'. [ 193.383911][T10748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10748 comm=syz.5.2406 [ 193.398437][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 193.517108][T10755] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2409'. [ 193.642479][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.659744][ T29] audit: type=1400 audit(1764903302.350:2721): avc: denied { lock } for pid=10758 comm="syz.3.2411" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=32666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 194.541290][T10790] loop2: detected capacity change from 0 to 128 [ 194.827717][ T29] audit: type=1326 audit(1764903303.521:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c90ff749 code=0x7ffc0000 [ 194.851605][T10800] loop2: detected capacity change from 0 to 512 [ 194.982058][T10797] loop4: detected capacity change from 0 to 1024 [ 194.988501][ T4085] Bluetooth: hci0: command 0x1003 tx timeout [ 195.015703][T10797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.108626][T10811] SELinux: failed to load policy [ 195.136141][T10805] netlink: 82908 bytes leftover after parsing attributes in process `syz.4.2422'. [ 195.160334][T10805] net_ratelimit: 67 callbacks suppressed [ 195.160350][T10805] netlink: zone id is out of range [ 195.171227][T10805] netlink: zone id is out of range [ 195.176700][T10805] netlink: zone id is out of range [ 195.222473][T10805] netlink: zone id is out of range [ 195.238921][T10805] netlink: zone id is out of range [ 195.261298][T10805] netlink: zone id is out of range [ 195.275102][T10805] netlink: zone id is out of range [ 195.301266][T10805] netlink: zone id is out of range [ 195.310542][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.319051][T10805] netlink: zone id is out of range [ 195.324161][T10805] netlink: zone id is out of range [ 195.330484][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.390264][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.408189][T10823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.428231][T10825] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2431'. [ 195.462407][T10825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10825 comm=syz.6.2431 [ 195.491431][T10828] SELinux: failed to load policy [ 195.640936][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.702307][T10844] lo speed is unknown, defaulting to 1000 [ 195.934886][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 195.934913][ T29] audit: type=1400 audit(1764903304.611:2814): avc: denied { connect } for pid=10843 comm="syz.3.2439" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.986523][ T29] audit: type=1326 audit(1764903304.651:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10848 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f49261ef749 code=0x7ffc0000 [ 196.043481][ T29] audit: type=1400 audit(1764903304.731:2816): avc: denied { bind } for pid=10859 comm="syz.5.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.131974][ T29] audit: type=1326 audit(1764903304.801:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49261ef749 code=0x7ffc0000 [ 196.155557][ T29] audit: type=1326 audit(1764903304.801:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.3.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49261ef749 code=0x7ffc0000 [ 196.209329][ T1730] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.219271][ T1730] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.227580][ T1730] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.247625][ T1730] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.258208][T10865] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.300396][T10871] loop5: detected capacity change from 0 to 512 [ 196.313262][T10871] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.5.2446: corrupted xattr block 95: invalid header [ 196.327947][T10871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2446: bg 0: block 7: invalid block bitmap [ 196.340510][T10871] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 196.349978][T10871] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2971: inode #11: comm syz.5.2446: corrupted xattr block 95: invalid header [ 196.363786][T10871] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 196.373143][T10871] EXT4-fs (loop5): 1 orphan inode deleted [ 196.379716][T10871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.402536][ T29] audit: type=1400 audit(1764903305.091:2819): avc: denied { ioctl } for pid=10870 comm="syz.5.2446" path="socket:[33880]" dev="sockfs" ino=33880 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.437913][T10871] __nla_validate_parse: 3 callbacks suppressed [ 196.437927][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2446'. [ 196.473064][T10887] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2453'. [ 196.528315][T10894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10894 comm=syz.6.2453 [ 196.546751][T10890] FAULT_INJECTION: forcing a failure. [ 196.546751][T10890] name failslab, interval 1, probability 0, space 0, times 0 [ 196.559379][T10890] CPU: 0 UID: 0 PID: 10890 Comm: syz.4.2455 Not tainted syzkaller #0 PREEMPT(voluntary) [ 196.559404][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.559459][T10890] Call Trace: [ 196.559465][T10890] [ 196.559471][T10890] __dump_stack+0x1d/0x30 [ 196.559496][T10890] dump_stack_lvl+0xe8/0x140 [ 196.559520][T10890] dump_stack+0x15/0x1b [ 196.559541][T10890] should_fail_ex+0x265/0x280 [ 196.559576][T10890] ? io_drain_req+0x67/0x350 [ 196.559710][T10890] should_failslab+0x8c/0xb0 [ 196.559739][T10890] __kmalloc_cache_noprof+0x4c/0x4c0 [ 196.559759][T10890] io_drain_req+0x67/0x350 [ 196.559784][T10890] ? io_queue_sqe_fallback+0x12a/0x140 [ 196.559854][T10890] io_queue_sqe_fallback+0x132/0x140 [ 196.559903][T10890] io_submit_sqes+0xd8d/0x11b0 [ 196.559932][T10890] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 196.559963][T10890] ? 0xffffffff81000000 [ 196.559975][T10890] ? __rcu_read_unlock+0x4f/0x70 [ 196.560009][T10890] ? proc_fail_nth_write+0x13b/0x160 [ 196.560035][T10890] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.560061][T10890] ? vfs_write+0x7e8/0x960 [ 196.560166][T10890] ? __rcu_read_unlock+0x4f/0x70 [ 196.560213][T10890] ? __fget_files+0x184/0x1c0 [ 196.560234][T10890] ? mutex_unlock+0x4f/0x90 [ 196.560253][T10890] ? fput+0x8f/0xc0 [ 196.560273][T10890] __x64_sys_io_uring_enter+0x78/0x90 [ 196.560342][T10890] x64_sys_call+0x27e4/0x3000 [ 196.560366][T10890] do_syscall_64+0xd8/0x2a0 [ 196.560399][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.560420][T10890] RIP: 0033:0x7f0cd209f749 [ 196.560439][T10890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.560534][T10890] RSP: 002b:00007f0cd0b07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 196.560555][T10890] RAX: ffffffffffffffda RBX: 00007f0cd22f5fa0 RCX: 00007f0cd209f749 [ 196.560569][T10890] RDX: 0000000000003acd RSI: 0000000000005535 RDI: 0000000000000006 [ 196.560701][T10890] RBP: 00007f0cd0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 196.560712][T10890] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 196.560723][T10890] R13: 00007f0cd22f6038 R14: 00007f0cd22f5fa0 R15: 00007fff762a7918 [ 196.560743][T10890] [ 196.561048][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2453'. [ 196.622308][T10903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.878159][ T8300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.391001][T10942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.417517][T10944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2474'. [ 197.427447][T10944] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10944 comm=syz.2.2474 [ 197.440664][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2474'. [ 197.504363][ T29] audit: type=1400 audit(1764903306.192:2820): avc: denied { connect } for pid=10949 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.584971][T10952] SELinux: failed to load policy [ 197.670667][T10954] SELinux: failed to load policy [ 197.746570][T10961] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2482'. [ 197.818399][T10962] netlink: 'syz.2.2482': attribute type 6 has an invalid length. [ 197.849926][ T29] audit: type=1400 audit(1764903306.542:2821): avc: denied { name_bind } for pid=10960 comm="syz.2.2482" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 197.921009][T10964] loop2: detected capacity change from 0 to 128 [ 197.957609][T10968] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.992877][T10970] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2486'. [ 198.007203][ T29] audit: type=1326 audit(1764903306.692:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 198.030710][ T29] audit: type=1326 audit(1764903306.692:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.5.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3944f7f749 code=0x7ffc0000 [ 198.044146][T10977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10977 comm=syz.3.2486 [ 198.067743][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2489'. [ 198.103733][T10982] netlink: 'syz.2.2491': attribute type 1 has an invalid length. [ 198.111746][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 198.129759][T10982] bond1: entered promiscuous mode [ 198.134908][T10982] bond1: entered allmulticast mode [ 198.170831][T10982] bond1: (slave dummy0): making interface the new active one [ 198.189464][T10982] dummy0: entered promiscuous mode [ 198.205413][T10982] dummy0: entered allmulticast mode [ 198.224664][T10982] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 198.244331][T10991] 9pnet_fd: Insufficient options for proto=fd [ 198.279010][T10991] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2494'. [ 198.297084][T10982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=10982 comm=syz.2.2491 [ 198.312952][T10991] hsr_slave_0: left promiscuous mode [ 198.318875][T10991] hsr_slave_1: left promiscuous mode [ 198.326423][T10997] loop6: detected capacity change from 0 to 512 [ 198.343376][T10997] EXT4-fs: Ignoring removed i_version option [ 198.349473][T10997] EXT4-fs: Ignoring removed bh option [ 198.370911][T10997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.410847][ T58] ================================================================== [ 198.414002][T11007] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.418954][ T58] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 198.429714][T10997] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.436870][ T58] [ 198.436880][ T58] write to 0xffff88812af91108 of 44 bytes by task 11000 on cpu 1: [ 198.436898][ T58] tty_set_termios+0xc0/0x8c0 [ 198.461756][ T58] set_termios+0x35b/0x4d0 [ 198.466178][ T58] tty_mode_ioctl+0x379/0x5c0 [ 198.470855][ T58] n_tty_ioctl_helper+0x91/0x210 [ 198.475781][ T58] n_tty_ioctl+0x101/0x200 [ 198.480185][ T58] tty_ioctl+0x83f/0xb80 [ 198.484412][ T58] __se_sys_ioctl+0xce/0x140 [ 198.488997][ T58] __x64_sys_ioctl+0x43/0x50 [ 198.493575][ T58] x64_sys_call+0x14b0/0x3000 [ 198.498237][ T58] do_syscall_64+0xd8/0x2a0 [ 198.502732][ T58] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.508608][ T58] [ 198.510911][ T58] read to 0xffff88812af91122 of 1 bytes by task 58 on cpu 0: [ 198.518258][ T58] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 198.524057][ T58] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 198.529593][ T58] tty_port_default_lookahead_buf+0x91/0xc0 [ 198.535472][ T58] flush_to_ldisc+0x288/0x340 [ 198.540133][ T58] process_scheduled_works+0x4ce/0x9d0 [ 198.545578][ T58] worker_thread+0x582/0x770 [ 198.550154][ T58] kthread+0x489/0x510 [ 198.554212][ T58] ret_from_fork+0x149/0x290 [ 198.558789][ T58] ret_from_fork_asm+0x1a/0x30 [ 198.563537][ T58] [ 198.565839][ T58] value changed: 0x13 -> 0x00 [ 198.570490][ T58] [ 198.572792][ T58] Reported by Kernel Concurrency Sanitizer on: [ 198.578921][ T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.588625][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.598663][ T58] Workqueue: events_unbound flush_to_ldisc [ 198.604460][ T58] ================================================================== [ 198.647534][ T9363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.