last executing test programs: 2m57.493425537s ago: executing program 4 (id=94): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x801, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2m53.617667691s ago: executing program 4 (id=140): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x46}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) (fail_nth: 2) 2m53.456000014s ago: executing program 4 (id=141): r0 = inotify_init() r1 = syz_clone(0xc000800, &(0x7f0000000500)="095066b207a25d0e333a6fb3a1c4ec72af32a828f3c3c4492a5f4658aa633d9ebd4caa06a651665f8b45663cf720e91bb2ba44a0f383f7e4bf0c2c9c888fd970fc99d5e6d77e59a6429224efdb9cb698c74cfb6b66ea97aac71d12f374fdf7a2dde9de3b6858b42563", 0x69, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000c80)="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") fcntl$setown(r0, 0x8, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009eb4c5d1ae88e022baa832948e1de250783b01eb73526de2a366ec5046ff0d9bd91c18270f9d953de734a3a4ceceb6d760464e3045f9f143cdaa19f014b3e98e32b08b0dc85d9a59d387bf47e16a8d68edd0958b76323b196db96efe059dd00493fed6944b624c99533ccd0ddcc77d01a0602e06f9c310dec30eef82f82ee678f2950942265c3b85f23d082b08625e3e"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x26c841ac7dfb4727}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000001200), 0x10) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r11, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x40, 0x140a, 0x800, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 2m53.257521397s ago: executing program 4 (id=143): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@nogrpid}, {@norecovery}, {@errors_remount}]}, 0x1, 0x57d, &(0x7f0000000580)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x4, 0x80) r4 = getuid() syz_clone3(&(0x7f0000000f80)={0x140200, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x28}, &(0x7f0000000ec0)=""/144, 0x90, &(0x7f0000000300)=""/59, &(0x7f0000000480)=[0x0], 0x1}, 0x58) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r7 = memfd_secret(0x80000) r8 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$netlink(r2, &(0x7f0000001340)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc, &(0x7f0000001240)=[{&(0x7f0000000380)={0xec, 0x3a, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xc, 0xc6, 0x0, 0x1, [@nested={0x4, 0x140}, @nested={0x4, 0x146}]}, @typed={0x10, 0xef, 0x0, 0x0, @binary="0e8e77be5354e20268a1fe04"}, @generic="686acd45149c9b84cf964a72a0edf7462ce987482d905ad3011c3289e8dae864b4694970020179dc865fcddf9782049438efe9e40e362144dfb906d7c5ee749471e89ecd50805fc048bc8d1b00e141ddac96d2d970646576ca2e61166813c9aa9523ff0ec2de95f07737f82dd71bd712a00590b114bb477772496e97445be1bddb8cddf7d977776a9efd48ae5b70f0874b80771839", @generic="3407b0f528a9d97b16d3d5406937ed89248c1c162852a804c20e35d415262b6ceb85f8d78dde6dd153"]}, 0xec}, {&(0x7f0000000b00)={0xfc, 0x3f, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@generic="05ddb51ad9cd3e328239219e061c8f3796087895e60fbb33cc75a70c659ad6acf5ed53040e9d7a0df4067c477f80d17400559ac09e8bc7d9251b4945f5fea44037478bb4d1460d64007098c02b9f5a32f42a8c9f03b20eb3890fede8e094472eb1dbff4de749fe635f1da013d55e53a8927ccf786640d3698c91f2dbfa12fa3041b5c7973d4f5c202d0af37176374d8ccc8062153cfc08cd9885c2e66683ac79c02d5b5db5be5fab2fcd1a337bae8f94a920fb2f4370a053dc92e87126b6364ce5d0cbdfd874d8e4bdf98201958a16ac1d03ff38a8673c325d59b35718a789e0ebfefd0dac03f702607ffd58"]}, 0xfc}, {&(0x7f0000001900)={0x1310, 0xb, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@generic="92f9a77c1bfc7d5f053464861a91985592affb8b4b18682ab5486ffa0198e68868abe724b17448d942f30efc161911fbac5ca654c336dbebca91b8fb1850acc3279914535a938df66d64a6d637e632c93b2ffc66a5961e7c609fe79c10b344a14cec650f95b7f9367b3f2b98bd2e175447fc8b460979883908e399425ed1109a985a81e50808f25726df80be8fcef93e9c9ccae7641b89", @nested={0x1b8, 0xcd, 0x0, 0x1, [@generic="701d41aea4634c5ce4297fbc78fffebc54bed3c51dbd8810bd4a3541aa06d5ef4cd1c32d97b989256ffc99efafe05f69097830c5f81d37", @nested={0x4, 0x36}, @nested={0x4, 0x151}, @generic="c0b7dd82d3b2bfec2e655fdb4114b66afd1c2ecb015da3932a959dbc1e15bda46ea482221469389c40bc044118a7d31829853a7d06608072e519ecb8b6f2c9f4cef9144b0f477182b059c2d2c62142f76f992075257dbed9ce6b859066cb968d7c319412fd9b3ddfb07c19d8f763c9db4ca28416364cdd8964b8523ec6f95a1611fe79b74db42cee57eeb6df0ed6b06253bf7e37ad23d08ae986e1e0a5bf8255a0c81ef7801175e91c6dfdf1aa4f53f752046aec67841f6c884336e83bd325541130160df70cded8b3a2e5fc4b688b4d4799cdd817eecac584e17391072702f940433964e54556a6d111d6ecb8adf8eecc5f9649a497", @generic="04fb33dfa1a05c62efdb69c25e4810bb67bea5c7e968b0de31de93b820988fb70e3ed3b426d1b0edffb2b8e2ad7ba792623e05f851721658c5bd29abf45536994e6808391b07531681c3fc76ec21843c", @generic="2850438f4a044c4ef2c299ffb858932693087485aa23c7a8d84f7065ed65fd7e37e2e6920adb37c87783b5ce77060e"]}, @typed={0x1004, 0xa0, 0x0, 0x0, @binary="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"}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}, @generic="e1209551f3f60d077a024e8090799e22a8c01edad796b2049668cb14f301fdda6462b576e1a0b9b5336e3909654cce2c85771d717dd7382f3f6a588f84e17bd44af0e24f0fc028ab26997185cdb0131f134b54bc169ec18f5fcfba5181ea139f7f543c6bbfbfde3ad2090756395ac7a7d69f5d3669fda5", @nested={0xc, 0x83, 0x0, 0x1, [@nested={0x4, 0xa1}, @nested={0x4, 0xa9}]}, @generic="3b4c6e1245a5977105", @typed={0x9, 0xf9, 0x0, 0x0, @binary="07d3624171"}]}, 0x1310}, {&(0x7f0000000c00)={0x2a0, 0x18, 0x300, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0xa7, 0x0, 0x0, @u32=0xa000}, @generic="111b1ff3078d6975eca1d01b21b46851d4a2465971cfd33ae695fab983a6f2dd0adecd8b360ae51880d33c1c1dac6ccb6fcbc4d55e14edd739386f5ce6c986f321c340", @generic="18ec61f63e6bca84ec83f3b1e64071e59c2fd4a343cedad10878d399cd0dbc600ed6a567fd71cc6e777f05fa", @typed={0x8, 0x8d, 0x0, 0x0, @pid=r3}, @generic="283f1ccc29fac16b9adb7354e3a64e9ba1086702638c43dc3a413d494a3a2556ca5aca743610a18d7e593dcab96061d547bf9eeec43ec87a9dd90f22593ad3347de2c76df5af8d67ecd9e67dd771f8055c511031f8181e43804f5d73", @generic="af4a6c433ba9ad08cb5b8f04ff40a78c0d1ff42b7ec901c20c069255be6ee6cd6c8d44b8d36c2a4c0e9e603dca9ba1e01c547bc26e52d1970a645ab13b0fb9228e072bb22c05b04c21d092c12a6cdc89f9646f542715799e004acde7cd286055e965a36104b08d3a07918770d895ac4def88a75fa1c2c8c0f1e1792fd9992ff190296841dc1ca71b48200c8bfe2ddf028a6f574623f2068b4ef3179bac", @generic="4f3081bd1196c02ecbc28874171dbfa0282351ca78001f7e7493b63292d0ff31d5a7559e240f7f8aff09b038abc68f2be927f7a4dd4c783d438ab7d43d3f2a193f3ab61fba9f04686ef8aac08a0fce545473e9961c98d0897031aff09c7454c57aa8f3eccd6bbc551ac815c30f84345808aa419f657ca959539193f2daef5a3ba30eda9d4881eb9cbf9f1a0bbd12dc6b79e5f9293658ec907a09ab953a7c8e143180d5955b1b71ce3868", @generic="78733f94bbe5211f8303703bc8c6b0f19e1b1d838c54f87b2d8b1039e8d7058fbf03801acb904adf4b727e4863df5c48a9ce779cf091a60b1e86", @generic="404af8c547faef2b755ef9957022c8d3c1338074e6c5c85d3e3d8e36b7b3bb4e6c30c7396951c66586dcb28d05e896acfa74ef"]}, 0x2a0}, {&(0x7f0000001000)={0x224, 0x27, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x120, 0x0, 0x0, @uid=r4}, @typed={0xc, 0xc1, 0x0, 0x0, @u64=0x4}, @nested={0x1fe, 0x8e, 0x0, 0x1, [@typed={0x14, 0x131, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @generic="b5d5761e36d8adcf5dab3a51308262adc962874a663a99ae3d64f7e510e95bad671ee5e6547d54ef286dac7494718390068e7339b44f88c570b49d15238a00ff21cacd8bcfcbcaccc5f1992b293c78b8d3c27cef9717cc3d9674758c6f0d5e8364b70998801ca9a0aaf8e98aeacb18b2fff8dcb590", @generic="7b59b2e8d5011adda264a9e191f35a94eca05cfde02a37b2665207d4b8fd89353958288f52b769c78b8d40c80d7a1d1dd3099ccb65ccd3e5163048c530b00e1b72baba70108847f3357bdc5e72d67180316c634c36372db71c15a5eeac791ab3a15e9c23cc21506e4f37b99fd3f11dac36c7e9200f4fce5d08b5e095cecfda7e37d4d3749897bc213406cfe4aea24194b1259d7593b2190752024eb361c18f810c9dd654916b3981686867f0b85fe459384c334b3a84d2f2caffee6e56852d448b9dc172ef3d646f5e724bc9537c654bd5f4e9f51ececba0649e7326de605ebda6b54cd5ce", @typed={0x8, 0x51, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x121}, @typed={0x4, 0x10f}, @generic="d71367565e79f034b6076e64f058143801b4603bfea6eccaecfe264698a400a553291494766a4552cd58aafbe64a7adbc8eeea31a72d21dd3da23580eb919cb33d2d4b95c43cdd0df5af2aba67fb09b65532534af11c5678318549a3d58118fad1654b03aa3da6b661d4b579b6876b8519c72342a9d97bd8719584f0"]}]}, 0x224}], 0x5, &(0x7f0000001300)=[@rights={{0x24, 0x1, 0x1, [r1, r0, r6, r0, r7]}}, @rights={{0x18, 0x1, 0x1, [r8, r1]}}], 0x40, 0x40000}, 0x2001) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r9, 0x0) r10 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r11 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r11, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r14) sendmsg$NLBL_UNLABEL_C_STATICADD(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010226bd03002600010004"], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x20000}, 0x844) 2m52.951269583s ago: executing program 4 (id=149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1], 0xf8}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000b40)={@multicast, @random="795551c40719", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @loopback}}}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 2m52.689930768s ago: executing program 4 (id=155): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='f2fs_direct_IO_exit\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee44", 0x10) sendfile(r2, r1, 0x0, 0x3ffff) 2m52.689786548s ago: executing program 32 (id=155): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='f2fs_direct_IO_exit\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee44", 0x10) sendfile(r2, r1, 0x0, 0x3ffff) 2m2.012029385s ago: executing program 2 (id=1202): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) ioctl$LOOP_CONFIGURE(r0, 0xc040128b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) stat(0x0, &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) iopl(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) open$dir(&(0x7f0000000180)='./file0\x00', 0x4000, 0x40) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r2) 2m1.548985034s ago: executing program 2 (id=1215): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x3}], {0x10, 0x6}, {0x20, 0x1}}, 0x44, 0x0) 2m1.409308557s ago: executing program 2 (id=1219): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000480)}, 0x1) 2m1.325528038s ago: executing program 2 (id=1222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="370feed2d74112fb66ba602250c7a1ef1b1766e400856a5111152a78be62e30f2b9c3c83c1739a12440015b65724baeb2961a63720ad0aa74d84f48888fd728a5cba06cbd576a288b2d53591739f17c06d0c03f1a2b3fe8e39c473f3b67783e1f70831199e81bde7d01db78fa4467752b8ef8711f71a5cced4710e9d435f494a9d484a69030be31cba6f8d80a352bb0d05bdaf9947de7211aa07d0d508ea160de5ae685680dac761f29227dc9bcb55bcd71f0e57e4e3bcb2171fff99d5", @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000004680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000009567d27a264c7f3d0cdff962d1f81f24b99ab68998785416f7e68301dee49875eb0dc74abe9042b7f5cd207eefb5c22d985a7b4ea85d8676f39b42bf484b34b99780d8c27bc20694feb546574013096777095753d79a61519d40d7b1e1fc129301b94a046c5e7a9887a36f197855dda3682fb6e26bd426648859f31dc3b8152e5f32d46f3d9acfc57c73ed68cd020d2457e6cdcd43", @ANYRESHEX, @ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB="00eac630cbfb7a208c7afdd1fd319c4ed27095b2cd53c68f1d61b4db8f7dc815f254508a3a4709aaaada39bf22add334f1a3f5785a0483636abc79153adcc02a834edd1decbccf38606beb7c04dc96e8bbe5f0afe547ee726c5a3aa6275cc8e421b4c7b03a679366f03be24afd3547b5234f4c898a8ac6dbcc1bb0bd71ad1cc721dc52b77c11e5d76c388ce8aeffae7944e5d35701d7e34799109465ce01a754b3d32fe8a68cde5b8fe1de707eebf0b8a6146bf22336bcb2baf2ea9dcb4f3dc0f0d467395133941715b542a173d6b93d4bba4b532e39fc073401346c4f3419831fabab9e44dfe79206a926ebe4f679103c938787a8af3d8b7282beb708adee03394180aebd92c80fd286e21f7527ea0dcc3aecc25fcb43a12ee9934410b7f321aebf1dc74aebd070a17b0290c511b74b1985d5514ed3f98760d5cad0e3a0c399e98a2d10c1a4da7345da8b70af7811898666418b175ae654f8c64bacab738ee78e0616db18298b85fc5c1ae6863f6d3bebe7457af333ff8c5c5d365b172e0635fec3af0970488a2918ba9fc49d7f6c745979f58adce94de074c325c6acf0a3eba0378a26fae34ad654a771136273371c796cd2dbab375ecf9b724fc5fe2412c339754bce19ceecad813466a3b65477f903ec770a7554d35a7795a4158368b51c7083015e148cd4a2abf8c07d25f87cccd31bf496cec5803b0556a9072721b7d31152ef3f62bbd4079264c80d59728436c51ce4716f060f865ada775c20ad0003af6d63f88b23e719f42dde3b302bcdd4e0c7cefa29c31784a9de9a2e707ea37811646d74531da1bcb9c33a10fefbb87062149b29b6421f49b8416a3381dc4a11744d970d86917a73cff59848dd47c2615823b9e42fdeb8a9e6b038aa644f545f903c727fc2fddeaa66961c5909ea62f8d9f33c0a0ef3abf5e591d0daa15da9f0c23696e246ab21ad4c60402aa242d95fd090e76f6ee855b6308e4d99702b5859d0401d0c423f9d4f0a7ebd4cfa45d9351385fed659dfaab9c832f1d850d31b98d656a4f41b5b2b3f92047d531532e1fa0144db0236f8d46db23f5d8e7ecc4d309f02039a22ac21101ce4c628f317da5ee87c4412751f6d8efa7c02945c9632750a2d5536a5031e253b9c7bea33d9eb4bbdfac09132872b1b1a299a2e7049afec808c6613da11551e2dd0ca7e24e98ee00b99eb152390a8133e787a42bdecfef2b2e2c259bc7f52f2d09b60df5a6bea174b610ff6d8ca32a95c623aa900d069702075ea03d0ff4f5a25e941fdbc1c9a6de5668ec052bb843e80316600f9cd844b830604fdaee866f1cf70028053b2e7305604c1ad3d2d001a74970cec9d31296765e76cff99fa6e51134b75d4d8dd67444116bb114042ccf9ac41d9d47a017bd8f8c38f6f1ee408c37368f78e57bd477511cce180dd693b9f02b7ca2a43b81d81318c6ad5e581ce28142453c002b5e9c69d71deafd1817bbd826baac44c05db13d3344b5de162ccefc36020b8e8d49036618237cb8a785e95bae0b2ff52e9f55ccfbe59d51d0629d614dba6bf26ed168208742334d95a4c5b74d7d8f19fdcbd9f32fad84ed0f8983b780685d3b54122c40e97543260cb05accc47f8808d5a6f9984af599b1abfe326d73b9d6ad4cda54a38ef6f14c6e784f939bf17b17b5f94acd252dae1ddf4773e01bb4164fbb23ee6601f30ba40ce321f3239a3835c9dc45b7dee11483eb7a0cf100de0ea345f92818a1ecc9cde51a354024bf6d9232d3df780b3957e0e1eed3390c99ae3bfdcfa55cc34cd9d62c9d9ee54444298ec01ad0aaba8af272bff1787ff42e16c6c1c18ee1119fbd9be3b37feb662bdc3eb5a0eb907bb7e21ef6ed0863b40b8a50a263bee99d20aa53c8c1b9421b438718b046c678c06775326b6b8f0993833c73134e3f7a0aac190cdf174dc15716a258c741db5840c0f46e0fa6a693f3bffcb09793aa61c760d4e6d3e8793b87a9be269e7b62df164cef9367ef0414948322b5979a52c9444408c2245dbfd5071690eb483ba26d79e0249251b05b1c9033d3b9b09409f45bd68fe728608b6b67cfdfe51faa4f0c92278ec3a92c102ba9218feef47b410bc8de5e9137160fd314ab6e0bb9dd0b2f675229c9c2dabc83e4349b2f5bd9b225d0e73e839935d6e64f6ca94b143287e5cd0327c85c9baa85e56c4964bd331040e6d56ec552c198c1f0c2e7f9e95837ed57e1994d32c8c4b4a2b3696a0539e4fcfc3ccbf64bb687dc7151533a786fe34b228412989454f8ffd1843902ed3797e336d8655bc6255baa7646276804eb515830b80a7119b19890069316cdb753bbb2763bce0c75cb7edd5ea004bd1e58d0edb68d4eeb03a2d4af4d83283b6f91d18b0283059729414ab21fc4785154fd575ebee195e924c1befd9f63190fbca05c29afad3dba471777a89a1f5dd1759a973991e0c38f60bc180bc3b4fb24074beb3881d54d8b83f3f8d4ab312a6585ee039bf1628ffa9f6973738cfb58aad60e808a26689e8842026e48855f5c512896a6d7538f051dcb1d15e29a55bc546ef2a889d8c8b724ab7e9ede202da2133102faff31fb694a3f5fb2999fff662df30170e9da21af7e677818e97400459c3dd4a1f026541dbdd51eef94762f8d40fa1dbcb697fc6a4f26334a3d340b12f91dcdd2527e395b254d4ea55fd89d0ce93993cc72e7fe43ee2499ad0ebbd2c1dc6e92f4276a684ab4f98e2f32d8d8f0a720cd326e0e50d117acccf4eff2d49be882360aa1f277b560f2a84aee354c378b9f847751fac7ee75006283160431cbe0419808acfaa40b4d60fdbb6b5886dfe5752ffc6e9a76d7a777e9e7afa571db99af7a2af1856178a57a98088d67ddf6c1ffe8a757d00a24b4484f4e7a9a1de690d6786bfa6a5b0af0489d2f0e8c69190cf5229af2bdd3662d8e46788db27a4adbfeae0f3ab1579c5050cbaa47ffb00c968e820ec3cd809c90504f22d744fdfb100afe30e83bf3eb7249240bfd2e0f2fa175e00a82d764d7b6e3bc052ef11f6aa18381f379b9bfc4c6ead0c93fa98d6fc03c2e0eb937dcfeade6e6109622c096f64161712454814b86b6f94e4fb2153cc716539ff054265e866b816aa0843c036917041864f220f9756c95ccc6742bd789101a29418a57c38b965e52c1246cb44c76f0eca809f5490826a8f299a92aff7333fd4a8ed8b8a08108efdb0a1b6d43ee3e460da2ebe951eb4a4c892522ddbd4b3b81052d748af891f6c54a2841d03f4bcf5737663975e35975f73cddeda32d933132a21b9798054207b045b91dda3a8e978c5c3ce37162d6e9a6424c42adae5217d9e681000ee32054499045792a159274921e00265d7b2c09d3c2bfd29da8d12e8b785740ca8c2d74b77c814c7a6048481cb75e01ec7292c409ae9f84bd73c9942c1bdc4270e4703589aee95d4b90a0c3371d40a491273e0da98fa08598fe89f7c25b4b4603ffa2fecfe2c24007b17aabc843c64471e433a54b15d0c0117d0d86c3baa0516c701fa8b6d300d18724e546e27c978ae58d10da3bae2b6e3155edd04363d4a65de36d91d3a7be7c6b076e063824a4e7236daa0f3812a3d30c1464bb70b41c03ccf10ea84f3c8bf9ceb63f813622f79539fbeb3a31a38f64896bded036b9322e27eae3bc091d411fa9936f2b49df9cbf92e5764fc32bae3fedcfafbe93eaf6a3bb28dab0c145f7ce2e374dcc32db6be278b46db86cd708236ffc158b2be9fe0a5b01c37b585e5cddb92e7f599a75d2a25bbad4caa3b5f8ea5577556ad31f65317819f0e94c875119cf8962779366cd33eed1453befc1ae9969e22f32d1faeac14131878d3080d4ae80b9097838aa873f318648d6facd00c17fa9375aa64b2b3b1c28c7efaa7a16e02ab3008f8a3d746026235af071e68c8e31576113559ba474799373f6eac1d0fbf527a75f4167c855e1d49a56e01369c3a9321dc1a62888db35b9d93b69e896efe6752b78c3e5b64cfd326d946515a0a7d157c659aa87bd4f68c582398d02d7ec28c5d2cfbceec3276720118cbea2b67c0f1cc76c65c8b8456013ee561acd370b83cc0df5cc46d6d00596732749f678c58b6962cec1505ff6db1aab23028528d852bbbb7cc2822373eda487caa8364c0ffb5c6fb20ba61d7ab7adc285105cd3d324e41ed1c70ff2e6a44ef3973b98d9feb811a14c6e1476cc170f259edc354ac8af0c56c150d221384c6d4b5b4ff053624761d784e08ffb51cb6f0b00438c197b31b7f15412045d07adbefcd18e49fed453f4472c9b568fe5549668d4af5b33c82ee22a98309640459bb7a12d868b5769fa7f2f69aa9cbddc5594d36a39a263618523ddd6057c6cfabf795f14413aa8b85cf40bef33643712bd1ceb147765e727dcb6aeb8d6420292dc799fcde7b861194216a616339185111ad4b1e5346d1f21737d230f811aafdbb31a232678cea0431fe8778ea9e85a93d1043eb253c5f0477bcaeaa8f1b8f599e2b644dcd681f9a244218bf225f4a04b6ed16090d7f945f5936a77a9919855b0503ded95b0be9cb192c4a2b2cccdb3be1f7f0fb4dd2356f835f5ede427c9f6ff7074c78265d458aab4c49772ab4edc7c4a0fd893b9acce1c90c6cb620ac332471c9039aeb63c667ef28722c4638745c511aea84968df53ce5dc66bea93688a6ec699c248a64de4adaa4e14fc931b6781871334d1ae5b39e812f3f7580421dbff529e6bde374a73d31abc7e842130a789138759099e682ad36b5d73962ca7d46d36081d5cfaf3f4188f4dd9f4448ab68c2640708a9fb8a45640e965e78dfbe776f5a53ba2089e30c853913ed92819f5e5958c458d0f1fae96c84b614b64602557d63ea8a3c7f47dc19f32149530bf085e5f74ffd1efbe7e127826e148d0e92c176b706e1f338e6555126ac6ed6249edc5c44e93f852f7ba108d90ca6ef9a39db944829649ab55e8d251a8c4af4477c0d20a2ba7ca178ebcab56703159f4dec2ca10c1ca80d9f5bcb968f078c718284df9e4ef254a0b9a0f8b631168f9d4666dea140545d3d232de0be00f12c9ff0a34a16dec289e8de11693ba010f75deb453a3fec27e84d201cd7159fa78d7e7ff83976e5d9eaf5a40c5a59b1c0090987e3855481058d7439d3c8ed7b28a1eecac9d28f3aeecbcb83ecc130aa9e60a9a94c04243c77df715e7229ed5604310744bd84d1bc91f75446c0fc5ec317744559504a55ee4a096c7b7c80b8ac42a94afab72d274c1531019af2c4a883dfafad74341e4c7ff32e78a40c7b0291e4d14da660a36fc2d65928c42bfe8c2456a58081225a0dff7750cc7033ada09052f744754377ecd8344fa1fab9d54ad4c51c6683a01b3984f087e4c0130f0dce262675ea51a21ab7162928a1feb5013e0aa0a6f7dd8ae27c274d5f8984ba25005c425b798247d6923ca22f7292b1401cde33a93f5f9b526257e9e62d69bdb684173bac4bb209db3d7662831901e5e38156c83ab1a369037980c54ebc0cfc82cbdd07417ee4359f3e059b1b6a75b9a55339d2d87770b53b2b5e782fa9cec76612f9679260226476578a91c524fdf4592ccb85742404b2adb87a746bfb84f2a726ac5a874fd2e282cb7fe4f0ef28b33690e5a474c7408b8da822e4e141dc7ab9852324f759dcf78353879c2903ea708999f05cb10c1ecffec27cf6e30cd0b038a011e9271fe07bb3d2584842c659a03156a4083d46cac1dad66370cee8d6d2c96c1e18275708861388820e82cba23a917ce2b43407abc85a219909620ff74fdcaeace1c545d33acfcbbcac7ddb2b8d9432a64cdd9554", @ANYRESHEX=r1], 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$binfmt_register(r5, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r9, 0x0, 0x100000000}, 0x18) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) fcntl$getown(r4, 0x9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x2, 0x9}}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18009500"/24], &(0x7f0000000200)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='xen_mc_flush_reason\x00', r12}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) creat(&(0x7f0000000340)='./file1\x00', 0x1d5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES8=r10], 0x0, 0x28, 0x0, 0xffffffff}, 0x28) 2m1.081760833s ago: executing program 2 (id=1227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xa880) write$P9_RLOPEN(r1, &(0x7f0000000400)={0x18, 0xd, 0x2, {{0x1, 0x3, 0x7}, 0x81}}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) epoll_create(0x3ff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 2m0.923023456s ago: executing program 2 (id=1235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[], 0xf8}}, 0x0) 2m0.885810827s ago: executing program 33 (id=1235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[], 0xf8}}, 0x0) 4.869694649s ago: executing program 5 (id=3565): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', &(0x7f0000001080)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x8, 0x5, 0xa2ca, 0xfffffffffffffffb, 0x1, 0x5}}, &(0x7f00000010c0), 0x200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400d163b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffdfc, @rand_addr=' \x01\x00'}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x4}}, 0x20) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000005c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000900)="51b6fa2f70", 0x5, 0x200980) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xff10, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) 4.841263139s ago: executing program 5 (id=3566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) 4.345482398s ago: executing program 6 (id=3583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 4.304065819s ago: executing program 6 (id=3585): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x5, 0x1, @vifc_lcl_ifindex=r5, @multicast2}, 0x10) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='kfree\x00', r7}, 0x18) fcntl$setpipe(r6, 0x407, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) 3.992985535s ago: executing program 5 (id=3590): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, 0x0, 0x64, 0x183000, 0x23456}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 3.917770976s ago: executing program 6 (id=3592): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x24, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x75}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x58, &(0x7f0000000040)=""/88, 0x41100, 0x20, '\x00', r4, @fallback=0x16, r5, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x6, 0xf8}, 0x10, r7, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x5, 0x9}], 0x10, 0x6}, 0x94) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e2000000000000000100"/376], 0x178) close(r0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lremovexattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@random={'osx.', 'GPL\x00'}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 3.854366097s ago: executing program 5 (id=3594): futex_waitv(&(0x7f0000001180)=[{0x618a, &(0x7f0000000040)=0x5, 0x2}, {0x4, &(0x7f0000000180)=0xd, 0x82}, {0x8e, &(0x7f00000001c0)=0xfffffffffffffffa, 0x2}, {0x0, &(0x7f0000000200)=0x5, 0x82}, {0x8, &(0x7f0000000240)=0x6, 0x86}, {0x2, 0x0, 0x82}], 0x6, 0x0, &(0x7f00000017c0), 0x1) 3.832293098s ago: executing program 5 (id=3595): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000003000000314e606e980800000000000080000000185a00000f0000000000000000000000850000000c00000061534000ecffffff85100000faffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0xb4, &(0x7f0000000480)=""/180, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x1, 0x5, 0x2, 0xa}], 0x10, 0x5}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16=r2, @ANYRES64=r2, @ANYRESOCT=r3, @ANYRES16=r1, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef48944010165fbcfdd", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r5, @ANYBLOB, @ANYRESDEC=r3, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r4, @ANYRES8=r3, @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16=r4], 0x94, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f00000006c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x5c60e4f2698c1b6f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2) ioctl$FIONCLEX(r6, 0x5450) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r7 = socket(0x10, 0x80003, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) close_range(r7, 0xffffffffffffffff, 0x1000000000000000) 3.602434233s ago: executing program 5 (id=3597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000001850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000001880)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x853}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nodioread_nolock}, {@dax_never}, {@inlinecrypt}]}, 0x3, 0x487, &(0x7f0000001d80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000002070103000000000000000002000007240007800800024000000003080001400000000408000240e0cc"], 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000001280)='./file0\x00', 0x1000, &(0x7f0000000f80)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRESDEC=r8, @ANYRESHEX=r3, @ANYRESHEX=0x0, @ANYRES8=r2, @ANYRES8, @ANYRES16=r5, @ANYRESOCT=r5], 0xfe, 0x679, &(0x7f0000002240)="$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") r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r9, &(0x7f0000000040)={0x11, 0x1, r10, 0x1, 0x9}, 0x6) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r10, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r12 = fsmount(r7, 0x1, 0x4) r13 = openat$cgroup_subtree(r12, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) 3.309833598s ago: executing program 0 (id=3601): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000bc0)={0x1c0, 0x14, 0x8, 0x201, 0x70bd25, 0x25dfdbfe, {0x5, 0x0, 0x2}, [@typed={0x8, 0xee, 0x0, 0x0, @u32=0xd562}, @typed={0x14, 0x145, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0xd6, 0x0, 0x0, @pid=r6}, @nested={0x146, 0xa9, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @uid=r7}, @typed={0x8, 0xff, 0x0, 0x0, @u32=0x9}, @generic="6b3abb348e840054e2475a36e89c4d5aba6df15d6f191fb62507254b417a48945ecf579015ca6a1f885dc3290c29e8a842245a7521510415025d77faafbcbd6b26dc84f8b09ea261a954209ca50f0d293de76032391cb8653ade9fbb3009c0600b6098a8e258e8d02bf8db90f1200f58a5c142df6f6b0f718b5e95249f2c49c697784a69f53385ec41ea92a833ea510a06bf3cbe5a8a2709a076344e664cc3a16b29cef2c8c6029c6922d4e7c51337c99197cee742c508e2eab554258170e0db46de982f675e1477ceb729834540135ae959c1ac435fed", @generic="47c00c8f6bbed0c218a8a68f69cdc7b7a23b820dd5ecf418e3aef6326eeaa1e7aaa8f7b2302811cd6ce9b72e060678f99781926a3e321bad9fca565f6c1038161374b46516fefb2b8390072f4ea6b6d812d04bfa0610921e3b8ac0"]}, @nested={0x30, 0x6, 0x0, 0x1, [@typed={0x4, 0xad}, @typed={0xc, 0xd7, 0x0, 0x0, @u64}, @typed={0x14, 0x149, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}, @nested={0x4, 0x4}, @nested={0x4, 0x12}]}, @typed={0x8, 0x13c, 0x0, 0x0, @pid=r8}, @typed={0x8, 0x49, 0x0, 0x0, @uid=r9}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x88c4}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x600, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000900)=""/185, 0xb9}], 0x2}, 0x4}, {{0x0, 0x0, 0x0}, 0x618}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f0000000600)=""/219, 0xdb}], 0x2}, 0xd}], 0x3, 0x40010041, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r11, 0x0, &(0x7f0000000340)=@udp6}, 0x20) 3.305954068s ago: executing program 0 (id=3602): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) getsockname$packet(r3, 0x0, &(0x7f0000000200)) write(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r7, r7}, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt(r8, 0x6, 0x17, 0x0, 0x0) r9 = syz_io_uring_setup(0x10e, &(0x7f00000003c0)={0x0, 0x2000b6f8, 0x0, 0x0, 0x2142}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r9, 0x47f9, 0x8eb4, 0x0, 0x0, 0x0) pause() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r12}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 2.433386134s ago: executing program 0 (id=3609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 2.282764988s ago: executing program 0 (id=3613): r0 = inotify_init() r1 = syz_clone(0xc000800, &(0x7f0000000500)="095066b207a25d0e333a6fb3a1c4ec72af32a828f3c3c4492a5f4658aa633d9ebd4caa06a651665f8b45663cf720e91bb2ba44a0f383f7e4bf0c2c9c888fd970fc99d5e6d77e59a6429224efdb9cb698c74cfb6b66ea97aac71d12f374fdf7a2dde9de3b6858b42563", 0x69, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000c80)="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") fcntl$setown(r0, 0x8, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009eb4c5d1ae88e022baa832948e1de250783b01eb73526de2a366ec5046ff0d9bd91c18270f9d953de734a3a4ceceb6d760464e3045f9f143cdaa19f014b3e98e32b08b0dc85d9a59d387bf47e16a8d68edd0958b76323b196db96efe059dd00493fed6944b624c99533ccd0ddcc77d01a0602e06f9c310dec30eef82f82ee678f2950942265c3b85f23d082b08625e3e0f7b077120bbb6dc002f0df63c5e7812cd4865c68f88aad803c76567d9048f127bc638aecdb9fe390cd31a3296f1de9a62850ff0335948f134"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x26c841ac7dfb4727}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000001200), 0x10) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r11, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x40, 0x140a, 0x800, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 2.238516108s ago: executing program 0 (id=3614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) socketpair(0x15, 0x4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x141141, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20ffffffbc}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x831, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xff}, 0x0, 0xfffdffdfffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000)=r0, 0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001000)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x101, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x4]}}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0x37}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 2.033856022s ago: executing program 0 (id=3617): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x801, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 884.444764ms ago: executing program 6 (id=3621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x40000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x105200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x406, 0x0, 0xd5, 0x4}]}) 813.679995ms ago: executing program 6 (id=3622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 773.503606ms ago: executing program 1 (id=3624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x44, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x93, 0x7ffc0004}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 713.518777ms ago: executing program 1 (id=3625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x7c2}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) socket(0x21, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20044890}, 0x240440d4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="2f3254c3fa6239d3b0a3cacab8286758c5642eabb71f9eedbb3217bdf03dc1b42cb6879fbf4f43be13000050a90a25a687272b9af18c55ac33db9cc84ecbcfd1658eb5112bb2060aefd19f73c887d44ed46643c70663e617d7e60b013366e170b673f67bbc69356bd5d7575ca5399751a91b9e3f3401c9556ef4a15d1b27997765"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcae, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="7048d70526de07bccab6a58b641ba74d15dd88570000"], 0x1c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5454}, 0x94) 439.730322ms ago: executing program 3 (id=3626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) 385.211993ms ago: executing program 6 (id=3627): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c9459d22eb6a3f6de5f13f1f14050000", 0x10}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b0000"], 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700), 0x3, 0x4e2, &(0x7f0000001c80)="$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") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) chown(&(0x7f0000000040)='./file1\x00', r1, r2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@discard}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0xd9726125b1f0997, &(0x7f0000000c00)={[{@inlinecrypt}, {@nomblk_io_submit}, {@lazytime}, {@grpquota}, {@grpjquota}, {@minixdf}, {@journal_async_commit}, {}, {@test_dummy_encryption}], [{@appraise}, {@fsmagic={'fsmagic', 0x3d, 0xe}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_role={'obj_role', 0x3d, '\xba\xb2\xd2\xb6[\xfe6&\xec\xde[\x97E\x97\xc5\xcb\t\xedCQ\x05\xd6\xe2\x04\xc8\xf4\xb9W\x8b\x1bX5\xa7\xdb\xb7\xd5\xe1\xb2\fd{\xb9\xc5\x9c\xe1s\xe6E.%\x97\xc6\xfe:\xbde\xea\xba6A\xd0.\xce\\\x88\xc1\xf2bq\xb8\xaf\x82P\x1f\x1d#\v<>q\xc9\x84^!#NA#$5E\xd9Cxs\xac\xcf\xff\xf0\x8a\xd9\x05\x00\x00\x00\xa7\x06$\x8fd\x92\xbb6\xc3\x90\xbd\x937n4\\\x8e\x85\x02F\xa6V\xab\x04\xb7\xf3\xd4\x9f\x18\x8f\xb6\x84\xf6?\xde\xa8\xd4\x0e%`\a\"\x1fT\xf8\xde\xe5\xb1n\\\xb3\xc8\'3\x90R\xa9\xaa\x19\xd87\xe7d?\xa4\x91)\xf1`\x8cE\x90\xc4\'}x\xdc\x9c\fGs\r\xa6\xc6\xbc\xc7/?V\x95\x14\xfd\x94\x1a\xc2\"c/\x91\xd3\xd8\xd9\x16Z\vq\xe7WI\x9d\xf4(\xd5=\xa2\xe6\"a\xa7\x93\xf2\x19\xe2P\xd0\x89_ay\x91\x13\xf60xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0xc, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x75, 0x7}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}, @datasec={0x9, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x6, 0x4}], "dad2a3"}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x3}, @var={0x10, 0x0, 0x0, 0xe, 0x5, 0x2}, @struct={0xc, 0x2, 0x0, 0x4, 0x1, 0x10000, [{0x7, 0x0, 0x1}, {0x7, 0x2, 0x4}]}, @const={0x4}, @union={0x1, 0x4, 0x0, 0x5, 0x1, 0x5, [{0xd, 0x0, 0x5}, {0x5, 0x2, 0xe062}, {0xf, 0x3}, {0x1, 0x1, 0xc3fd}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f, 0x30, 0x30, 0x30, 0x2e, 0x2e, 0x30, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000f80)=""/4096, 0xf4, 0x1000, 0x1, 0x3287, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x3, 0x0, 0x0, 0x4}, @struct={0x0, 0x0, 0x0, 0x4, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x45}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r11, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r14}, 0x10) io_setup(0x3, &(0x7f0000000340)) r15 = openat$vsock(0xffffffffffffff9c, &(0x7f00000009c0), 0x408000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x25, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x8, 0x1, 0x9, 0x5, 0x55614b6}, @jmp={0x5, 0x1, 0x5, 0x2, 0x7, 0xfffffffffffffefe, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xf797, 0xc6, &(0x7f0000000680)=""/198, 0x41000, 0x41, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f00000008c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x9, 0x9f5, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000ac0)=[r10, r11, 0x1, r12, r15], &(0x7f0000000b00)=[{0x4, 0x1, 0xb, 0x7}, {0x4, 0x2, 0x2, 0xb}, {0x1, 0x3, 0xa, 0x8}, {0x4, 0x2, 0xa, 0x1}, {0x2, 0x4, 0xe, 0x6}, {0x3, 0x2, 0x6, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 13][T15473] EXT4-fs (loop5): mount failed [ 179.478343][T15473] loop5: detected capacity change from 0 to 1024 [ 179.498517][T15473] EXT4-fs: Ignoring removed bh option [ 179.509910][T15473] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.540757][T15473] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 179.549933][T15473] System zones: 0-1, 3-12 [ 179.556315][T15473] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.3122: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.571695][T15473] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3122: Failed to acquire dquot type 0 [ 179.587728][T15473] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.3122: Freeing blocks not in datazone - block = 0, count = 4096 [ 179.604001][T15473] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3122: Invalid inode bitmap blk 0 in block_group 0 [ 179.617174][T15473] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 179.626615][T15261] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.642583][T15261] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:42: Failed to release dquot type 0 [ 179.654462][T15473] EXT4-fs (loop5): 1 orphan inode deleted [ 179.661425][T15473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.689055][T15504] netlink: 'syz.0.3129': attribute type 2 has an invalid length. [ 179.696846][T15504] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 179.778415][T15512] siw: device registration error -23 [ 179.806650][T15516] siw: device registration error -23 [ 179.881403][T15473] netlink: 'syz.5.3122': attribute type 21 has an invalid length. [ 180.063392][T15537] ALSA: seq fatal error: cannot create timer (-19) [ 180.102581][T15543] netlink: 'syz.1.3138': attribute type 21 has an invalid length. [ 180.369234][T15554] loop3: detected capacity change from 0 to 164 [ 180.401556][ T3965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.470980][T15560] netlink: 'syz.1.3145': attribute type 4 has an invalid length. [ 180.478716][T15560] __nla_validate_parse: 7 callbacks suppressed [ 180.478728][T15560] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3145'. [ 181.290540][T15575] support for the xor transformation has been removed. [ 181.419308][T15583] netlink: 'syz.3.3155': attribute type 2 has an invalid length. [ 181.427113][T15583] netlink: 'syz.3.3155': attribute type 1 has an invalid length. [ 181.434857][T15583] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3155'. [ 181.497718][T15583] FAULT_INJECTION: forcing a failure. [ 181.497718][T15583] name failslab, interval 1, probability 0, space 0, times 0 [ 181.510397][T15583] CPU: 1 UID: 0 PID: 15583 Comm: syz.3.3155 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.510502][T15583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.510512][T15583] Call Trace: [ 181.510519][T15583] [ 181.510526][T15583] __dump_stack+0x1d/0x30 [ 181.510548][T15583] dump_stack_lvl+0xe8/0x140 [ 181.510609][T15583] dump_stack+0x15/0x1b [ 181.510658][T15583] should_fail_ex+0x265/0x280 [ 181.510684][T15583] should_failslab+0x8c/0xb0 [ 181.510707][T15583] kmem_cache_alloc_noprof+0x50/0x310 [ 181.510766][T15583] ? skb_clone+0x151/0x1f0 [ 181.510839][T15583] skb_clone+0x151/0x1f0 [ 181.510910][T15583] __netlink_deliver_tap+0x2c9/0x500 [ 181.511017][T15583] ? netlink_attachskb+0x2d0/0x610 [ 181.511041][T15583] netlink_sendskb+0x126/0x150 [ 181.511064][T15583] netlink_unicast+0x2a2/0x690 [ 181.511143][T15583] netlink_ack+0x4c8/0x500 [ 181.511165][T15583] netlink_rcv_skb+0x192/0x220 [ 181.511280][T15583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.511431][T15583] genl_rcv+0x28/0x40 [ 181.511459][T15583] netlink_unicast+0x5bd/0x690 [ 181.511483][T15583] netlink_sendmsg+0x58b/0x6b0 [ 181.511510][T15583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.511563][T15583] __sock_sendmsg+0x145/0x180 [ 181.511672][T15583] ____sys_sendmsg+0x31e/0x4e0 [ 181.511700][T15583] ___sys_sendmsg+0x17b/0x1d0 [ 181.511733][T15583] __x64_sys_sendmsg+0xd4/0x160 [ 181.511822][T15583] x64_sys_call+0x191e/0x2ff0 [ 181.511840][T15583] do_syscall_64+0xd2/0x200 [ 181.511896][T15583] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 181.511922][T15583] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.511956][T15583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.511976][T15583] RIP: 0033:0x7fa69212eba9 [ 181.511993][T15583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.512080][T15583] RSP: 002b:00007fa690b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.512096][T15583] RAX: ffffffffffffffda RBX: 00007fa692375fa0 RCX: 00007fa69212eba9 [ 181.512107][T15583] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 181.512118][T15583] RBP: 00007fa690b97090 R08: 0000000000000000 R09: 0000000000000000 [ 181.512129][T15583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.512141][T15583] R13: 00007fa692376038 R14: 00007fa692375fa0 R15: 00007ffe54c79b08 [ 181.512213][T15583] [ 181.829516][T15587] loop5: detected capacity change from 0 to 512 [ 181.865918][T15587] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 182.045178][T15587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 182.066747][T15587] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3157: corrupted in-inode xattr: e_value size too large [ 182.112146][T15587] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3157: couldn't read orphan inode 15 (err -117) [ 182.134974][T15587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.150542][T15598] support for the xor transformation has been removed. [ 182.178452][T15587] FAULT_INJECTION: forcing a failure. [ 182.178452][T15587] name failslab, interval 1, probability 0, space 0, times 0 [ 182.191182][T15587] CPU: 1 UID: 0 PID: 15587 Comm: syz.5.3157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.191209][T15587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.191222][T15587] Call Trace: [ 182.191230][T15587] [ 182.191239][T15587] __dump_stack+0x1d/0x30 [ 182.191341][T15587] dump_stack_lvl+0xe8/0x140 [ 182.191357][T15587] dump_stack+0x15/0x1b [ 182.191371][T15587] should_fail_ex+0x265/0x280 [ 182.191414][T15587] should_failslab+0x8c/0xb0 [ 182.191434][T15587] kmem_cache_alloc_node_noprof+0x57/0x320 [ 182.191459][T15587] ? __alloc_skb+0x101/0x320 [ 182.191524][T15587] __alloc_skb+0x101/0x320 [ 182.191548][T15587] netlink_alloc_large_skb+0xba/0xf0 [ 182.191586][T15587] netlink_sendmsg+0x3cf/0x6b0 [ 182.191616][T15587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.191640][T15587] __sock_sendmsg+0x145/0x180 [ 182.191685][T15587] ____sys_sendmsg+0x31e/0x4e0 [ 182.191715][T15587] ___sys_sendmsg+0x17b/0x1d0 [ 182.191801][T15587] __x64_sys_sendmsg+0xd4/0x160 [ 182.191872][T15587] x64_sys_call+0x191e/0x2ff0 [ 182.191894][T15587] do_syscall_64+0xd2/0x200 [ 182.191924][T15587] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.191961][T15587] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 182.192056][T15587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.192078][T15587] RIP: 0033:0x7fca8d68eba9 [ 182.192092][T15587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.192133][T15587] RSP: 002b:00007fca8c0ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.192150][T15587] RAX: ffffffffffffffda RBX: 00007fca8d8d5fa0 RCX: 00007fca8d68eba9 [ 182.192164][T15587] RDX: 0000000000000840 RSI: 00002000000002c0 RDI: 0000000000000003 [ 182.192177][T15587] RBP: 00007fca8c0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 182.192231][T15587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.192244][T15587] R13: 00007fca8d8d6038 R14: 00007fca8d8d5fa0 R15: 00007ffe03599578 [ 182.192260][T15587] [ 182.474453][ T3965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.500493][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 182.500508][ T29] audit: type=1400 audit(1758212048.561:5645): avc: denied { read } for pid=15615 comm="syz.5.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 182.501381][T15618] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3164'. [ 182.602128][ T29] audit: type=1400 audit(1758212048.661:5646): avc: denied { bind } for pid=15615 comm="syz.5.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.689435][ T29] audit: type=1400 audit(1758212048.731:5647): avc: denied { ioctl } for pid=15622 comm="syz.1.3170" path="socket:[36602]" dev="sockfs" ino=36602 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.714224][ T29] audit: type=1400 audit(1758212048.731:5648): avc: denied { bind } for pid=15622 comm="syz.1.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.792868][T15638] FAULT_INJECTION: forcing a failure. [ 182.792868][T15638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.805951][T15638] CPU: 1 UID: 0 PID: 15638 Comm: syz.1.3175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.805979][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.805992][T15638] Call Trace: [ 182.806059][T15638] [ 182.806067][T15638] __dump_stack+0x1d/0x30 [ 182.806089][T15638] dump_stack_lvl+0xe8/0x140 [ 182.806108][T15638] dump_stack+0x15/0x1b [ 182.806125][T15638] should_fail_ex+0x265/0x280 [ 182.806224][T15638] should_fail+0xb/0x20 [ 182.806282][T15638] should_fail_usercopy+0x1a/0x20 [ 182.806304][T15638] _copy_to_user+0x20/0xa0 [ 182.806336][T15638] simple_read_from_buffer+0xb5/0x130 [ 182.806431][T15638] proc_fail_nth_read+0x10e/0x150 [ 182.806460][T15638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.806487][T15638] vfs_read+0x1a5/0x770 [ 182.806591][T15638] ? __rcu_read_unlock+0x4f/0x70 [ 182.806677][T15638] ? __fget_files+0x184/0x1c0 [ 182.806703][T15638] ksys_read+0xda/0x1a0 [ 182.806723][T15638] __x64_sys_read+0x40/0x50 [ 182.806741][T15638] x64_sys_call+0x27bc/0x2ff0 [ 182.806790][T15638] do_syscall_64+0xd2/0x200 [ 182.806817][T15638] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.806837][T15638] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 182.806879][T15638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.806901][T15638] RIP: 0033:0x7fbca6a8d5bc [ 182.806917][T15638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.806936][T15638] RSP: 002b:00007fbca54f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.806954][T15638] RAX: ffffffffffffffda RBX: 00007fbca6cd5fa0 RCX: 00007fbca6a8d5bc [ 182.806965][T15638] RDX: 000000000000000f RSI: 00007fbca54f70a0 RDI: 0000000000000007 [ 182.807037][T15638] RBP: 00007fbca54f7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.807050][T15638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.807064][T15638] R13: 00007fbca6cd6038 R14: 00007fbca6cd5fa0 R15: 00007ffc2e1f8f28 [ 182.807141][T15638] [ 183.058690][ T29] audit: type=1400 audit(1758212049.111:5649): avc: denied { read write } for pid=15639 comm="syz.5.3177" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 183.082249][ T29] audit: type=1400 audit(1758212049.111:5650): avc: denied { open } for pid=15639 comm="syz.5.3177" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 183.119516][ T6385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.147501][ T6385] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.346068][T15642] SELinux: Context system_u:object is not valid (left unmapped). [ 183.346739][ T29] audit: type=1400 audit(1758212049.401:5651): avc: denied { mac_admin } for pid=15639 comm="syz.5.3177" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.415277][ T29] audit: type=1400 audit(1758212049.411:5652): avc: denied { relabelto } for pid=15639 comm="syz.5.3177" name="cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 183.441738][ T29] audit: type=1400 audit(1758212049.411:5653): avc: denied { associate } for pid=15639 comm="syz.5.3177" name="cgroup.procs" dev="cgroup" ino=298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 183.531839][ T29] audit: type=1400 audit(1758212049.471:5654): avc: denied { unmount } for pid=13551 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.556858][T15658] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3181'. [ 183.611011][T15666] FAULT_INJECTION: forcing a failure. [ 183.611011][T15666] name failslab, interval 1, probability 0, space 0, times 0 [ 183.623674][T15666] CPU: 1 UID: 0 PID: 15666 Comm: syz.0.3183 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.623741][T15666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.623827][T15666] Call Trace: [ 183.623834][T15666] [ 183.623842][T15666] __dump_stack+0x1d/0x30 [ 183.623864][T15666] dump_stack_lvl+0xe8/0x140 [ 183.623884][T15666] dump_stack+0x15/0x1b [ 183.623902][T15666] should_fail_ex+0x265/0x280 [ 183.623962][T15666] should_failslab+0x8c/0xb0 [ 183.624056][T15666] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 183.624105][T15666] ? make_vfsuid+0x49/0xa0 [ 183.624141][T15666] ? v9fs_session_init+0x4b/0xde0 [ 183.624161][T15666] kstrdup+0x3e/0xd0 [ 183.624186][T15666] v9fs_session_init+0x4b/0xde0 [ 183.624208][T15666] ? __rcu_read_unlock+0x4f/0x70 [ 183.624304][T15666] ? avc_has_perm_noaudit+0x1b1/0x200 [ 183.624386][T15666] ? should_fail_ex+0xdb/0x280 [ 183.624404][T15666] ? v9fs_mount+0x51/0x5c0 [ 183.624429][T15666] ? should_failslab+0x8c/0xb0 [ 183.624449][T15666] ? __kmalloc_cache_noprof+0x189/0x320 [ 183.624534][T15666] v9fs_mount+0x67/0x5c0 [ 183.624556][T15666] ? selinux_capable+0x31/0x40 [ 183.624652][T15666] ? __pfx_v9fs_mount+0x10/0x10 [ 183.624677][T15666] legacy_get_tree+0x78/0xd0 [ 183.624696][T15666] vfs_get_tree+0x57/0x1d0 [ 183.624788][T15666] do_new_mount+0x207/0x5e0 [ 183.624811][T15666] ? security_capable+0x83/0x90 [ 183.624852][T15666] path_mount+0x4a4/0xb20 [ 183.624871][T15666] ? user_path_at+0x109/0x130 [ 183.624902][T15666] __se_sys_mount+0x28f/0x2e0 [ 183.624929][T15666] __x64_sys_mount+0x67/0x80 [ 183.625017][T15666] x64_sys_call+0x2b4d/0x2ff0 [ 183.625039][T15666] do_syscall_64+0xd2/0x200 [ 183.625144][T15666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.625281][T15666] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.625379][T15666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.625397][T15666] RIP: 0033:0x7fb28953eba9 [ 183.625411][T15666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.625425][T15666] RSP: 002b:00007fb287f9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.625444][T15666] RAX: ffffffffffffffda RBX: 00007fb289785fa0 RCX: 00007fb28953eba9 [ 183.625457][T15666] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 183.625538][T15666] RBP: 00007fb287f9f090 R08: 0000200000000080 R09: 0000000000000000 [ 183.625549][T15666] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000002 [ 183.625559][T15666] R13: 00007fb289786038 R14: 00007fb289785fa0 R15: 00007ffe74cd1c88 [ 183.625576][T15666] [ 183.851717][T15668] loop3: detected capacity change from 0 to 512 [ 183.911042][T15670] ALSA: seq fatal error: cannot create timer (-19) [ 183.962141][T15668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.018496][T15668] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.052754][T15668] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3185: corrupted xattr block 19: overlapping e_value [ 184.096371][T15668] EXT4-fs (loop3): Remounting filesystem read-only [ 184.103712][T15668] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 184.125990][T15688] loop5: detected capacity change from 0 to 164 [ 184.132360][T15668] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 184.156546][T15668] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 184.220154][T13551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.486952][T15703] loop3: detected capacity change from 0 to 128 [ 184.514610][T15703] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.547635][T15703] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.668639][T13551] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.838656][T15716] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3202'. [ 184.944333][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'. [ 185.011469][T15729] FAULT_INJECTION: forcing a failure. [ 185.011469][T15729] name failslab, interval 1, probability 0, space 0, times 0 [ 185.024209][T15729] CPU: 0 UID: 0 PID: 15729 Comm: syz.6.3206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.024236][T15729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.024248][T15729] Call Trace: [ 185.024255][T15729] [ 185.024262][T15729] __dump_stack+0x1d/0x30 [ 185.024284][T15729] dump_stack_lvl+0xe8/0x140 [ 185.024303][T15729] dump_stack+0x15/0x1b [ 185.024319][T15729] should_fail_ex+0x265/0x280 [ 185.024343][T15729] should_failslab+0x8c/0xb0 [ 185.024367][T15729] kmem_cache_alloc_noprof+0x50/0x310 [ 185.024391][T15729] ? mas_alloc_nodes+0x265/0x520 [ 185.024422][T15729] mas_alloc_nodes+0x265/0x520 [ 185.024454][T15729] mas_preallocate+0x33e/0x520 [ 185.024486][T15729] mmap_region+0xbdd/0x1630 [ 185.024529][T15729] do_mmap+0x9b3/0xbe0 [ 185.024563][T15729] vm_mmap_pgoff+0x17a/0x2e0 [ 185.024599][T15729] ksys_mmap_pgoff+0xc2/0x310 [ 185.024617][T15729] ? __x64_sys_mmap+0x49/0x70 [ 185.024640][T15729] x64_sys_call+0x14a3/0x2ff0 [ 185.024657][T15729] do_syscall_64+0xd2/0x200 [ 185.024681][T15729] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.024700][T15729] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.024723][T15729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.024740][T15729] RIP: 0033:0x7f801a6eebe3 [ 185.024752][T15729] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 185.024766][T15729] RSP: 002b:00007f801914ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 185.024782][T15729] RAX: ffffffffffffffda RBX: 000000000000054e RCX: 00007f801a6eebe3 [ 185.024793][T15729] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 185.024803][T15729] RBP: 0000200000001782 R08: 00000000ffffffff R09: 0000000000000000 [ 185.024813][T15729] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 185.024823][T15729] R13: 00007f801914eef0 R14: 00007f801914eeb0 R15: 00002000000003c0 [ 185.024839][T15729] [ 185.299401][T15746] ALSA: seq fatal error: cannot create timer (-19) [ 185.435769][T15760] FAULT_INJECTION: forcing a failure. [ 185.435769][T15760] name failslab, interval 1, probability 0, space 0, times 0 [ 185.448442][T15760] CPU: 0 UID: 0 PID: 15760 Comm: syz.5.3218 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.448550][T15760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.448563][T15760] Call Trace: [ 185.448571][T15760] [ 185.448579][T15760] __dump_stack+0x1d/0x30 [ 185.448601][T15760] dump_stack_lvl+0xe8/0x140 [ 185.448641][T15760] dump_stack+0x15/0x1b [ 185.448659][T15760] should_fail_ex+0x265/0x280 [ 185.448684][T15760] should_failslab+0x8c/0xb0 [ 185.448816][T15760] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 185.448846][T15760] ? kstrdup_const+0x3e/0x50 [ 185.448870][T15760] kstrdup+0x3e/0xd0 [ 185.448916][T15760] kstrdup_const+0x3e/0x50 [ 185.448939][T15760] alloc_vfsmnt+0xe7/0x300 [ 185.449043][T15760] clone_mnt+0x46/0x630 [ 185.449113][T15760] copy_tree+0xb9/0x8c0 [ 185.449134][T15760] ? alloc_mnt_ns+0x72/0x270 [ 185.449154][T15760] ? __kmalloc_cache_noprof+0x22e/0x320 [ 185.449183][T15760] __do_loopback+0x108/0x280 [ 185.449227][T15760] vfs_open_tree+0x2c9/0x540 [ 185.449251][T15760] __x64_sys_open_tree+0x45/0xc0 [ 185.449274][T15760] x64_sys_call+0x2a87/0x2ff0 [ 185.449346][T15760] do_syscall_64+0xd2/0x200 [ 185.449464][T15760] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.449491][T15760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.449514][T15760] RIP: 0033:0x7fca8d68eba9 [ 185.449530][T15760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.449554][T15760] RSP: 002b:00007fca8c0ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 185.449575][T15760] RAX: ffffffffffffffda RBX: 00007fca8d8d5fa0 RCX: 00007fca8d68eba9 [ 185.449589][T15760] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 185.449646][T15760] RBP: 00007fca8c0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 185.449657][T15760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.449668][T15760] R13: 00007fca8d8d6038 R14: 00007fca8d8d5fa0 R15: 00007ffe03599578 [ 185.449734][T15760] [ 185.692300][T15763] support for the xor transformation has been removed. [ 185.756873][T15769] FAULT_INJECTION: forcing a failure. [ 185.756873][T15769] name failslab, interval 1, probability 0, space 0, times 0 [ 185.769543][T15769] CPU: 1 UID: 0 PID: 15769 Comm: syz.0.3221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.769570][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.769581][T15769] Call Trace: [ 185.769586][T15769] [ 185.769593][T15769] __dump_stack+0x1d/0x30 [ 185.769624][T15769] dump_stack_lvl+0xe8/0x140 [ 185.769645][T15769] dump_stack+0x15/0x1b [ 185.769662][T15769] should_fail_ex+0x265/0x280 [ 185.769738][T15769] should_failslab+0x8c/0xb0 [ 185.769770][T15769] __kmalloc_node_noprof+0xa9/0x410 [ 185.769793][T15769] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 185.769827][T15769] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 185.769938][T15769] ? cred_has_capability+0x210/0x280 [ 185.769976][T15769] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 185.770022][T15769] __vmalloc_noprof+0x83/0xc0 [ 185.770047][T15769] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 185.770070][T15769] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 185.770268][T15769] ? bpf_prog_alloc+0x2a/0x150 [ 185.770290][T15769] bpf_prog_alloc+0x3c/0x150 [ 185.770318][T15769] bpf_prog_load+0x514/0x1070 [ 185.770412][T15769] ? security_bpf+0x2b/0x90 [ 185.770446][T15769] __sys_bpf+0x462/0x7b0 [ 185.770475][T15769] __x64_sys_bpf+0x41/0x50 [ 185.770499][T15769] x64_sys_call+0x2aea/0x2ff0 [ 185.770521][T15769] do_syscall_64+0xd2/0x200 [ 185.770623][T15769] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.770647][T15769] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.770675][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.770698][T15769] RIP: 0033:0x7fb28953eba9 [ 185.770714][T15769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.770745][T15769] RSP: 002b:00007fb287f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.770766][T15769] RAX: ffffffffffffffda RBX: 00007fb289785fa0 RCX: 00007fb28953eba9 [ 185.770779][T15769] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 185.770812][T15769] RBP: 00007fb287f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.770826][T15769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.770839][T15769] R13: 00007fb289786038 R14: 00007fb289785fa0 R15: 00007ffe74cd1c88 [ 185.770860][T15769] [ 185.770867][T15769] syz.0.3221: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 186.010124][T15769] CPU: 1 UID: 0 PID: 15769 Comm: syz.0.3221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.010150][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.010162][T15769] Call Trace: [ 186.010169][T15769] [ 186.010176][T15769] __dump_stack+0x1d/0x30 [ 186.010194][T15769] dump_stack_lvl+0xe8/0x140 [ 186.010216][T15769] dump_stack+0x15/0x1b [ 186.010292][T15769] warn_alloc+0x12b/0x1a0 [ 186.010357][T15769] ? should_failslab+0x8c/0xb0 [ 186.010454][T15769] __vmalloc_node_range_noprof+0x497/0xe00 [ 186.010494][T15769] ? cred_has_capability+0x210/0x280 [ 186.010516][T15769] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 186.010575][T15769] __vmalloc_noprof+0x83/0xc0 [ 186.010602][T15769] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 186.010628][T15769] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 186.010725][T15769] ? bpf_prog_alloc+0x2a/0x150 [ 186.010751][T15769] bpf_prog_alloc+0x3c/0x150 [ 186.010775][T15769] bpf_prog_load+0x514/0x1070 [ 186.010806][T15769] ? security_bpf+0x2b/0x90 [ 186.010823][T15769] __sys_bpf+0x462/0x7b0 [ 186.010930][T15769] __x64_sys_bpf+0x41/0x50 [ 186.010954][T15769] x64_sys_call+0x2aea/0x2ff0 [ 186.011105][T15769] do_syscall_64+0xd2/0x200 [ 186.011134][T15769] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 186.011158][T15769] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 186.011187][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.011243][T15769] RIP: 0033:0x7fb28953eba9 [ 186.011258][T15769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.011282][T15769] RSP: 002b:00007fb287f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.011299][T15769] RAX: ffffffffffffffda RBX: 00007fb289785fa0 RCX: 00007fb28953eba9 [ 186.011310][T15769] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 186.011321][T15769] RBP: 00007fb287f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.011337][T15769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.011348][T15769] R13: 00007fb289786038 R14: 00007fb289785fa0 R15: 00007ffe74cd1c88 [ 186.011443][T15769] [ 186.011459][T15769] Mem-Info: [ 186.224464][T15769] active_anon:4659 inactive_anon:2 isolated_anon:0 [ 186.224464][T15769] active_file:15012 inactive_file:13102 isolated_file:0 [ 186.224464][T15769] unevictable:0 dirty:390 writeback:0 [ 186.224464][T15769] slab_reclaimable:3614 slab_unreclaimable:72828 [ 186.224464][T15769] mapped:30301 shmem:787 pagetables:1698 [ 186.224464][T15769] sec_pagetables:0 bounce:0 [ 186.224464][T15769] kernel_misc_reclaimable:0 [ 186.224464][T15769] free:1808809 free_pcp:14411 free_cma:0 [ 186.269445][T15769] Node 0 active_anon:22812kB inactive_anon:8kB active_file:60048kB inactive_file:52408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121204kB dirty:1560kB writeback:0kB shmem:7324kB kernel_stack:4880kB pagetables:6792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 186.296895][T15769] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 186.311183][T15792] loop6: detected capacity change from 0 to 128 [ 186.325508][T15769] lowmem_reserve[]: 0 2883 7862 7862 [ 186.337061][T15769] Node 0 DMA32 free:2949192kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 186.367365][T15769] lowmem_reserve[]: 0 0 4978 4978 [ 186.372439][T15769] Node 0 Normal free:4270684kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28960kB inactive_anon:8kB active_file:60048kB inactive_file:52408kB unevictable:0kB writepending:1560kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:43548kB local_pcp:3072kB free_cma:0kB [ 186.404389][T15769] lowmem_reserve[]: 0 0 0 0 [ 186.408924][T15769] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 186.417083][T15792] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.421582][T15769] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949192kB [ 186.435465][T15792] ext4 filesystem being mounted at /313/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.449657][T15769] Node 0 Normal: 289*4kB (M) 1180*8kB (UME) 232*16kB (UME) 132*32kB (UME) 60*64kB (UME) 151*128kB (UME) 91*256kB (UME) 130*512kB (UME) 78*1024kB (UM) 46*2048kB (UM) 968*4096kB (UM) = 4270564kB [ 186.500597][T15769] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 186.509963][T15769] 32562 total pagecache pages [ 186.514616][T15769] 2 pages in swap cache [ 186.518756][T15769] Free swap = 124988kB [ 186.522893][T15769] Total swap = 124996kB [ 186.527025][T15769] 2097051 pages RAM [ 186.530829][T15769] 0 pages HighMem/MovableOnly [ 186.535580][T15769] 80445 pages reserved [ 186.601542][ T7179] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.666116][T15812] loop6: detected capacity change from 0 to 128 [ 186.674256][T15812] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.690135][T15812] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.806349][ T7179] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.893846][T15840] loop5: detected capacity change from 0 to 128 [ 186.914100][T15840] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.927541][T15845] loop3: detected capacity change from 0 to 1024 [ 186.934329][T15845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.940960][T15840] ext4 filesystem being mounted at /531/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.984587][T15847] ALSA: seq fatal error: cannot create timer (-19) [ 186.990323][T15845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.042454][T15853] support for the xor transformation has been removed. [ 187.049643][T15857] ALSA: seq fatal error: cannot create timer (-19) [ 187.081181][T15862] FAULT_INJECTION: forcing a failure. [ 187.081181][T15862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.094332][T15862] CPU: 1 UID: 0 PID: 15862 Comm: syz.5.3251 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.094355][T15862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.094365][T15862] Call Trace: [ 187.094371][T15862] [ 187.094378][T15862] __dump_stack+0x1d/0x30 [ 187.094400][T15862] dump_stack_lvl+0xe8/0x140 [ 187.094421][T15862] dump_stack+0x15/0x1b [ 187.094507][T15862] should_fail_ex+0x265/0x280 [ 187.094533][T15862] should_fail+0xb/0x20 [ 187.094627][T15862] should_fail_usercopy+0x1a/0x20 [ 187.094650][T15862] _copy_from_user+0x1c/0xb0 [ 187.094684][T15862] memdup_user+0x5e/0xd0 [ 187.094763][T15862] strndup_user+0x68/0xb0 [ 187.094784][T15862] __se_sys_mount+0x4d/0x2e0 [ 187.094814][T15862] ? __bpf_trace_sys_enter+0x10/0x30 [ 187.094834][T15862] ? trace_sys_enter+0xd0/0xf0 [ 187.094930][T15862] __x64_sys_mount+0x67/0x80 [ 187.094949][T15862] x64_sys_call+0x2b4d/0x2ff0 [ 187.094967][T15862] do_syscall_64+0xd2/0x200 [ 187.094997][T15862] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.095038][T15862] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 187.095064][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.095084][T15862] RIP: 0033:0x7fca8d68eba9 [ 187.095100][T15862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.095189][T15862] RSP: 002b:00007fca8c0ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.095215][T15862] RAX: ffffffffffffffda RBX: 00007fca8d8d5fa0 RCX: 00007fca8d68eba9 [ 187.095233][T15862] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 187.095246][T15862] RBP: 00007fca8c0ef090 R08: 00002000000008c0 R09: 0000000000000000 [ 187.095259][T15862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.095315][T15862] R13: 00007fca8d8d6038 R14: 00007fca8d8d5fa0 R15: 00007ffe03599578 [ 187.095334][T15862] [ 187.335774][T15874] FAULT_INJECTION: forcing a failure. [ 187.335774][T15874] name failslab, interval 1, probability 0, space 0, times 0 [ 187.348446][T15874] CPU: 1 UID: 0 PID: 15874 Comm: syz.6.3257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.348470][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.348480][T15874] Call Trace: [ 187.348487][T15874] [ 187.348496][T15874] __dump_stack+0x1d/0x30 [ 187.348592][T15874] dump_stack_lvl+0xe8/0x140 [ 187.348608][T15874] dump_stack+0x15/0x1b [ 187.348623][T15874] should_fail_ex+0x265/0x280 [ 187.348643][T15874] ? tcf_ct_init+0x416/0xe80 [ 187.348724][T15874] should_failslab+0x8c/0xb0 [ 187.348749][T15874] __kmalloc_cache_noprof+0x4c/0x320 [ 187.348904][T15874] tcf_ct_init+0x416/0xe80 [ 187.348952][T15874] ? __nla_validate_parse+0x1652/0x1d00 [ 187.348986][T15874] tcf_action_init_1+0x367/0x4a0 [ 187.349022][T15874] tcf_action_init+0x267/0x6d0 [ 187.349049][T15874] ? mark_reg_read+0x233/0x340 [ 187.349167][T15874] tc_ctl_action+0x291/0x830 [ 187.349213][T15874] ? __pfx_tc_ctl_action+0x10/0x10 [ 187.349287][T15874] rtnetlink_rcv_msg+0x657/0x6d0 [ 187.349322][T15874] netlink_rcv_skb+0x123/0x220 [ 187.349343][T15874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.349377][T15874] rtnetlink_rcv+0x1c/0x30 [ 187.349450][T15874] netlink_unicast+0x5bd/0x690 [ 187.349475][T15874] netlink_sendmsg+0x58b/0x6b0 [ 187.349557][T15874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.349581][T15874] __sock_sendmsg+0x145/0x180 [ 187.349633][T15874] ____sys_sendmsg+0x31e/0x4e0 [ 187.349657][T15874] ___sys_sendmsg+0x17b/0x1d0 [ 187.349745][T15874] __x64_sys_sendmsg+0xd4/0x160 [ 187.349769][T15874] x64_sys_call+0x191e/0x2ff0 [ 187.349790][T15874] do_syscall_64+0xd2/0x200 [ 187.349853][T15874] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.349872][T15874] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 187.349896][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.349934][T15874] RIP: 0033:0x7f801a6eeba9 [ 187.349950][T15874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.349965][T15874] RSP: 002b:00007f801914f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.350016][T15874] RAX: ffffffffffffffda RBX: 00007f801a935fa0 RCX: 00007f801a6eeba9 [ 187.350030][T15874] RDX: 0000000010000800 RSI: 0000200000000080 RDI: 0000000000000006 [ 187.350044][T15874] RBP: 00007f801914f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.350057][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.350071][T15874] R13: 00007f801a936038 R14: 00007f801a935fa0 R15: 00007fffab68f8e8 [ 187.350122][T15874] [ 187.353486][T15876] siw: device registration error -23 [ 187.405833][T15878] loop6: detected capacity change from 0 to 512 [ 187.588671][T15889] support for the xor transformation has been removed. [ 187.596300][T15878] msdos: Unknown parameter 'syzkaller1' [ 187.732573][T15918] ALSA: seq fatal error: cannot create timer (-19) [ 187.733499][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 187.733511][ T29] audit: type=1400 audit(1758212053.791:5936): avc: denied { unlink } for pid=13551 comm="syz-executor" name="file0" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.848159][T15934] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 187.857808][T15934] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 187.867575][T15934] veth0_to_bridge: entered allmulticast mode [ 187.869173][T15949] siw: device registration error -23 [ 187.877525][T15934] veth0_to_bridge: entered promiscuous mode [ 187.897996][T15945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3273'. [ 187.907436][T15938] syzkaller0: entered promiscuous mode [ 187.912966][T15938] syzkaller0: entered allmulticast mode [ 187.929814][T15938] tipc: Started in network mode [ 187.934695][T15938] tipc: Node identity 0e7366938a1a, cluster identity 4711 [ 187.941898][T15938] tipc: Enabled bearer , priority 0 [ 187.951679][T15938] tipc: Resetting bearer [ 187.966244][T15937] tipc: Resetting bearer [ 187.976766][T15937] tipc: Disabling bearer [ 187.980154][T15960] support for the xor transformation has been removed. [ 187.992582][ T29] audit: type=1326 audit(1758212054.051:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.6.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801a6eeba9 code=0x7ffc0000 [ 188.016773][ T29] audit: type=1326 audit(1758212054.051:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.6.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801a6eeba9 code=0x7ffc0000 [ 188.047592][ T29] audit: type=1326 audit(1758212054.051:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.6.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f801a6eeba9 code=0x7ffc0000 [ 188.071702][ T29] audit: type=1326 audit(1758212054.051:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.6.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801a6eeba9 code=0x7ffc0000 [ 188.095468][ T29] audit: type=1326 audit(1758212054.051:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.6.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801a6eeba9 code=0x7ffc0000 [ 188.119101][ T29] audit: type=1326 audit(1758212054.071:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.6.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f801a6eeba9 code=0x7ffc0000 [ 188.143285][ T29] audit: type=1326 audit(1758212054.071:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.6.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801a6eeba9 code=0x7ffc0000 [ 188.166785][ T29] audit: type=1326 audit(1758212054.071:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.6.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f801a6eeba9 code=0x7ffc0000 [ 188.190566][ T29] audit: type=1326 audit(1758212054.071:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.6.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801a6eeba9 code=0x7ffc0000 [ 188.261868][T15975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3281'. [ 188.271435][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3281'. [ 188.280591][T15975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3281'. [ 188.307551][ T996] bridge_slave_1: left allmulticast mode [ 188.313262][ T996] bridge_slave_1: left promiscuous mode [ 188.318931][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.326771][ T996] bridge_slave_0: left allmulticast mode [ 188.327429][T15995] loop3: detected capacity change from 0 to 512 [ 188.332507][ T996] bridge_slave_0: left promiscuous mode [ 188.344394][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.365363][T15995] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.381837][T15995] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3284: corrupted xattr block 19: overlapping e_value [ 188.395728][T15995] EXT4-fs (loop3): Remounting filesystem read-only [ 188.402338][T15995] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 188.411412][T15995] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 188.420490][T15995] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 188.485025][T16008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3285'. [ 188.520585][T16012] loop3: detected capacity change from 0 to 512 [ 188.527291][T16012] journal_path: Non-blockdev passed as './bus' [ 188.533546][T16012] EXT4-fs: error: could not find journal device path [ 188.542909][T16012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3289'. [ 188.552461][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 188.563067][T16012] loop3: detected capacity change from 0 to 164 [ 188.620542][ T996] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.621230][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'. [ 188.638309][ T996] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.647946][ T996] .` (unregistering): Released all slaves [ 188.655585][T16000] syz_tun: entered promiscuous mode [ 188.674045][T16012] veth0: entered promiscuous mode [ 188.704794][T16027] loop5: detected capacity change from 0 to 1024 [ 188.713670][ T996] tipc: Left network mode [ 188.724958][ T996] hsr_slave_0: left promiscuous mode [ 188.731316][ T996] hsr_slave_1: left promiscuous mode [ 188.736944][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.744516][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.766058][ T996] team0 (unregistering): Port device vlan0 removed [ 188.805664][ T996] team0 (unregistering): Port device team_slave_1 removed [ 188.821635][ T996] team0 (unregistering): Port device team_slave_0 removed [ 188.841788][T16037] support for the xor transformation has been removed. [ 188.896905][T16045] loop6: detected capacity change from 0 to 512 [ 188.920458][T16037] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 188.927627][T16037] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 188.929386][T16045] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 188.945827][T16037] veth0_to_bridge: entered allmulticast mode [ 188.967990][T16037] veth0_to_bridge: entered promiscuous mode [ 188.986021][T16045] EXT4-fs (loop6): 1 orphan inode deleted [ 188.991929][T16045] EXT4-fs (loop6): 1 truncate cleaned up [ 189.035579][T16059] FAULT_INJECTION: forcing a failure. [ 189.035579][T16059] name failslab, interval 1, probability 0, space 0, times 0 [ 189.036293][T16045] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #12: block 7: comm +}[@: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 189.048262][T16059] CPU: 1 UID: 0 PID: 16059 Comm: syz.1.3296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.048419][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.048432][T16059] Call Trace: [ 189.048440][T16059] [ 189.048447][T16059] __dump_stack+0x1d/0x30 [ 189.048468][T16059] dump_stack_lvl+0xe8/0x140 [ 189.048488][T16059] dump_stack+0x15/0x1b [ 189.048565][T16059] should_fail_ex+0x265/0x280 [ 189.048590][T16059] ? audit_log_d_path+0x8d/0x150 [ 189.048620][T16059] should_failslab+0x8c/0xb0 [ 189.048645][T16059] __kmalloc_cache_noprof+0x4c/0x320 [ 189.048726][T16059] audit_log_d_path+0x8d/0x150 [ 189.048757][T16059] audit_log_d_path_exe+0x42/0x70 [ 189.048794][T16059] audit_log_task+0x1e9/0x250 [ 189.048823][T16059] audit_seccomp+0x61/0x100 [ 189.048848][T16059] ? __seccomp_filter+0x68c/0x10d0 [ 189.048872][T16059] __seccomp_filter+0x69d/0x10d0 [ 189.048895][T16059] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.048935][T16059] ? vfs_write+0x7e8/0x960 [ 189.048961][T16059] ? __rcu_read_unlock+0x4f/0x70 [ 189.049018][T16059] ? __fget_files+0x184/0x1c0 [ 189.049047][T16059] __secure_computing+0x82/0x150 [ 189.049069][T16059] syscall_trace_enter+0xcf/0x1e0 [ 189.049094][T16059] do_syscall_64+0xac/0x200 [ 189.049149][T16059] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 189.049172][T16059] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.049200][T16059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.049284][T16059] RIP: 0033:0x7fbca6a8eba9 [ 189.049300][T16059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.049317][T16059] RSP: 002b:00007fbca54f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 189.049336][T16059] RAX: ffffffffffffffda RBX: 00007fbca6cd5fa0 RCX: 00007fbca6a8eba9 [ 189.049349][T16059] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000000 [ 189.049382][T16059] RBP: 00007fbca54f7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.049406][T16059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.049419][T16059] R13: 00007fbca6cd6038 R14: 00007fbca6cd5fa0 R15: 00007ffc2e1f8f28 [ 189.049438][T16059] [ 189.055197][T16062] lo speed is unknown, defaulting to 1000 [ 189.329044][T16062] lo speed is unknown, defaulting to 1000 [ 189.335113][T16062] lo speed is unknown, defaulting to 1000 [ 189.346154][T16062] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 189.357925][T16062] lo speed is unknown, defaulting to 1000 [ 189.364850][T16062] lo speed is unknown, defaulting to 1000 [ 189.373249][T16062] lo speed is unknown, defaulting to 1000 [ 189.380734][T16062] lo speed is unknown, defaulting to 1000 [ 189.387155][T16062] lo speed is unknown, defaulting to 1000 [ 189.397986][T16075] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 189.439882][T16086] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3302'. [ 189.492830][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'. [ 189.570343][T16098] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 189.577494][T16098] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 189.589975][T16098] veth0_to_bridge: entered allmulticast mode [ 189.600535][T16098] veth0_to_bridge: entered promiscuous mode [ 189.661988][T16113] FAULT_INJECTION: forcing a failure. [ 189.661988][T16113] name failslab, interval 1, probability 0, space 0, times 0 [ 189.665538][T16115] siw: device registration error -23 [ 189.674684][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.0.3313 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.674793][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.674806][T16113] Call Trace: [ 189.674812][T16113] [ 189.674820][T16113] __dump_stack+0x1d/0x30 [ 189.674912][T16113] dump_stack_lvl+0xe8/0x140 [ 189.674969][T16113] dump_stack+0x15/0x1b [ 189.675036][T16113] should_fail_ex+0x265/0x280 [ 189.675060][T16113] should_failslab+0x8c/0xb0 [ 189.675084][T16113] kmem_cache_alloc_node_noprof+0x57/0x320 [ 189.675145][T16113] ? __alloc_skb+0x101/0x320 [ 189.675168][T16113] __alloc_skb+0x101/0x320 [ 189.675190][T16113] netlink_alloc_large_skb+0xba/0xf0 [ 189.675212][T16113] netlink_sendmsg+0x3cf/0x6b0 [ 189.675293][T16113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.675346][T16113] __sock_sendmsg+0x145/0x180 [ 189.675376][T16113] ____sys_sendmsg+0x31e/0x4e0 [ 189.675404][T16113] ___sys_sendmsg+0x17b/0x1d0 [ 189.675452][T16113] __x64_sys_sendmsg+0xd4/0x160 [ 189.675481][T16113] x64_sys_call+0x191e/0x2ff0 [ 189.675501][T16113] do_syscall_64+0xd2/0x200 [ 189.675531][T16113] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 189.675563][T16113] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.675597][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.675617][T16113] RIP: 0033:0x7fb28953eba9 [ 189.675630][T16113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.675645][T16113] RSP: 002b:00007fb287f9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.675661][T16113] RAX: ffffffffffffffda RBX: 00007fb289785fa0 RCX: 00007fb28953eba9 [ 189.675672][T16113] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 189.675683][T16113] RBP: 00007fb287f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.675715][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.675728][T16113] R13: 00007fb289786038 R14: 00007fb289785fa0 R15: 00007ffe74cd1c88 [ 189.675797][T16113] [ 189.983131][T16128] netlink: 'syz.3.3311': attribute type 4 has an invalid length. [ 190.016959][T16132] FAULT_INJECTION: forcing a failure. [ 190.016959][T16132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.030192][T16132] CPU: 0 UID: 0 PID: 16132 Comm: syz.6.3319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.030243][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.030320][T16132] Call Trace: [ 190.030327][T16132] [ 190.030336][T16132] __dump_stack+0x1d/0x30 [ 190.030355][T16132] dump_stack_lvl+0xe8/0x140 [ 190.030375][T16132] dump_stack+0x15/0x1b [ 190.030393][T16132] should_fail_ex+0x265/0x280 [ 190.030418][T16132] should_fail+0xb/0x20 [ 190.030482][T16132] should_fail_usercopy+0x1a/0x20 [ 190.030505][T16132] _copy_to_user+0x20/0xa0 [ 190.030560][T16132] simple_read_from_buffer+0xb5/0x130 [ 190.030585][T16132] proc_fail_nth_read+0x10e/0x150 [ 190.030614][T16132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.030638][T16132] vfs_read+0x1a5/0x770 [ 190.030715][T16132] ? __rcu_read_unlock+0x4f/0x70 [ 190.030732][T16132] ? __fget_files+0x184/0x1c0 [ 190.030753][T16132] ksys_read+0xda/0x1a0 [ 190.030802][T16132] __x64_sys_read+0x40/0x50 [ 190.030820][T16132] x64_sys_call+0x27bc/0x2ff0 [ 190.030837][T16132] do_syscall_64+0xd2/0x200 [ 190.030930][T16132] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 190.030951][T16132] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 190.030977][T16132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.031075][T16132] RIP: 0033:0x7f801a6ed5bc [ 190.031088][T16132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.031103][T16132] RSP: 002b:00007f801914f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.031122][T16132] RAX: ffffffffffffffda RBX: 00007f801a935fa0 RCX: 00007f801a6ed5bc [ 190.031134][T16132] RDX: 000000000000000f RSI: 00007f801914f0a0 RDI: 0000000000000003 [ 190.031144][T16132] RBP: 00007f801914f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.031153][T16132] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 190.031209][T16132] R13: 00007f801a936038 R14: 00007f801a935fa0 R15: 00007fffab68f8e8 [ 190.031224][T16132] [ 190.282151][T16143] loop6: detected capacity change from 0 to 512 [ 190.306400][T16143] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 190.321086][T16143] EXT4-fs (loop6): 1 truncate cleaned up [ 190.341159][T16143] EXT4-fs mount: 8 callbacks suppressed [ 190.341175][T16143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.374197][ T7179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.527277][T16164] serio: Serial port ttyS3 [ 190.553341][T16172] loop6: detected capacity change from 0 to 512 [ 190.580628][T16179] loop5: detected capacity change from 0 to 512 [ 190.629228][T16172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.629355][T16179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.655110][T16172] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.667812][T16179] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.684166][T16172] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.3332: corrupted xattr block 19: overlapping e_value [ 190.732531][T16172] EXT4-fs (loop6): Remounting filesystem read-only [ 190.739099][T16172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 190.750100][T16172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 190.759537][T16172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 190.767346][T16179] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.3334: corrupted xattr block 19: overlapping e_value [ 190.796879][T16179] EXT4-fs (loop5): Remounting filesystem read-only [ 190.797413][ T7179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.803463][T16179] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 190.821482][T16179] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 190.896985][ T3965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.897111][T16211] lo speed is unknown, defaulting to 1000 [ 190.938357][T16213] ALSA: seq fatal error: cannot create timer (-19) [ 190.944660][T16232] 9pnet_fd: Insufficient options for proto=fd [ 191.121975][T16255] netlink: 'syz.5.3348': attribute type 10 has an invalid length. [ 191.137146][T16255] ipvlan0: entered allmulticast mode [ 191.143213][T16255] veth0_vlan: entered allmulticast mode [ 191.150489][T16255] team0: Device ipvlan0 failed to register rx_handler [ 191.220612][T16263] usb usb8: usbfs: process 16263 (syz.3.3351) did not claim interface 7 before use [ 191.235801][T16263] loop3: detected capacity change from 0 to 512 [ 191.251081][T16263] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3351: Failed to acquire dquot type 1 [ 191.276560][T16263] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3351: corrupted inode contents [ 191.290052][T16263] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.3351: mark_inode_dirty error [ 191.301605][T16263] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3351: corrupted inode contents [ 191.314434][T16263] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3351: mark_inode_dirty error [ 191.325848][T16263] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3351: corrupted inode contents [ 191.338507][T16263] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 191.347199][T16263] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3351: corrupted inode contents [ 191.361583][T16263] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.3351: mark_inode_dirty error [ 191.372801][T16263] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 191.382904][T16263] EXT4-fs (loop3): 1 truncate cleaned up [ 191.390641][T16263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.425524][T16263] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.451378][T13551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.545652][T16279] ALSA: seq fatal error: cannot create timer (-19) [ 191.718888][T16303] loop3: detected capacity change from 0 to 512 [ 191.731787][T16296] loop5: detected capacity change from 0 to 8192 [ 191.742540][T16296] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.789589][T16303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.824083][T16303] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.836828][T16303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.908696][T16315] tipc: Enabled bearer , priority 0 [ 191.931981][T16315] tipc: Disabling bearer [ 191.948284][T16315] FAULT_INJECTION: forcing a failure. [ 191.948284][T16315] name failslab, interval 1, probability 0, space 0, times 0 [ 191.961025][T16315] CPU: 1 UID: 0 PID: 16315 Comm: syz.0.3370 Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.961053][T16315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.961065][T16315] Call Trace: [ 191.961137][T16315] [ 191.961144][T16315] __dump_stack+0x1d/0x30 [ 191.961162][T16315] dump_stack_lvl+0xe8/0x140 [ 191.961179][T16315] dump_stack+0x15/0x1b [ 191.961193][T16315] should_fail_ex+0x265/0x280 [ 191.961318][T16315] should_failslab+0x8c/0xb0 [ 191.961394][T16315] kmem_cache_alloc_node_noprof+0x57/0x320 [ 191.961425][T16315] ? __alloc_skb+0x101/0x320 [ 191.961447][T16315] __alloc_skb+0x101/0x320 [ 191.961529][T16315] mpls_netconf_notify_devconf+0x46/0x100 [ 191.961559][T16315] mpls_dev_sysctl_unregister+0x6b/0x80 [ 191.961662][T16315] ? __pfx_mpls_dev_notify+0x10/0x10 [ 191.961683][T16315] mpls_dev_notify+0x7a7/0x8d0 [ 191.961764][T16315] ? batadv_hard_if_event+0x92f/0xf10 [ 191.961791][T16315] ? ovs_netdev_get_vport+0x5a/0x60 [ 191.961818][T16315] ? __pfx_mpls_dev_notify+0x10/0x10 [ 191.961840][T16315] raw_notifier_call_chain+0x6f/0x1b0 [ 191.961935][T16315] ? call_netdevice_notifiers_info+0x9c/0x100 [ 191.962015][T16315] call_netdevice_notifiers_info+0xae/0x100 [ 191.962099][T16315] unregister_netdevice_many_notify+0xda9/0x15d0 [ 191.962135][T16315] unregister_netdevice_queue+0x1f5/0x220 [ 191.962163][T16315] __tun_detach+0x7db/0xad0 [ 191.962245][T16315] ? __pfx_tun_chr_close+0x10/0x10 [ 191.962262][T16315] tun_chr_close+0x5a/0x100 [ 191.962277][T16315] __fput+0x29b/0x650 [ 191.962304][T16315] fput_close_sync+0x6e/0x120 [ 191.962383][T16315] __x64_sys_close+0x56/0xf0 [ 191.962457][T16315] x64_sys_call+0x2738/0x2ff0 [ 191.962479][T16315] do_syscall_64+0xd2/0x200 [ 191.962505][T16315] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.962526][T16315] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 191.962728][T16315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.962750][T16315] RIP: 0033:0x7fb28953eba9 [ 191.962766][T16315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.962784][T16315] RSP: 002b:00007fb287f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 191.962803][T16315] RAX: ffffffffffffffda RBX: 00007fb289785fa0 RCX: 00007fb28953eba9 [ 191.962814][T16315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 191.962825][T16315] RBP: 00007fb287f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.962893][T16315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.962906][T16315] R13: 00007fb289786038 R14: 00007fb289785fa0 R15: 00007ffe74cd1c88 [ 191.962924][T16315] [ 191.966139][T16296] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 192.031320][T16337] FAULT_INJECTION: forcing a failure. [ 192.031320][T16337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.035292][T16296] FAT-fs (loop5): Filesystem has been set read-only [ 192.248512][T16341] ALSA: seq fatal error: cannot create timer (-19) [ 192.252391][T16337] CPU: 0 UID: 0 PID: 16337 Comm: syz.1.3369 Not tainted syzkaller #0 PREEMPT(voluntary) [ 192.252419][T16337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.252432][T16337] Call Trace: [ 192.252440][T16337] [ 192.252449][T16337] __dump_stack+0x1d/0x30 [ 192.252471][T16337] dump_stack_lvl+0xe8/0x140 [ 192.252517][T16337] dump_stack+0x15/0x1b [ 192.252533][T16337] should_fail_ex+0x265/0x280 [ 192.252557][T16337] should_fail+0xb/0x20 [ 192.252612][T16337] should_fail_usercopy+0x1a/0x20 [ 192.252717][T16337] _copy_to_user+0x20/0xa0 [ 192.252746][T16337] simple_read_from_buffer+0xb5/0x130 [ 192.252769][T16337] proc_fail_nth_read+0x10e/0x150 [ 192.252797][T16337] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.252961][T16337] vfs_read+0x1a5/0x770 [ 192.253039][T16337] ? __rcu_read_unlock+0x4f/0x70 [ 192.253061][T16337] ? __fget_files+0x184/0x1c0 [ 192.253111][T16337] ksys_read+0xda/0x1a0 [ 192.253132][T16337] __x64_sys_read+0x40/0x50 [ 192.253154][T16337] x64_sys_call+0x27bc/0x2ff0 [ 192.253174][T16337] do_syscall_64+0xd2/0x200 [ 192.253226][T16337] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 192.253249][T16337] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 192.253395][T16337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.253416][T16337] RIP: 0033:0x7fbca6a8d5bc [ 192.253431][T16337] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.253449][T16337] RSP: 002b:00007fbca54f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.253467][T16337] RAX: ffffffffffffffda RBX: 00007fbca6cd5fa0 RCX: 00007fbca6a8d5bc [ 192.253481][T16337] RDX: 000000000000000f RSI: 00007fbca54f70a0 RDI: 0000000000000003 [ 192.253525][T16337] RBP: 00007fbca54f7090 R08: 0000000000000000 R09: 0000000000000000 [ 192.253537][T16337] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 192.253550][T16337] R13: 00007fbca6cd6038 R14: 00007fbca6cd5fa0 R15: 00007ffc2e1f8f28 [ 192.253568][T16337] [ 192.489760][T16354] loop5: detected capacity change from 0 to 512 [ 192.496447][T16354] EXT4-fs: Ignoring removed nobh option [ 192.508023][T16354] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 192.518227][T16354] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.3371: casefold flag without casefold feature [ 192.532466][T16354] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3371: couldn't read orphan inode 13 (err -117) [ 192.544999][T16354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.615184][ T3965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.784548][T16403] ALSA: seq fatal error: cannot create timer (-19) [ 192.831256][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 192.831271][ T29] audit: type=1400 audit(1758212058.891:6179): avc: denied { read } for pid=16414 comm="syz.1.3390" name="file0" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.860122][ T29] audit: type=1400 audit(1758212058.891:6180): avc: denied { open } for pid=16414 comm="syz.1.3390" path="/199/file0" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.014507][ T29] audit: type=1326 audit(1758212059.071:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16423 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 193.043392][ T29] audit: type=1326 audit(1758212059.091:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.3.3389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa69212eba9 code=0x0 [ 193.066561][ T29] audit: type=1326 audit(1758212059.091:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16423 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 193.090076][ T29] audit: type=1326 audit(1758212059.091:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16423 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 193.113655][ T29] audit: type=1326 audit(1758212059.091:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16423 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 193.137259][ T29] audit: type=1326 audit(1758212059.091:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16423 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 193.158574][T16427] netlink: 'syz.3.3389': attribute type 10 has an invalid length. [ 193.160926][ T29] audit: type=1326 audit(1758212059.091:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16423 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 193.161014][ T29] audit: type=1326 audit(1758212059.091:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16423 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 193.218698][T16427] team0: Device dummy0 is up. Set it down before adding it as a team port [ 193.269983][T16443] __nla_validate_parse: 11 callbacks suppressed [ 193.270070][T16443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3398'. [ 193.285278][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'. [ 193.297315][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3398'. [ 193.322675][T16447] ALSA: seq fatal error: cannot create timer (-19) [ 193.351161][T16452] loop5: detected capacity change from 0 to 512 [ 193.358154][T16452] journal_path: Non-blockdev passed as './bus' [ 193.364468][T16452] EXT4-fs: error: could not find journal device path [ 193.375702][T16452] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3402'. [ 193.384942][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3402'. [ 193.396711][T16452] loop5: detected capacity change from 0 to 164 [ 193.421117][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3402'. [ 193.539343][T16472] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3407'. [ 193.548380][T16472] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 193.741219][T16484] ALSA: seq fatal error: cannot create timer (-19) [ 193.830874][T16493] smc: net device bond0 applied user defined pnetid SYZ0 [ 193.958276][T16498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3418'. [ 194.127130][T16539] lo speed is unknown, defaulting to 1000 [ 194.425065][T16584] loop6: detected capacity change from 0 to 512 [ 194.433888][T16584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.491055][T16591] pim6reg: entered allmulticast mode [ 194.510111][ T7179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.520497][T16591] pim6reg: left allmulticast mode [ 194.542143][T16601] FAULT_INJECTION: forcing a failure. [ 194.542143][T16601] name failslab, interval 1, probability 0, space 0, times 0 [ 194.555455][T16601] CPU: 0 UID: 0 PID: 16601 Comm: syz.6.3431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 194.555576][T16601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.555657][T16601] Call Trace: [ 194.555664][T16601] [ 194.555672][T16601] __dump_stack+0x1d/0x30 [ 194.555701][T16601] dump_stack_lvl+0xe8/0x140 [ 194.555785][T16601] dump_stack+0x15/0x1b [ 194.555799][T16601] should_fail_ex+0x265/0x280 [ 194.555824][T16601] should_failslab+0x8c/0xb0 [ 194.555850][T16601] __kmalloc_noprof+0xa5/0x3e0 [ 194.555984][T16601] ? shmem_initxattrs+0x1c2/0x350 [ 194.556013][T16601] shmem_initxattrs+0x1c2/0x350 [ 194.556108][T16601] security_inode_init_security+0x25c/0x330 [ 194.556137][T16601] ? __pfx_shmem_initxattrs+0x10/0x10 [ 194.556165][T16601] shmem_mknod+0xad/0x180 [ 194.556197][T16601] shmem_create+0x34/0x50 [ 194.556311][T16601] vfs_create+0x194/0x2b0 [ 194.556331][T16601] do_mknodat+0x2af/0x610 [ 194.556374][T16601] __x64_sys_mknod+0x51/0x60 [ 194.556394][T16601] x64_sys_call+0x2d47/0x2ff0 [ 194.556417][T16601] do_syscall_64+0xd2/0x200 [ 194.556543][T16601] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.556569][T16601] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 194.556599][T16601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.556646][T16601] RIP: 0033:0x7f801a6eeba9 [ 194.556660][T16601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.556754][T16601] RSP: 002b:00007f801914f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 194.556775][T16601] RAX: ffffffffffffffda RBX: 00007f801a935fa0 RCX: 00007f801a6eeba9 [ 194.556786][T16601] RDX: 000000000000070d RSI: 0000000000000000 RDI: 0000200000000000 [ 194.556797][T16601] RBP: 00007f801914f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.556880][T16601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.556890][T16601] R13: 00007f801a936038 R14: 00007f801a935fa0 R15: 00007fffab68f8e8 [ 194.556909][T16601] [ 194.757674][T16602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3429'. [ 194.816343][T16609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=16609 comm=syz.6.3432 [ 194.857799][T16616] support for the xor transformation has been removed. [ 194.950712][T16622] FAULT_INJECTION: forcing a failure. [ 194.950712][T16622] name failslab, interval 1, probability 0, space 0, times 0 [ 194.963352][T16622] CPU: 1 UID: 0 PID: 16622 Comm: syz.1.3438 Not tainted syzkaller #0 PREEMPT(voluntary) [ 194.963389][T16622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.963400][T16622] Call Trace: [ 194.963412][T16622] [ 194.963419][T16622] __dump_stack+0x1d/0x30 [ 194.963507][T16622] dump_stack_lvl+0xe8/0x140 [ 194.963523][T16622] dump_stack+0x15/0x1b [ 194.963537][T16622] should_fail_ex+0x265/0x280 [ 194.963560][T16622] ? io_drain_req+0x67/0x350 [ 194.963640][T16622] should_failslab+0x8c/0xb0 [ 194.963664][T16622] __kmalloc_cache_noprof+0x4c/0x320 [ 194.963694][T16622] io_drain_req+0x67/0x350 [ 194.963714][T16622] ? io_queue_sqe_fallback+0x12a/0x140 [ 194.963788][T16622] io_queue_sqe_fallback+0x132/0x140 [ 194.963869][T16622] io_submit_sqes+0xc2e/0x1060 [ 194.963894][T16622] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 194.963915][T16622] ? 0xffffffff81000000 [ 194.963926][T16622] ? __rcu_read_unlock+0x4f/0x70 [ 194.963945][T16622] ? get_pid_task+0x96/0xd0 [ 194.964025][T16622] ? bpf_probe_read_compat_str+0xfb/0x130 [ 194.964054][T16622] ? __rcu_read_unlock+0x4f/0x70 [ 194.964073][T16622] ? bpf_trace_run2+0x124/0x1c0 [ 194.964135][T16622] ? __bpf_trace_sys_enter+0x10/0x30 [ 194.964156][T16622] __x64_sys_io_uring_enter+0x78/0x90 [ 194.964192][T16622] x64_sys_call+0x2de1/0x2ff0 [ 194.964210][T16622] do_syscall_64+0xd2/0x200 [ 194.964242][T16622] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.964265][T16622] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 194.964291][T16622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.964352][T16622] RIP: 0033:0x7fbca6a8eba9 [ 194.964382][T16622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.964398][T16622] RSP: 002b:00007fbca54f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 194.964425][T16622] RAX: ffffffffffffffda RBX: 00007fbca6cd5fa0 RCX: 00007fbca6a8eba9 [ 194.964438][T16622] RDX: 000000000000696d RSI: 00000000000008ba RDI: 0000000000000004 [ 194.964488][T16622] RBP: 00007fbca54f7090 R08: 0000000000000000 R09: 0000000000000000 [ 194.964501][T16622] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 194.964514][T16622] R13: 00007fbca6cd6038 R14: 00007fbca6cd5fa0 R15: 00007ffc2e1f8f28 [ 194.964533][T16622] [ 195.497681][T16647] ALSA: seq fatal error: cannot create timer (-19) [ 195.508054][T16645] support for the xor transformation has been removed. [ 195.579647][T16654] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3451'. [ 195.611009][T16657] IPv6: Can't replace route, no match found [ 196.044007][T16683] loop5: detected capacity change from 0 to 512 [ 196.055922][T16683] EXT4-fs: Ignoring removed nobh option [ 196.086538][T16683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3458: corrupted inode contents [ 196.130523][T16683] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.3458: mark_inode_dirty error [ 196.167556][T16690] support for the xor transformation has been removed. [ 196.180655][T16683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3458: corrupted inode contents [ 196.195675][T16683] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3458: mark_inode_dirty error [ 196.233514][T16683] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3458: Failed to acquire dquot type 0 [ 196.273068][T16683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3458: corrupted inode contents [ 196.341399][T16683] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.3458: mark_inode_dirty error [ 196.425072][T16683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3458: corrupted inode contents [ 196.489614][T16683] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3458: mark_inode_dirty error [ 196.512744][T16683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3458: corrupted inode contents [ 196.590630][T16683] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 196.608532][T16683] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3458: corrupted inode contents [ 196.643557][T16683] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.3458: mark_inode_dirty error [ 196.665426][T16683] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 196.684763][T16683] EXT4-fs (loop5): 1 truncate cleaned up [ 196.697736][T16683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.724139][T16683] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.868323][T16682] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 196.971643][ T3965] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.235439][T16738] siw: device registration error -23 [ 197.351465][T16752] FAULT_INJECTION: forcing a failure. [ 197.351465][T16752] name failslab, interval 1, probability 0, space 0, times 0 [ 197.364181][T16752] CPU: 0 UID: 0 PID: 16752 Comm: syz.1.3476 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.364204][T16752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.364214][T16752] Call Trace: [ 197.364220][T16752] [ 197.364229][T16752] __dump_stack+0x1d/0x30 [ 197.364294][T16752] dump_stack_lvl+0xe8/0x140 [ 197.364310][T16752] dump_stack+0x15/0x1b [ 197.364343][T16752] should_fail_ex+0x265/0x280 [ 197.364365][T16752] should_failslab+0x8c/0xb0 [ 197.364391][T16752] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 197.364444][T16752] ? sidtab_sid2str_get+0xa0/0x130 [ 197.364468][T16752] kmemdup_noprof+0x2b/0x70 [ 197.364539][T16752] sidtab_sid2str_get+0xa0/0x130 [ 197.364562][T16752] security_sid_to_context_core+0x1eb/0x2e0 [ 197.364587][T16752] security_sid_to_context+0x27/0x40 [ 197.364608][T16752] selinux_lsmprop_to_secctx+0x67/0xf0 [ 197.364665][T16752] security_lsmprop_to_secctx+0x43/0x80 [ 197.364692][T16752] audit_log_task_context+0x77/0x190 [ 197.364719][T16752] audit_log_task+0xf4/0x250 [ 197.364744][T16752] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 197.364814][T16752] audit_seccomp+0x61/0x100 [ 197.364838][T16752] ? __seccomp_filter+0x68c/0x10d0 [ 197.364926][T16752] __seccomp_filter+0x69d/0x10d0 [ 197.364950][T16752] ? _raw_spin_unlock+0x26/0x50 [ 197.364976][T16752] __secure_computing+0x82/0x150 [ 197.365005][T16752] syscall_trace_enter+0xcf/0x1e0 [ 197.365025][T16752] do_syscall_64+0xac/0x200 [ 197.365050][T16752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 197.365135][T16752] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 197.365159][T16752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.365180][T16752] RIP: 0033:0x7fbca6a8d5bc [ 197.365196][T16752] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.365248][T16752] RSP: 002b:00007fbca54f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.365264][T16752] RAX: ffffffffffffffda RBX: 00007fbca6cd5fa0 RCX: 00007fbca6a8d5bc [ 197.365275][T16752] RDX: 000000000000000f RSI: 00007fbca54f70a0 RDI: 0000000000000003 [ 197.365286][T16752] RBP: 00007fbca54f7090 R08: 0000000000000000 R09: 0000000000000000 [ 197.365296][T16752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.365307][T16752] R13: 00007fbca6cd6038 R14: 00007fbca6cd5fa0 R15: 00007ffc2e1f8f28 [ 197.365326][T16752] [ 197.912936][T16758] netlink: 'syz.0.3477': attribute type 21 has an invalid length. [ 197.932231][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 197.932265][ T29] audit: type=1400 audit(1758212063.991:6539): avc: denied { read } for pid=16778 comm="syz.3.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.404836][T16788] FAULT_INJECTION: forcing a failure. [ 198.404836][T16788] name failslab, interval 1, probability 0, space 0, times 0 [ 198.417528][T16788] CPU: 1 UID: 0 PID: 16788 Comm: syz.3.3488 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.417551][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.417580][T16788] Call Trace: [ 198.417649][T16788] [ 198.417658][T16788] __dump_stack+0x1d/0x30 [ 198.417676][T16788] dump_stack_lvl+0xe8/0x140 [ 198.417693][T16788] dump_stack+0x15/0x1b [ 198.417709][T16788] should_fail_ex+0x265/0x280 [ 198.417778][T16788] should_failslab+0x8c/0xb0 [ 198.417799][T16788] kmem_cache_alloc_node_noprof+0x57/0x320 [ 198.417832][T16788] ? __alloc_skb+0x101/0x320 [ 198.417854][T16788] __alloc_skb+0x101/0x320 [ 198.417900][T16788] netlink_alloc_large_skb+0xba/0xf0 [ 198.417999][T16788] netlink_sendmsg+0x3cf/0x6b0 [ 198.418027][T16788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.418119][T16788] __sock_sendmsg+0x145/0x180 [ 198.418152][T16788] ____sys_sendmsg+0x31e/0x4e0 [ 198.418292][T16788] ___sys_sendmsg+0x17b/0x1d0 [ 198.418344][T16788] __x64_sys_sendmsg+0xd4/0x160 [ 198.418372][T16788] x64_sys_call+0x191e/0x2ff0 [ 198.418394][T16788] do_syscall_64+0xd2/0x200 [ 198.418428][T16788] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.418492][T16788] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 198.418522][T16788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.418568][T16788] RIP: 0033:0x7fa69212eba9 [ 198.418581][T16788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.418595][T16788] RSP: 002b:00007fa690b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.418612][T16788] RAX: ffffffffffffffda RBX: 00007fa692375fa0 RCX: 00007fa69212eba9 [ 198.418626][T16788] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000004 [ 198.418678][T16788] RBP: 00007fa690b97090 R08: 0000000000000000 R09: 0000000000000000 [ 198.418691][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.418705][T16788] R13: 00007fa692376038 R14: 00007fa692375fa0 R15: 00007ffe54c79b08 [ 198.418725][T16788] [ 198.705148][T16796] FAULT_INJECTION: forcing a failure. [ 198.705148][T16796] name failslab, interval 1, probability 0, space 0, times 0 [ 198.718643][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.3.3490 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.718666][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.718676][T16796] Call Trace: [ 198.718708][T16796] [ 198.718716][T16796] __dump_stack+0x1d/0x30 [ 198.718768][T16796] dump_stack_lvl+0xe8/0x140 [ 198.718788][T16796] dump_stack+0x15/0x1b [ 198.718806][T16796] should_fail_ex+0x265/0x280 [ 198.718829][T16796] should_failslab+0x8c/0xb0 [ 198.718891][T16796] kmem_cache_alloc_noprof+0x50/0x310 [ 198.718916][T16796] ? getname_flags+0x80/0x3b0 [ 198.719011][T16796] getname_flags+0x80/0x3b0 [ 198.719054][T16796] user_path_at+0x28/0x130 [ 198.719086][T16796] __se_sys_mount+0x25b/0x2e0 [ 198.719123][T16796] __x64_sys_mount+0x67/0x80 [ 198.719198][T16796] x64_sys_call+0x2b4d/0x2ff0 [ 198.719221][T16796] do_syscall_64+0xd2/0x200 [ 198.719315][T16796] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.719335][T16796] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 198.719364][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.719387][T16796] RIP: 0033:0x7fa69212eba9 [ 198.719416][T16796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.719431][T16796] RSP: 002b:00007fa690b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.719447][T16796] RAX: ffffffffffffffda RBX: 00007fa692375fa0 RCX: 00007fa69212eba9 [ 198.719459][T16796] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 198.719472][T16796] RBP: 00007fa690b97090 R08: 0000200000000600 R09: 0000000000000000 [ 198.719546][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.719560][T16796] R13: 00007fa692376038 R14: 00007fa692375fa0 R15: 00007ffe54c79b08 [ 198.719579][T16796] [ 198.770269][T16798] __nla_validate_parse: 5 callbacks suppressed [ 198.770282][T16798] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3489'. [ 198.775135][T16794] SELinux: policydb version 280 does not match my version range 15-35 [ 198.787339][ T29] audit: type=1400 audit(1758212064.831:6540): avc: denied { load_policy } for pid=16793 comm="syz.0.3489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 198.810772][T16794] SELinux: failed to load policy [ 199.033944][T16808] FAULT_INJECTION: forcing a failure. [ 199.033944][T16808] name failslab, interval 1, probability 0, space 0, times 0 [ 199.046616][T16808] CPU: 1 UID: 0 PID: 16808 Comm: syz.5.3495 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.046644][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.046678][T16808] Call Trace: [ 199.046685][T16808] [ 199.046692][T16808] __dump_stack+0x1d/0x30 [ 199.046710][T16808] dump_stack_lvl+0xe8/0x140 [ 199.046745][T16808] dump_stack+0x15/0x1b [ 199.046767][T16808] should_fail_ex+0x265/0x280 [ 199.046791][T16808] ? alloc_async+0x2d/0x90 [ 199.046807][T16808] should_failslab+0x8c/0xb0 [ 199.046830][T16808] __kmalloc_cache_noprof+0x4c/0x320 [ 199.046950][T16808] alloc_async+0x2d/0x90 [ 199.046967][T16808] proc_do_submiturb+0x76d/0x1d20 [ 199.046992][T16808] proc_submiturb+0x7b/0xa0 [ 199.047045][T16808] usbdev_ioctl+0xcc2/0x1710 [ 199.047076][T16808] ? __pfx_usbdev_ioctl+0x10/0x10 [ 199.047176][T16808] __se_sys_ioctl+0xce/0x140 [ 199.047194][T16808] __x64_sys_ioctl+0x43/0x50 [ 199.047212][T16808] x64_sys_call+0x1816/0x2ff0 [ 199.047234][T16808] do_syscall_64+0xd2/0x200 [ 199.047293][T16808] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.047313][T16808] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 199.047403][T16808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.047421][T16808] RIP: 0033:0x7fca8d68eba9 [ 199.047435][T16808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.047454][T16808] RSP: 002b:00007fca8c0ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.047470][T16808] RAX: ffffffffffffffda RBX: 00007fca8d8d5fa0 RCX: 00007fca8d68eba9 [ 199.047523][T16808] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000009 [ 199.047534][T16808] RBP: 00007fca8c0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 199.047560][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.047574][T16808] R13: 00007fca8d8d6038 R14: 00007fca8d8d5fa0 R15: 00007ffe03599578 [ 199.047594][T16808] [ 199.324771][T16815] FAULT_INJECTION: forcing a failure. [ 199.324771][T16815] name failslab, interval 1, probability 0, space 0, times 0 [ 199.338094][T16815] CPU: 0 UID: 0 PID: 16815 Comm: syz.5.3498 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.338124][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.338136][T16815] Call Trace: [ 199.338143][T16815] [ 199.338159][T16815] __dump_stack+0x1d/0x30 [ 199.338179][T16815] dump_stack_lvl+0xe8/0x140 [ 199.338199][T16815] dump_stack+0x15/0x1b [ 199.338236][T16815] should_fail_ex+0x265/0x280 [ 199.338257][T16815] should_failslab+0x8c/0xb0 [ 199.338288][T16815] kmem_cache_alloc_node_noprof+0x57/0x320 [ 199.338316][T16815] ? __alloc_skb+0x101/0x320 [ 199.338339][T16815] __alloc_skb+0x101/0x320 [ 199.338361][T16815] netlink_ack+0xfd/0x500 [ 199.338436][T16815] ? avc_has_perm_noaudit+0x1b1/0x200 [ 199.338512][T16815] netlink_rcv_skb+0x192/0x220 [ 199.338534][T16815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.338569][T16815] rtnetlink_rcv+0x1c/0x30 [ 199.338675][T16815] netlink_unicast+0x5bd/0x690 [ 199.338696][T16815] netlink_sendmsg+0x58b/0x6b0 [ 199.338800][T16815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.338825][T16815] __sock_sendmsg+0x145/0x180 [ 199.338855][T16815] ____sys_sendmsg+0x31e/0x4e0 [ 199.338894][T16815] ___sys_sendmsg+0x17b/0x1d0 [ 199.338932][T16815] __x64_sys_sendmsg+0xd4/0x160 [ 199.338961][T16815] x64_sys_call+0x191e/0x2ff0 [ 199.338998][T16815] do_syscall_64+0xd2/0x200 [ 199.339074][T16815] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.339097][T16815] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 199.339126][T16815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.339146][T16815] RIP: 0033:0x7fca8d68eba9 [ 199.339164][T16815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.339181][T16815] RSP: 002b:00007fca8c0ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.339274][T16815] RAX: ffffffffffffffda RBX: 00007fca8d8d5fa0 RCX: 00007fca8d68eba9 [ 199.339287][T16815] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 199.339300][T16815] RBP: 00007fca8c0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 199.339310][T16815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.339387][T16815] R13: 00007fca8d8d6038 R14: 00007fca8d8d5fa0 R15: 00007ffe03599578 [ 199.339405][T16815] [ 199.599389][T16819] ALSA: seq fatal error: cannot create timer (-19) [ 199.825839][T16833] lo speed is unknown, defaulting to 1000 [ 200.484016][ T29] audit: type=1326 audit(1758212066.531:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69212eba9 code=0x7ffc0000 [ 200.508502][ T29] audit: type=1326 audit(1758212066.541:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa69212eba9 code=0x7ffc0000 [ 200.532644][ T29] audit: type=1326 audit(1758212066.541:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69212eba9 code=0x7ffc0000 [ 200.556147][ T29] audit: type=1326 audit(1758212066.541:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fa69212eba9 code=0x7ffc0000 [ 200.580236][ T29] audit: type=1326 audit(1758212066.541:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69212eba9 code=0x7ffc0000 [ 200.604194][ T29] audit: type=1326 audit(1758212066.541:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69212eba9 code=0x7ffc0000 [ 200.628591][ T29] audit: type=1326 audit(1758212066.541:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69212eba9 code=0x7ffc0000 [ 200.652716][ T29] audit: type=1326 audit(1758212066.541:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69212eba9 code=0x7ffc0000 [ 200.787152][T16862] tipc: Can't bind to reserved service type 0 [ 200.821314][T16862] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 200.992948][T16867] FAULT_INJECTION: forcing a failure. [ 200.992948][T16867] name failslab, interval 1, probability 0, space 0, times 0 [ 201.005807][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.3.3507 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.005831][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.005841][T16867] Call Trace: [ 201.005846][T16867] [ 201.005929][T16867] __dump_stack+0x1d/0x30 [ 201.005951][T16867] dump_stack_lvl+0xe8/0x140 [ 201.005993][T16867] dump_stack+0x15/0x1b [ 201.006007][T16867] should_fail_ex+0x265/0x280 [ 201.006028][T16867] ? p9_client_create+0x59/0xbc0 [ 201.006054][T16867] should_failslab+0x8c/0xb0 [ 201.006098][T16867] __kmalloc_cache_noprof+0x4c/0x320 [ 201.006193][T16867] p9_client_create+0x59/0xbc0 [ 201.006215][T16867] ? should_failslab+0x8c/0xb0 [ 201.006236][T16867] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 201.006314][T16867] ? v9fs_session_init+0x78/0xde0 [ 201.006336][T16867] v9fs_session_init+0xf7/0xde0 [ 201.006450][T16867] ? avc_has_perm_noaudit+0x1b1/0x200 [ 201.006532][T16867] ? should_fail_ex+0xdb/0x280 [ 201.006611][T16867] ? v9fs_mount+0x51/0x5c0 [ 201.006694][T16867] ? should_failslab+0x8c/0xb0 [ 201.006714][T16867] ? __kmalloc_cache_noprof+0x189/0x320 [ 201.006810][T16867] v9fs_mount+0x67/0x5c0 [ 201.006831][T16867] ? selinux_capable+0x31/0x40 [ 201.006856][T16867] ? __pfx_v9fs_mount+0x10/0x10 [ 201.006907][T16867] legacy_get_tree+0x78/0xd0 [ 201.006926][T16867] vfs_get_tree+0x57/0x1d0 [ 201.006945][T16867] do_new_mount+0x207/0x5e0 [ 201.006968][T16867] ? security_capable+0x83/0x90 [ 201.006993][T16867] path_mount+0x4a4/0xb20 [ 201.007016][T16867] ? user_path_at+0x109/0x130 [ 201.007047][T16867] __se_sys_mount+0x28f/0x2e0 [ 201.007133][T16867] __x64_sys_mount+0x67/0x80 [ 201.007186][T16867] x64_sys_call+0x2b4d/0x2ff0 [ 201.007208][T16867] do_syscall_64+0xd2/0x200 [ 201.007235][T16867] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 201.007323][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.007345][T16867] RIP: 0033:0x7fa69212eba9 [ 201.007388][T16867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.007403][T16867] RSP: 002b:00007fa690b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.007491][T16867] RAX: ffffffffffffffda RBX: 00007fa692375fa0 RCX: 00007fa69212eba9 [ 201.007502][T16867] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 201.007567][T16867] RBP: 00007fa690b97090 R08: 0000200000000280 R09: 0000000000000000 [ 201.007577][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.007588][T16867] R13: 00007fa692376038 R14: 00007fa692375fa0 R15: 00007ffe54c79b08 [ 201.007643][T16867] [ 201.351902][T16872] FAULT_INJECTION: forcing a failure. [ 201.351902][T16872] name failslab, interval 1, probability 0, space 0, times 0 [ 201.364740][T16872] CPU: 0 UID: 0 PID: 16872 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.364864][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.364875][T16872] Call Trace: [ 201.364881][T16872] [ 201.364888][T16872] __dump_stack+0x1d/0x30 [ 201.364909][T16872] dump_stack_lvl+0xe8/0x140 [ 201.364925][T16872] dump_stack+0x15/0x1b [ 201.364940][T16872] should_fail_ex+0x265/0x280 [ 201.364998][T16872] ? snd_seq_fifo_new+0x31/0x110 [ 201.365019][T16872] should_failslab+0x8c/0xb0 [ 201.365043][T16872] __kmalloc_cache_noprof+0x4c/0x320 [ 201.365100][T16872] ? snd_seq_pool_new+0xb8/0xe0 [ 201.365133][T16872] snd_seq_fifo_new+0x31/0x110 [ 201.365165][T16872] snd_seq_open+0x163/0x320 [ 201.365192][T16872] ? __pfx_snd_seq_open+0x10/0x10 [ 201.365225][T16872] snd_open+0x275/0x2e0 [ 201.365243][T16872] chrdev_open+0x2e8/0x3a0 [ 201.365267][T16872] do_dentry_open+0x649/0xa20 [ 201.365296][T16872] ? __pfx_chrdev_open+0x10/0x10 [ 201.365362][T16872] vfs_open+0x37/0x1e0 [ 201.365392][T16872] path_openat+0x1c5e/0x2170 [ 201.365550][T16872] ? xas_load+0x413/0x430 [ 201.365574][T16872] ? __rcu_read_unlock+0x4f/0x70 [ 201.365597][T16872] do_filp_open+0x109/0x230 [ 201.365621][T16872] io_openat2+0x272/0x390 [ 201.365670][T16872] io_openat+0x1b/0x30 [ 201.365698][T16872] __io_issue_sqe+0xfe/0x2e0 [ 201.365797][T16872] ? io_assign_file+0x12/0x200 [ 201.365866][T16872] io_issue_sqe+0x53/0x970 [ 201.365883][T16872] ? io_openat_prep+0x26a/0x2b0 [ 201.365908][T16872] io_submit_sqes+0x675/0x1060 [ 201.365933][T16872] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 201.366031][T16872] ? 0xffffffff81000000 [ 201.366042][T16872] ? __rcu_read_unlock+0x4f/0x70 [ 201.366061][T16872] ? get_pid_task+0x96/0xd0 [ 201.366085][T16872] ? bpf_probe_read_compat_str+0xfb/0x130 [ 201.366154][T16872] ? __rcu_read_unlock+0x4f/0x70 [ 201.366174][T16872] ? bpf_trace_run2+0x124/0x1c0 [ 201.366201][T16872] ? __bpf_trace_sys_enter+0x10/0x30 [ 201.366224][T16872] __x64_sys_io_uring_enter+0x78/0x90 [ 201.366250][T16872] x64_sys_call+0x2de1/0x2ff0 [ 201.366340][T16872] do_syscall_64+0xd2/0x200 [ 201.366436][T16872] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 201.366459][T16872] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 201.366484][T16872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.366523][T16872] RIP: 0033:0x7fbca6a8eba9 [ 201.366536][T16872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.366552][T16872] RSP: 002b:00007fbca54f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 201.366573][T16872] RAX: ffffffffffffffda RBX: 00007fbca6cd5fa0 RCX: 00007fbca6a8eba9 [ 201.366650][T16872] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003 [ 201.366663][T16872] RBP: 00007fbca54f7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.366676][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.366687][T16872] R13: 00007fbca6cd6038 R14: 00007fbca6cd5fa0 R15: 00007ffc2e1f8f28 [ 201.366717][T16872] [ 202.217528][T16926] ALSA: seq fatal error: cannot create timer (-19) [ 202.320131][T16939] FAULT_INJECTION: forcing a failure. [ 202.320131][T16939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.333283][T16939] CPU: 1 UID: 0 PID: 16939 Comm: syz.0.3530 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.333329][T16939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.333339][T16939] Call Trace: [ 202.333344][T16939] [ 202.333351][T16939] __dump_stack+0x1d/0x30 [ 202.333370][T16939] dump_stack_lvl+0xe8/0x140 [ 202.333391][T16939] dump_stack+0x15/0x1b [ 202.333426][T16939] should_fail_ex+0x265/0x280 [ 202.333451][T16939] should_fail+0xb/0x20 [ 202.333468][T16939] should_fail_usercopy+0x1a/0x20 [ 202.333488][T16939] _copy_from_user+0x1c/0xb0 [ 202.333561][T16939] get_timespec64+0x4c/0x100 [ 202.333594][T16939] __io_timeout_prep+0x25c/0x440 [ 202.333619][T16939] io_timeout_prep+0x1f/0x30 [ 202.333653][T16939] io_submit_sqes+0x5ec/0x1060 [ 202.333678][T16939] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 202.333758][T16939] ? __seccomp_filter+0x69d/0x10d0 [ 202.333779][T16939] ? bpf_probe_read_compat_str+0xfb/0x130 [ 202.333805][T16939] ? __rcu_read_unlock+0x4f/0x70 [ 202.333827][T16939] ? bpf_trace_run2+0x124/0x1c0 [ 202.333874][T16939] ? __bpf_trace_sys_enter+0x10/0x30 [ 202.333894][T16939] __x64_sys_io_uring_enter+0x78/0x90 [ 202.333918][T16939] x64_sys_call+0x2de1/0x2ff0 [ 202.333940][T16939] do_syscall_64+0xd2/0x200 [ 202.333974][T16939] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 202.333995][T16939] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 202.334073][T16939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.334091][T16939] RIP: 0033:0x7fb28953eba9 [ 202.334138][T16939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.334154][T16939] RSP: 002b:00007fb287f9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 202.334175][T16939] RAX: ffffffffffffffda RBX: 00007fb289785fa0 RCX: 00007fb28953eba9 [ 202.334188][T16939] RDX: 0000000000003900 RSI: 00000000000006e2 RDI: 0000000000000007 [ 202.334202][T16939] RBP: 00007fb287f9f090 R08: 0000000000000000 R09: 0000000000000e00 [ 202.334261][T16939] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 202.334272][T16939] R13: 00007fb289786038 R14: 00007fb289785fa0 R15: 00007ffe74cd1c88 [ 202.334288][T16939] [ 202.564636][T16943] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3522'. [ 202.573675][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3522'. [ 202.601278][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3522'. [ 202.648125][T16951] lo speed is unknown, defaulting to 1000 [ 202.941835][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 202.941848][ T29] audit: type=1326 audit(1758212069.001:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28953eba9 code=0x7ffc0000 [ 202.999209][ T29] audit: type=1326 audit(1758212069.001:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f801a721465 code=0x7ffc0000 [ 203.024912][ T29] audit: type=1326 audit(1758212069.011:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28953eba9 code=0x7ffc0000 [ 203.049258][ T29] audit: type=1326 audit(1758212069.011:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f801a721465 code=0x7ffc0000 [ 203.073579][ T29] audit: type=1326 audit(1758212069.021:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28953eba9 code=0x7ffc0000 [ 203.097041][ T29] audit: type=1326 audit(1758212069.021:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f801a721465 code=0x7ffc0000 [ 203.120578][ T29] audit: type=1326 audit(1758212069.031:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28953eba9 code=0x7ffc0000 [ 203.144039][ T29] audit: type=1326 audit(1758212069.031:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f801a721465 code=0x7ffc0000 [ 203.167692][ T29] audit: type=1326 audit(1758212069.041:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16938 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28953eba9 code=0x7ffc0000 [ 203.191218][ T29] audit: type=1326 audit(1758212069.041:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.6.3534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f801a721465 code=0x7ffc0000 [ 203.784123][T17003] siw: device registration error -23 [ 204.000917][T17015] support for the xor transformation has been removed. [ 204.141569][T17034] siw: device registration error -23 [ 204.423013][T17057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3560'. [ 204.433046][T17057] netem: change failed [ 204.517330][T17063] ALSA: seq fatal error: cannot create timer (-19) [ 204.848637][T17094] ALSA: seq fatal error: cannot create timer (-19) [ 204.885909][T17099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3574'. [ 204.894940][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 204.918136][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3574'. [ 204.931901][T17097] support for the xor transformation has been removed. [ 204.965871][T17105] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3576'. [ 204.974908][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3576'. [ 205.004156][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3576'. [ 205.008628][T17110] ALSA: seq fatal error: cannot create timer (-19) [ 205.108586][T17132] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3585'. [ 205.118248][T17132] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3585'. [ 205.127307][T17132] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3585'. [ 205.133535][T17133] SELinux: policydb magic number 0xf97cf18c does not match expected magic number 0xf97cff8c [ 205.169807][T17133] SELinux: failed to load policy [ 205.171169][T17132] veth0_to_bond: entered allmulticast mode [ 205.234272][T17133] lo speed is unknown, defaulting to 1000 [ 205.253364][T17146] random: crng reseeded on system resumption [ 205.597148][T17194] siw: device registration error -23 [ 205.603625][T17187] ALSA: seq fatal error: cannot create timer (-19) [ 206.115166][T17217] lo speed is unknown, defaulting to 1000 [ 206.212586][T17259] ALSA: seq fatal error: cannot create timer (-19) [ 206.282587][T17217] chnl_net:caif_netlink_parms(): no params data found [ 206.311865][T17337] ALSA: seq fatal error: cannot create timer (-19) [ 206.359505][T17217] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.366573][T17217] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.377184][T17217] bridge_slave_0: entered allmulticast mode [ 206.383513][T17217] bridge_slave_0: entered promiscuous mode [ 206.390340][T17217] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.397566][T17217] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.409007][T17217] bridge_slave_1: entered allmulticast mode [ 206.420244][T17217] bridge_slave_1: entered promiscuous mode [ 206.443199][T17217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.454485][T17403] FAULT_INJECTION: forcing a failure. [ 206.454485][T17403] name failslab, interval 1, probability 0, space 0, times 0 [ 206.461417][T17217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.467132][T17403] CPU: 1 UID: 0 PID: 17403 Comm: syz.3.3606 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.467158][T17403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.467171][T17403] Call Trace: [ 206.467178][T17403] [ 206.467185][T17403] __dump_stack+0x1d/0x30 [ 206.467223][T17403] dump_stack_lvl+0xe8/0x140 [ 206.467242][T17403] dump_stack+0x15/0x1b [ 206.467259][T17403] should_fail_ex+0x265/0x280 [ 206.467282][T17403] ? audit_log_d_path+0x8d/0x150 [ 206.467390][T17403] should_failslab+0x8c/0xb0 [ 206.467492][T17403] __kmalloc_cache_noprof+0x4c/0x320 [ 206.467521][T17403] audit_log_d_path+0x8d/0x150 [ 206.467609][T17403] audit_log_d_path_exe+0x42/0x70 [ 206.467638][T17403] audit_log_task+0x1e9/0x250 [ 206.467723][T17403] audit_seccomp+0x61/0x100 [ 206.467747][T17403] ? __seccomp_filter+0x68c/0x10d0 [ 206.467776][T17403] __seccomp_filter+0x69d/0x10d0 [ 206.467798][T17403] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 206.467825][T17403] ? vfs_write+0x7e8/0x960 [ 206.467846][T17403] ? __rcu_read_unlock+0x4f/0x70 [ 206.467867][T17403] ? __fget_files+0x184/0x1c0 [ 206.467929][T17403] __secure_computing+0x82/0x150 [ 206.467950][T17403] syscall_trace_enter+0xcf/0x1e0 [ 206.467976][T17403] do_syscall_64+0xac/0x200 [ 206.468006][T17403] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.468029][T17403] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.468105][T17403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.468126][T17403] RIP: 0033:0x7fa69212eba9 [ 206.468141][T17403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.468220][T17403] RSP: 002b:00007fa690b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 206.468238][T17403] RAX: ffffffffffffffda RBX: 00007fa692375fa0 RCX: 00007fa69212eba9 [ 206.468251][T17403] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000000 [ 206.468264][T17403] RBP: 00007fa690b97090 R08: 0000000000000000 R09: 0000000000000000 [ 206.468276][T17403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.468288][T17403] R13: 00007fa692376038 R14: 00007fa692375fa0 R15: 00007ffe54c79b08 [ 206.468308][T17403] [ 206.722770][T17217] team0: Port device team_slave_0 added [ 206.777959][T17217] team0: Port device team_slave_1 added [ 206.811306][T17217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.818330][T17217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.844232][T17217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.862006][T17217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.869069][T17217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.894961][T17217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.970650][T17484] syzkaller0: entered promiscuous mode [ 206.976356][T17484] syzkaller0: entered allmulticast mode [ 206.991140][T17217] hsr_slave_0: entered promiscuous mode [ 207.000923][T17217] hsr_slave_1: entered promiscuous mode [ 207.149258][T17580] ALSA: seq fatal error: cannot create timer (-19) [ 207.442222][T17613] lo speed is unknown, defaulting to 1000 [ 208.112678][T15282] bridge_slave_1: left allmulticast mode [ 208.118357][T15282] bridge_slave_1: left promiscuous mode [ 208.124739][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.167218][T17637] serio: Serial port ptm0 [ 208.180700][T15282] bridge_slave_0: left allmulticast mode [ 208.186362][T15282] bridge_slave_0: left promiscuous mode [ 208.192078][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.246481][T15282] veth0_to_bridge: left allmulticast mode [ 208.252366][T15282] veth0_to_bridge: left promiscuous mode [ 208.258095][T15282] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 208.414401][T17652] blk-mq: reduced tag depth (128 -> 64) [ 208.421052][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 208.421065][ T29] audit: type=1400 audit(1758212074.471:7159): avc: denied { write } for pid=17651 comm="syz.1.3620" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 208.597745][T17661] ALSA: seq fatal error: cannot create timer (-19) [ 208.871531][T15282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.882060][T15282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.891624][T15282] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 208.905106][T15282] bond0 (unregistering): Released all slaves [ 208.975585][T17217] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.001452][T17217] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.020292][T17217] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.042678][T17217] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.065620][T15282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.079366][T15282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.103801][T15282] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 209.110918][T15282] batman_adv: batadv0: Removing interface: veth1_vlan [ 209.200196][ T29] audit: type=1404 audit(1758212075.261:7160): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 209.240402][ T29] audit: type=1326 audit(1758212075.271:7161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.1.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 209.263974][ T29] audit: type=1326 audit(1758212075.271:7162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.1.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 209.287432][ T29] audit: type=1326 audit(1758212075.271:7163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17719 comm="syz.1.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca6a8eba9 code=0x7ffc0000 [ 209.311166][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.311178][ C0] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 209.311197][ C0] audit: backlog limit exceeded [ 209.311211][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.311226][ C0] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 [ 209.346110][T17697] netlink: 'syz.6.3627': attribute type 21 has an invalid length. [ 209.354199][T15282] team0 (unregistering): Port device team_slave_1 removed [ 209.371383][T15282] team0 (unregistering): Port device team_slave_0 removed [ 209.442203][T17728] lo speed is unknown, defaulting to 1000 [ 209.940459][T15282] bridge_slave_1: left allmulticast mode [ 209.946167][T15282] bridge_slave_1: left promiscuous mode [ 209.951846][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.979022][T15282] bridge_slave_0: left allmulticast mode [ 209.984672][T15282] bridge_slave_0: left promiscuous mode [ 209.990394][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.070568][T15282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.089790][T15282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.109408][T15282] bond0 (unregistering): Released all slaves [ 210.177919][T15282] hsr_slave_0: left promiscuous mode [ 210.183952][T15282] hsr_slave_1: left promiscuous mode [ 210.199058][T15282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.219209][T15282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.279125][T15282] team0 (unregistering): Port device team_slave_1 removed [ 210.297236][T15282] team0 (unregistering): Port device team_slave_0 removed [ 213.616629][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 213.616643][ T29] audit: type=1400 audit(1758212079.671:7407): avc: denied { execmem } for pid=17802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 214.624722][ T29] audit: type=1400 audit(1758212080.681:7408): avc: denied { execmem } for pid=17803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 215.733723][ T29] audit: type=1400 audit(1758212081.791:7409): avc: denied { execmem } for pid=17804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 215.949199][ T29] audit: type=1400 audit(1758212082.011:7410): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.77 dest=45290 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 215.993921][ T29] audit: type=1400 audit(1758212082.051:7411): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.77 dest=45290 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 216.941815][ T29] audit: type=1400 audit(1758212083.001:7412): avc: denied { execmem } for pid=17805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 218.250819][ T29] audit: type=1400 audit(1758212084.311:7413): avc: denied { execmem } for pid=17806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 218.509393][ T29] audit: type=1400 audit(1758212084.571:7414): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 218.532941][ T29] audit: type=1400 audit(1758212084.571:7415): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 219.658729][ T29] audit: type=1400 audit(1758212085.711:7416): avc: denied { execmem } for pid=17807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 221.167250][ T29] audit: type=1400 audit(1758212087.221:7417): avc: denied { execmem } for pid=17808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 222.775372][ T29] audit: type=1400 audit(1758212088.831:7418): avc: denied { execmem } for pid=17809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 222.905655][ T29] audit: type=1400 audit(1758212088.961:7419): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.77 dest=45290 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 222.989527][ T29] audit: type=1400 audit(1758212089.051:7420): avc: denied { recv } for pid=15282 comm="kworker/u8:63" saddr=10.128.0.163 src=30036 daddr=10.128.0.77 dest=45290 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 224.484088][ T29] audit: type=1400 audit(1758212090.541:7421): avc: denied { execmem } for pid=17810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 226.292129][ T29] audit: type=1400 audit(1758212092.351:7422): avc: denied { execmem } for pid=17811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 227.469407][ T29] audit: type=1400 audit(1758212093.531:7423): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 228.200400][ T29] audit: type=1400 audit(1758212094.261:7424): avc: denied { execmem } for pid=17812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 230.029069][ T29] audit: type=1400 audit(1758212096.091:7425): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 230.208683][ T29] audit: type=1400 audit(1758212096.261:7426): avc: denied { execmem } for pid=17813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 230.228630][ T29] audit: type=1400 audit(1758212096.271:7427): avc: denied { write } for pid=3288 comm="syz-executor" path="pipe:[1598]" dev="pipefs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 230.251863][ T29] audit: type=1400 audit(1758212096.271:7428): avc: denied { write } for pid=3288 comm="syz-executor" path="pipe:[1598]" dev="pipefs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 230.275022][ T29] audit: type=1400 audit(1758212096.271:7429): avc: denied { write } for pid=3288 comm="syz-executor" path="pipe:[1598]" dev="pipefs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 230.298237][ T29] audit: type=1400 audit(1758212096.271:7430): avc: denied { write } for pid=3288 comm="syz-executor" path="pipe:[1598]" dev="pipefs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 230.321349][ T29] audit: type=1400 audit(1758212096.271:7431): avc: denied { write } for pid=3288 comm="syz-executor" path="pipe:[1598]" dev="pipefs" ino=1598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 230.474850][T15282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.561059][T15282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.620952][T15282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.691687][T15282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.750647][T15282] bridge_slave_1: left allmulticast mode [ 230.756271][T15282] bridge_slave_1: left promiscuous mode [ 230.761858][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.769451][T15282] bridge_slave_0: left allmulticast mode [ 230.775063][T15282] bridge_slave_0: left promiscuous mode [ 230.780728][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.788471][T15282] veth0_to_bridge: left allmulticast mode [ 230.794204][T15282] veth0_to_bridge: left promiscuous mode [ 230.799886][T15282] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 230.930488][T15282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.940210][T15282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.949462][T15282] bond0 (unregistering): Released all slaves [ 230.957291][T15282] bond1 (unregistering): Released all slaves [ 231.000016][T15282] tipc: Left network mode [ 231.006500][T15282] hsr_slave_0: left promiscuous mode [ 231.012126][T15282] hsr_slave_1: left promiscuous mode [ 231.017611][T15282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.025014][T15282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.032432][T15282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.039809][T15282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.049475][T15282] veth1_macvtap: left promiscuous mode [ 231.054938][T15282] veth0_macvtap: left promiscuous mode [ 231.060600][T15282] veth1_vlan: left promiscuous mode [ 231.065889][T15282] veth0_vlan: left promiscuous mode [ 231.116694][T15282] team0 (unregistering): Port device team_slave_1 removed [ 231.126161][T15282] team0 (unregistering): Port device team_slave_0 removed [ 231.421719][T15282] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.432073][T15282] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 231.470920][T15282] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.481190][T15282] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 231.530982][T15282] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.541243][T15282] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 231.600866][T15282] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.611142][T15282] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 231.661163][T15282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.700813][T15282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.771576][T15282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.821334][T15282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.900401][T15282] bridge_slave_1: left allmulticast mode [ 231.906042][T15282] bridge_slave_1: left promiscuous mode [ 231.911740][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.919434][T15282] bridge_slave_0: left allmulticast mode [ 231.925043][T15282] bridge_slave_0: left promiscuous mode [ 231.930761][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 231.930765][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.930773][ T29] audit: type=1400 audit(1758212097.991:7443): avc: denied { recv } for pid=15282 comm="kworker/u8:63" saddr=10.128.0.163 src=33774 daddr=10.128.0.77 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 231.930872][T15282] ================================================================== [ 231.936876][T15282] BUG: KCSAN: data-race in data_push_tail / number [ 231.936907][T15282] [ 231.936911][T15282] write to 0xffffffff88e24a48 of 1 bytes by task 29 on cpu 1: [ 231.936921][T15282] number+0x8d6/0xab0 [ 231.936934][T15282] vsnprintf+0x691/0x890 [ 231.936945][T15282] vscnprintf+0x41/0x90 [ 231.936958][T15282] printk_sprint+0x30/0x2d0 [ 231.936968][T15282] vprintk_store+0x599/0x860 [ 231.936977][T15282] vprintk_emit+0x178/0x650 [ 231.936987][T15282] vprintk_default+0x26/0x30 [ 231.936998][T15282] vprintk+0x1d/0x30 [ 231.937011][T15282] _printk+0x79/0xa0 [ 231.937026][T15282] kauditd_hold_skb+0x1b1/0x1c0 [ 231.937037][T15282] kauditd_send_queue+0x270/0x2c0 [ 231.937048][T15282] kauditd_thread+0x421/0x630 [ 231.937066][T15282] kthread+0x489/0x510 [ 231.937079][T15282] ret_from_fork+0x11f/0x1b0 [ 231.937091][T15282] ret_from_fork_asm+0x1a/0x30 [ 231.937104][T15282] [ 231.937108][T15282] read to 0xffffffff88e24a48 of 8 bytes by task 15282 on cpu 0: [ 231.937118][T15282] data_push_tail+0xfd/0x420 [ 231.937134][T15282] data_alloc+0xbf/0x2b0 [ 231.937150][T15282] prb_reserve+0x808/0xaf0 [ 231.937166][T15282] vprintk_store+0x56d/0x860 [ 231.937175][T15282] vprintk_emit+0x178/0x650 [ 231.937185][T15282] vprintk_default+0x26/0x30 [ 231.937195][T15282] vprintk+0x1d/0x30 [ 231.937208][T15282] _printk+0x79/0xa0 [ 231.937223][T15282] br_set_state+0x28c/0x390 [ 231.937239][T15282] br_stp_disable_port+0x5d/0x150 [ 231.937249][T15282] del_nbp+0xdc/0x790 [ 231.937262][T15282] br_dev_delete+0x4e/0xe0 [ 231.937275][T15282] br_net_exit_rtnl+0xae/0x120 [ 231.937292][T15282] ops_undo_list+0x1b4/0x410 [ 231.937304][T15282] cleanup_net+0x2de/0x4d0 [ 231.937318][T15282] process_scheduled_works+0x4cb/0x9d0 [ 231.937335][T15282] worker_thread+0x582/0x770 [ 231.937352][T15282] kthread+0x489/0x510 [ 231.937368][T15282] ret_from_fork+0x11f/0x1b0 [ 231.937379][T15282] ret_from_fork_asm+0x1a/0x30 [ 231.937391][T15282] [ 231.937394][T15282] value changed: 0x00000000fffffab1 -> 0x3128746964756120 [ 231.937402][T15282] [ 231.937405][T15282] Reported by Kernel Concurrency Sanitizer on: [ 231.937413][T15282] CPU: 0 UID: 0 PID: 15282 Comm: kworker/u8:63 Not tainted syzkaller #0 PREEMPT(voluntary) [ 231.937428][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.937437][T15282] Workqueue: netns cleanup_net [ 231.937450][T15282] ================================================================== [ 232.210817][ T29] audit: type=1400 audit(1758212098.271:7444): avc: denied { recv } for pid=6364 comm="kworker/0:8" saddr=10.128.0.163 src=33774 daddr=10.128.0.77 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 232.238095][T15282] veth0_to_bridge: left allmulticast mode [ 232.243882][T15282] veth0_to_bridge: left promiscuous mode [ 232.249852][T15282] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 232.257331][T15282] bridge_slave_1: left allmulticast mode [ 232.262989][T15282] bridge_slave_1: left promiscuous mode [ 232.268569][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.276279][T15282] bridge_slave_0: left allmulticast mode [ 232.281929][T15282] bridge_slave_0: left promiscuous mode [ 232.287501][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.295569][T15282] veth0_to_bridge: left allmulticast mode [ 232.301290][T15282] veth0_to_bridge: left promiscuous mode [ 232.306991][T15282] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 232.589112][ T29] audit: type=1400 audit(1758212098.651:7445): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 232.671018][T15282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.680554][T15282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.690096][T15282] bond0 (unregistering): Released all slaves [ 232.698017][T15282] bond1 (unregistering): Released all slaves [ 232.820536][T15282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.829842][T15282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.839044][T15282] bond0 (unregistering): Released all slaves [ 232.881744][T15282] tipc: Left network mode [ 232.921470][T15282] hsr_slave_0: left promiscuous mode [ 232.926966][T15282] hsr_slave_1: left promiscuous mode [ 232.932529][T15282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.939899][T15282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.947289][T15282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.954654][T15282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.963409][T15282] hsr_slave_0: left promiscuous mode [ 232.972919][T15282] veth1_macvtap: left promiscuous mode [ 232.978365][T15282] veth0_macvtap: left promiscuous mode [ 232.983931][T15282] veth1_vlan: left promiscuous mode [ 232.989243][T15282] veth0_vlan: left promiscuous mode [ 232.994981][T15282] veth1_macvtap: left promiscuous mode [ 233.000495][T15282] veth0_macvtap: left promiscuous mode [ 233.006079][T15282] veth1_vlan: left promiscuous mode [ 233.011403][T15282] veth0_vlan: left promiscuous mode [ 233.077697][T15282] team0 (unregistering): Port device team_slave_1 removed [ 233.086903][T15282] team0 (unregistering): Port device team_slave_0 removed [ 233.098296][T15282] veth0_to_bond (unregistering): left allmulticast mode [ 233.135900][T15282] team0 (unregistering): Port device team_slave_1 removed [ 233.145336][T15282] team0 (unregistering): Port device team_slave_0 removed [ 233.656216][ T29] audit: type=1400 audit(1758212099.711:7446): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=33774 daddr=10.128.0.77 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 233.949145][ T29] audit: type=1400 audit(1758212100.011:7447): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=33774 daddr=10.128.0.77 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 236.731975][ T29] audit: type=1400 audit(1758212102.791:7448): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.77 dest=45290 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 237.069250][ T29] audit: type=1400 audit(1758212103.131:7449): avc: denied { recv } for pid=15271 comm="kworker/u8:52" saddr=10.128.0.163 src=30036 daddr=10.128.0.77 dest=45290 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 237.243849][ T29] audit: type=1400 audit(1758212103.301:7450): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=33774 daddr=10.128.0.77 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 237.389166][ T29] audit: type=1400 audit(1758212103.451:7451): avc: denied { recv } for pid=15282 comm="kworker/u8:63" saddr=10.128.0.163 src=33774 daddr=10.128.0.77 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0