last executing test programs: 1.787787188s ago: executing program 0 (id=4821): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xf63cc169a5624fa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) stat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f00005f1000/0x4000)=nil, 0x4000, 0x3000004, 0x13, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400048659d6e802c81690745f7f42b8721500", @ANYRES16=r6, @ANYBLOB="000825bd7000fddbdf250600000008000200040000000800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a1, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) 1.76442196s ago: executing program 0 (id=4822): setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000efffffffffffff060000009500040000000002"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x5, &(0x7f0000000980)={0x7, 0x1000}, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x2e0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x4004944) getpeername$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000a00)=0x1c) r4 = gettid() clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x2, 0x2, 0x82, 0x10001, 0x8, 0xffffffffffff8c00, 0x5, 0x2}, &(0x7f0000000740)={0x39ad, 0x9, 0x2, 0x8, 0x7, 0x1, 0x1ff, 0x5}, &(0x7f00000007c0)={0x9109000000000, 0x800, 0x3, 0x7b6, 0x400, 0x7ff, 0x70, 0x1}, &(0x7f0000000840)={r5, r6+60000000}, &(0x7f00000008c0)={&(0x7f0000000880)={[0x7]}, 0x8}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) prlimit64(r4, 0x3, &(0x7f0000000900)={0x7ff, 0x3}, &(0x7f0000000940)) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfffd, 0xfff1}, {0x0, 0x2}, {0x8, 0x1}}}, 0x24}}, 0x0) recvmsg$inet_nvme(r8, &(0x7f0000000600)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f0000000400)=""/33, 0x21}], 0x4}, 0x10002) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) 1.12548611s ago: executing program 3 (id=4838): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 1.102937782s ago: executing program 3 (id=4839): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff5800"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1.087583303s ago: executing program 3 (id=4840): r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x8800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@nogrpid}, {@norecovery}, {@errors_remount}]}, 0x1, 0x57d, &(0x7f0000000580)="$eJzs3d9rW1UcAPDvTX9s66brYAwVkcIenOjStfXHBMH5KDoc6PssbSyj6TKadKx1sO3BvfgiQxBxID74pu8+Dv8B/4qBDoeMog++VG5602ZLsmZZ1mTm84Fbzrk/es43956Tc3NuSAADayL9k4t4PiK+SiIORkSSbRuObOPE5n7r9y7PpUsSGxsf/5VU90vztf9VO25/lnkuIn79IuLVXGO55dW1xdlisbCc5ScrSxcmy6tDcW5pdqGwUDg/PTNz8o2Z6bfferNrsb5y5p9vP7r1/skvj65/8/OdQzeSOBUHsm31cTyGq/WZiZjIXpOROPXAjlNdKKyfJL2uAB0Zytr5SKR9wMEYylo98P93JSI2OvVux0cCfSHpvP0DT7XaOKB2b9+l++Cnxt33Nm+AGuMf3vxsJPZW743G1pP77ozS+93xLpSflvHLHzdvpEt073MIgB1dvRYRJ4aHG/u/JOv/OneijX0eLEP/B7vnVjr+ea3Z+Ce3Nf6JJuOf/U3abid2bv+5O10opqV0/PdO0/Hv1qTV+FCWe6Y65htJPjtXLKR927MRcSxG9qT5h83nnFy/vdFqW/34L13S8mtjwawed4b33H/M/Gxl9nFirnf3WsQLTce/ydb5T5qc//T1ONNmGUcKN19qtW3n+J+sjR8iXm56/rdntJLt+cm1443zk5PV62GydlU0+vv6kd9ald8Y/2jsZvzp+R97ePzjSf18bfnRy/h+77+FVtvuiz/av/5Hk0+q6dFs3aXZSmV5KmI0+bBx/fT2sbV8bf80/mNHH97/Nbv+90XEp23Gf/3wTy+2FX8Prv80/vlHOv+Pnrj9wefftSq/vf7v9WrqWLamnf5vp3qNdXw1AwAAAAAAQP/KRcSBSHL5rXQul89vPt9xOMZyxfHN5z9iPqrflR2PkVxtpvtg3fMQU9nzsLX89AP5mYg4FBFfD+2r5vNzpeJ8r4MHAAAAAAAAAAAAAAAAAACAPrG/xff/U78P9bp2wBPnJ79hcO3Y/rvxS09AX/L+D4NL+4fBpf3D4NL+YXDVtf89vawHsPu8/8Pg0v5hcGn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FVnTp9Ol431e5fn0vz8xdWVxdLF4/OF8mJ+aWUuP1davpBfKJUWioX8XGlpp/9XLJUuTE3HyqXJSqFcmSyvrp1dKq2cr5w9tzS7UDhbGNmVqAAAAAAAAAAAAAAAAAAAAODpUl5dW5wtFgvLEhIdJYb7oxqbifSSrltzpZYY7XXFmiT+/LEvqtEq0eueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/RcAAP//NFYwZA==") syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x0) faccessat(r5, &(0x7f0000000000)='./file0\x00', 0x5) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) 950.693554ms ago: executing program 3 (id=4843): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 907.154038ms ago: executing program 0 (id=4845): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xf63cc169a5624fa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) stat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f00005f1000/0x4000)=nil, 0x4000, 0x3000004, 0x13, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400048659d6e802c81690745f7f42b8721500", @ANYRES16=r6, @ANYBLOB="000825bd7000fddbdf250600000008000200040000000800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a1, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) 878.66649ms ago: executing program 0 (id=4847): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x88880, 0x0) socket(0x80000000000000a, 0x2, 0x0) geteuid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}], 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0x40044583, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000440), 0x4) uname(&(0x7f0000000940)=""/255) 870.369211ms ago: executing program 3 (id=4848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100000080161600000000ef0000af000000006d0000feff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40490, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, @perf_bp={0x0, 0x4}, 0x10080, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2800, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x73, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) rt_sigpending(0x0, 0xfffffffffffffec3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYBLOB="b18cc2d8cde5a3f7c1fa0f888739bcf74bcdb21857ad57240016217baef1ad1d997ac6e78b80fe1b917d41307a5d54bf8d1d4bfa1836a33f6ed4b747"], 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x15, 0x5, 0x0) 705.346714ms ago: executing program 3 (id=4850): bpf$PROG_LOAD(0x5, 0x0, 0x9045e73b4c0fcea4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x1b, &(0x7f0000000200)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001940)}, 0x4}], 0x1, 0x10000, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 704.073024ms ago: executing program 0 (id=4851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000500000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e0001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 585.254563ms ago: executing program 0 (id=4854): bpf$PROG_LOAD(0x5, 0x0, 0x9045e73b4c0fcea4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x1b, &(0x7f0000000200)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001940)}, 0x4}], 0x1, 0x10000, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 515.368519ms ago: executing program 1 (id=4855): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 459.909263ms ago: executing program 1 (id=4857): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = gettid() r1 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r0, 0x28, &(0x7f0000000240)={0x0, 0xfffffffe, 0x8}) 423.911737ms ago: executing program 1 (id=4859): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_pidfd_open(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 369.028351ms ago: executing program 1 (id=4860): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000200)=0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) close_range(r0, r1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 314.852925ms ago: executing program 4 (id=4862): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x88880, 0x0) socket(0x80000000000000a, 0x2, 0x0) geteuid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}], 0x2c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0x40044583, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000440), 0x4) uname(&(0x7f0000000940)=""/255) 263.057349ms ago: executing program 1 (id=4864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000380108807c000080500009804c000080060001000200000008000200ac1414aa0500210002000000060001000200000008000200e00000020500030001000000060001000200000008000200e00000010500030001000000200004000a004e2400000003ff0200000000000000000000000000010600000006000500060000004c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c6c00008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a000009000000070000000000000000000000000000000003000000240009801c0000800600010002000000080002007f00000105000300030000000400008024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a"], 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="90160000", @ANYRES16=r4, @ANYBLOB="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"], 0x1690}, 0x1, 0x0, 0x0, 0x14}, 0x810) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) futex(&(0x7f0000000080), 0x4, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x1, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfffffffc, 0x3, 0x1000000, 0x200000, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x400, 0x1, 0x1000, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x1, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x20000, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x24000400) 227.168882ms ago: executing program 2 (id=4865): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x7cd6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000be5533f55a001b000000b70000000000000095404e626cec6596b98950b741a3fe91bc5690ead92cc89ba3b52dfa139ce82ce71a2ac0c7e2bb816e60a19eec88ba84e4430852e01047b4475b492c0bd803423bc422f3894dfa6ac09598e25e879a5e4441113908c8f86611ea0f5e674e49b8801387d6a23b48c1e34cf77e6301a63f51d533d80ce6e1bf71935430d4d4cbce49c96926c5e319d7138e23858b4a3d5485da673814d4f95acd65e0878dc9d3b6eb3128ed8f5fa0f5353d1a53a73a127b78803f4c9bd62816fd91a360be"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c756e616d653dd0"]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200000ffc000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r9, 0x0) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x2000) 154.691028ms ago: executing program 1 (id=4866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 142.064139ms ago: executing program 2 (id=4867): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x7cd6}, 0x8) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c756e616d653dd0"]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200000ffc000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) 109.616381ms ago: executing program 4 (id=4868): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 90.857723ms ago: executing program 2 (id=4869): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x40, 0x0, 0x0) 89.697483ms ago: executing program 4 (id=4870): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800000063811881480378fccb1199000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000207c00000900010073797a30000000000900030073797a32"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000e90001080001400000000305240200020000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x24008014}, 0x0) 68.829095ms ago: executing program 4 (id=4871): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_pidfd_open(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 68.235015ms ago: executing program 2 (id=4872): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x7cd6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001800)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000be5533f55a001b000000b70000000000000095404e626cec6596b98950b741a3fe91bc5690ead92cc89ba3b52dfa139ce82ce71a2ac0c7e2bb816e60a19eec88ba84e4430852e01047b4475b492c0bd803423bc422f3894dfa6ac09598e25e879a5e4441113908c8f86611ea0f5e674e49b8801387d6a23b48c1e34cf77e6301a63f51d533d80ce6e1bf71935430d4d4cbce49c96926c5e319d7138e23858b4a3d5485da673814d4f95acd65e0878dc9d3b6eb3128ed8f5fa0f5353d1a53a73a127b78803f4c9bd62816fd91a360be"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c756e616d653dd0"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200000ffc000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r9, 0x0) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x2000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000e000000000000000000000018110000", @ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) 55.766135ms ago: executing program 4 (id=4873): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 17.912399ms ago: executing program 2 (id=4874): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {0x0, 0xb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x0, 0x10001}], [{}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.52784ms ago: executing program 2 (id=4875): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000200)=0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) close_range(r0, r1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 0s ago: executing program 4 (id=4876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r3, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000016c0)=ANY=[@ANYBLOB="90160000", @ANYRES16=r4, @ANYBLOB="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"], 0x1690}, 0x1, 0x0, 0x0, 0x14}, 0x810) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) futex(&(0x7f0000000080), 0x4, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x1, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xc, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfffffffc, 0x3, 0x1000000, 0x200000, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x400, 0x1, 0x1000, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x1, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x20000, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x24000400) kernel console output (not intermixed with test programs): 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.163494][T19664] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3254: Allocating blocks 465-513 which overlap fs metadata [ 202.179775][T19664] EXT4-fs (loop1): pa ffff888107219bd0: logic 256, phys. 369, len 9 [ 202.187824][T19664] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 202.199780][T19664] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 202.227910][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.228347][T19671] netlink: 'syz.3.3255': attribute type 13 has an invalid length. [ 202.265933][T19677] loop1: detected capacity change from 0 to 1024 [ 202.281505][T19677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.309619][T19671] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.316966][T19671] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.380624][T19671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.393250][T19671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.472533][T19677] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 202.500697][ T4325] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.514427][ T4325] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.527679][ T4325] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.528981][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.537313][ T4325] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.566541][T19690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3259'. [ 202.677591][T19697] SELinux: ebitmap: truncated map [ 202.689228][T19697] SELinux: failed to load policy [ 202.710281][T19701] netlink: 464 bytes leftover after parsing attributes in process `syz.1.3263'. [ 202.744433][T19706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3265'. [ 202.840562][T19710] netlink: 'syz.3.3266': attribute type 27 has an invalid length. [ 202.858857][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3266'. [ 202.931503][T19718] loop3: detected capacity change from 0 to 1024 [ 202.950597][T19718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.981213][T19726] netlink: 'syz.4.3272': attribute type 27 has an invalid length. [ 203.023166][T19721] netlink: 'syz.2.3271': attribute type 13 has an invalid length. [ 203.064691][T19726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 203.101703][T19731] loop2: detected capacity change from 0 to 1024 [ 203.122360][T19718] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 203.166453][T19731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.173053][T19736] netlink: 464 bytes leftover after parsing attributes in process `syz.4.3275'. [ 203.189101][T18893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.192428][T19731] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3273: Allocating blocks 465-513 which overlap fs metadata [ 203.213667][T19734] SELinux: ebitmap: truncated map [ 203.219885][T19734] SELinux: failed to load policy [ 203.246422][T19731] EXT4-fs (loop2): pa ffff88810727e7e0: logic 256, phys. 369, len 9 [ 203.254646][T19731] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 203.265186][T19731] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 203.280236][T19747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3277'. [ 203.302865][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.383964][T19757] netlink: 'syz.2.3279': attribute type 27 has an invalid length. [ 203.419377][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3279'. [ 203.585890][T19774] loop2: detected capacity change from 0 to 1024 [ 203.615056][T19780] loop1: detected capacity change from 0 to 128 [ 203.624051][T19774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.639210][T19780] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 203.753335][T17451] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.807976][T19774] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 203.872387][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.197333][T19809] lo speed is unknown, defaulting to 1000 [ 204.385535][T19835] loop4: detected capacity change from 0 to 1024 [ 204.453890][T19835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.540241][T19844] loop2: detected capacity change from 0 to 1024 [ 204.563013][T19835] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3298: Allocating blocks 465-513 which overlap fs metadata [ 204.604212][T19844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.635980][T19835] EXT4-fs (loop4): pa ffff88810727e8c0: logic 256, phys. 369, len 9 [ 204.644133][T19835] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 204.716089][T19835] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 204.797225][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.058334][ T29] kauditd_printk_skb: 1375 callbacks suppressed [ 205.058353][ T29] audit: type=1326 audit(205.044:34622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.114794][ T29] audit: type=1326 audit(205.044:34623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.137863][ T29] audit: type=1326 audit(205.044:34624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.160861][ T29] audit: type=1326 audit(205.044:34625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.183967][ T29] audit: type=1326 audit(205.044:34626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.206983][ T29] audit: type=1326 audit(205.044:34627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.229988][ T29] audit: type=1326 audit(205.044:34628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.253043][ T29] audit: type=1326 audit(205.044:34629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.276034][ T29] audit: type=1326 audit(205.044:34630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.299030][ T29] audit: type=1326 audit(205.054:34631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19860 comm="syz.1.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 205.358943][T19844] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 205.415221][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.516932][T19923] loop3: detected capacity change from 0 to 128 [ 205.525473][T19923] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 205.538168][T19926] loop0: detected capacity change from 0 to 1024 [ 205.544856][T19884] validate_nla: 3 callbacks suppressed [ 205.544869][T19884] netlink: 'syz.4.3310': attribute type 13 has an invalid length. [ 205.551457][T19926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.605713][T19926] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3314: Allocating blocks 465-513 which overlap fs metadata [ 205.614944][T19938] loop1: detected capacity change from 0 to 1024 [ 205.630363][T19926] EXT4-fs (loop0): pa ffff888107219bd0: logic 256, phys. 369, len 9 [ 205.638544][T19926] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 205.651690][T18893] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.661464][T19926] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 205.677516][T19938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.712737][T19947] loop3: detected capacity change from 0 to 164 [ 205.728788][T19947] iso9660: Unknown parameter '' [ 205.747184][T19947] siw: device registration error -23 [ 205.754521][T16206] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.163281][T19938] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 206.199841][T20012] netlink: 'syz.0.3325': attribute type 13 has an invalid length. [ 206.254220][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.313046][T20022] loop2: detected capacity change from 0 to 128 [ 206.341205][T20022] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 206.420399][T16880] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.492776][T20039] loop2: detected capacity change from 0 to 1024 [ 206.510775][T20039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.526784][T20039] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3334: Allocating blocks 465-513 which overlap fs metadata [ 206.544542][T20039] EXT4-fs (loop2): pa ffff88810727e930: logic 256, phys. 369, len 9 [ 206.552653][T20039] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 206.563210][T20039] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 206.595223][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.637781][T20081] SELinux: ebitmap: truncated map [ 206.643311][T20081] SELinux: failed to load policy [ 206.723570][T20084] hub 8-0:1.0: USB hub found [ 206.728570][T20084] hub 8-0:1.0: 8 ports detected [ 206.942915][T20118] netlink: 'syz.2.3347': attribute type 13 has an invalid length. [ 206.973422][T20121] loop0: detected capacity change from 0 to 1024 [ 206.983455][T20125] loop1: detected capacity change from 0 to 1024 [ 206.999295][T20125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.012903][T20123] SELinux: ebitmap: truncated map [ 207.019300][T20121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.019344][T20123] SELinux: failed to load policy [ 207.050726][T20121] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3349: Allocating blocks 465-513 which overlap fs metadata [ 207.065857][T20121] EXT4-fs (loop0): pa ffff888107219af0: logic 256, phys. 369, len 9 [ 207.073945][T20121] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 207.084242][T20121] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 207.111731][T16206] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.192369][T20140] netlink: 'syz.0.3354': attribute type 27 has an invalid length. [ 207.208456][T20140] __nla_validate_parse: 16 callbacks suppressed [ 207.208479][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3354'. [ 207.262357][T20125] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 207.295127][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 207.304071][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 207.314538][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 207.324616][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 207.333594][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 207.348132][T20147] netlink: 'syz.4.3357': attribute type 27 has an invalid length. [ 207.358591][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3357'. [ 207.378418][T20151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3359'. [ 207.388374][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.426211][T20158] netlink: 'syz.0.3358': attribute type 13 has an invalid length. [ 207.454302][T20157] hub 8-0:1.0: USB hub found [ 207.461082][T20157] hub 8-0:1.0: 8 ports detected [ 207.482328][T20164] netlink: 'syz.1.3360': attribute type 13 has an invalid length. [ 207.522550][T20161] SELinux: ebitmap: truncated map [ 207.528130][T20161] SELinux: failed to load policy [ 207.596950][T20186] loop1: detected capacity change from 0 to 1024 [ 207.616260][T20189] loop2: detected capacity change from 0 to 1024 [ 207.628888][T20189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.645537][T20186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.733094][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.810127][T20209] netlink: 'syz.3.3374': attribute type 13 has an invalid length. [ 207.833917][T20208] hub 8-0:1.0: USB hub found [ 207.840420][T20208] hub 8-0:1.0: 8 ports detected [ 207.862439][T20211] SELinux: ebitmap: truncated map [ 207.868953][T20211] SELinux: failed to load policy [ 207.869452][T20186] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 207.903727][T20216] netlink: 464 bytes leftover after parsing attributes in process `syz.2.3378'. [ 207.980354][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.203507][T20247] netlink: 'syz.1.3387': attribute type 13 has an invalid length. [ 208.262055][T20255] SELinux: ebitmap: truncated map [ 208.268453][T20255] SELinux: failed to load policy [ 208.393120][T20261] loop4: detected capacity change from 0 to 164 [ 208.400121][T20261] iso9660: Unknown parameter '' [ 208.406743][T20261] siw: device registration error -23 [ 208.438440][T20266] loop4: detected capacity change from 0 to 1024 [ 208.461366][T20266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.517688][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.590522][T20281] netlink: 464 bytes leftover after parsing attributes in process `syz.4.3396'. [ 208.693587][T20284] netlink: 'syz.4.3397': attribute type 27 has an invalid length. [ 208.725842][T20286] loop4: detected capacity change from 0 to 1024 [ 208.739620][T20286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.797813][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.838248][T20296] SELinux: ebitmap: truncated map [ 208.844577][T20296] SELinux: failed to load policy [ 208.895808][T20299] hub 8-0:1.0: USB hub found [ 208.900934][T20299] hub 8-0:1.0: 8 ports detected [ 208.939260][T20305] loop3: detected capacity change from 0 to 1024 [ 208.973182][T20305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.000111][T20313] loop0: detected capacity change from 0 to 128 [ 209.010124][T20313] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 209.215820][T20343] SELinux: ebitmap: truncated map [ 209.222308][T20343] SELinux: failed to load policy [ 209.274103][T20351] loop4: detected capacity change from 0 to 164 [ 209.290277][T20351] iso9660: Unknown parameter '' [ 209.303573][T20349] hub 8-0:1.0: USB hub found [ 209.308851][T20351] siw: device registration error -23 [ 209.311811][T20349] hub 8-0:1.0: 8 ports detected [ 209.589432][T20383] SELinux: ebitmap: truncated map [ 209.595399][T20383] SELinux: failed to load policy [ 209.789241][T20398] hub 8-0:1.0: USB hub found [ 209.794231][T20398] hub 8-0:1.0: 8 ports detected [ 209.816308][T20402] loop4: detected capacity change from 0 to 164 [ 209.823404][T20402] iso9660: Unknown parameter '' [ 209.831520][T20402] siw: device registration error -23 [ 210.021392][T20421] SELinux: ebitmap: truncated map [ 210.026923][T20421] SELinux: failed to load policy [ 210.079230][ T29] kauditd_printk_skb: 1186 callbacks suppressed [ 210.079251][ T29] audit: type=1326 audit(210.054:35818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faec9be5ba7 code=0x7ffc0000 [ 210.108467][ T29] audit: type=1326 audit(210.054:35819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faec9b8ade9 code=0x7ffc0000 [ 210.131728][ T29] audit: type=1326 audit(210.054:35820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7faec9beebe9 code=0x7ffc0000 [ 210.154591][ T29] audit: type=1326 audit(210.064:35821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faec9be5ba7 code=0x7ffc0000 [ 210.177661][ T29] audit: type=1326 audit(210.064:35822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faec9b8ade9 code=0x7ffc0000 [ 210.200657][ T29] audit: type=1326 audit(210.064:35823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7faec9beebe9 code=0x7ffc0000 [ 210.225338][ T29] audit: type=1326 audit(210.064:35824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faec9be5ba7 code=0x7ffc0000 [ 210.248325][ T29] audit: type=1326 audit(210.064:35825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faec9b8ade9 code=0x7ffc0000 [ 210.271242][ T29] audit: type=1326 audit(210.064:35826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7faec9beebe9 code=0x7ffc0000 [ 210.294368][ T29] audit: type=1326 audit(210.064:35827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faec9be5ba7 code=0x7ffc0000 [ 210.371208][T20442] loop3: detected capacity change from 0 to 164 [ 210.378682][T20442] iso9660: Unknown parameter '' [ 210.385877][T20442] siw: device registration error -23 [ 210.499091][T20454] SELinux: ebitmap: truncated map [ 210.504711][T20454] SELinux: failed to load policy [ 210.734722][T20467] loop0: detected capacity change from 0 to 1024 [ 210.753389][T20471] validate_nla: 5 callbacks suppressed [ 210.753480][T20471] netlink: 'syz.4.3452': attribute type 13 has an invalid length. [ 210.767956][T20467] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3451: Allocating blocks 465-513 which overlap fs metadata [ 210.799326][T20467] EXT4-fs (loop0): pa ffff88810727e930: logic 256, phys. 369, len 9 [ 210.803155][T20475] netlink: 'syz.4.3453': attribute type 27 has an invalid length. [ 210.807440][T20467] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 210.807816][T20467] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 210.882127][T20481] netlink: 'syz.0.3455': attribute type 27 has an invalid length. [ 210.914937][T20483] loop4: detected capacity change from 0 to 164 [ 210.922676][T20483] iso9660: Unknown parameter '' [ 210.930927][T20483] siw: device registration error -23 [ 211.025041][T20500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.033427][T20500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.167229][T20517] netlink: 'syz.0.3464': attribute type 13 has an invalid length. [ 211.205834][T20521] netlink: 'syz.1.3466': attribute type 27 has an invalid length. [ 211.235729][T20520] hub 8-0:1.0: USB hub found [ 211.241152][T20520] hub 8-0:1.0: 8 ports detected [ 211.267449][T20527] loop0: detected capacity change from 0 to 512 [ 211.274117][T20527] EXT4-fs: Ignoring removed bh option [ 211.281929][T20527] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.291055][T20527] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 211.301779][T20527] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 211.306938][T20530] netlink: 'syz.1.3469': attribute type 27 has an invalid length. [ 211.311197][T20527] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 211.345444][T20527] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3468: bg 0: block 353: padding at end of block bitmap is not set [ 211.543805][T20551] netlink: 'syz.3.3475': attribute type 13 has an invalid length. [ 211.572160][T20553] lo speed is unknown, defaulting to 1000 [ 211.572890][T20556] netlink: 'syz.3.3477': attribute type 27 has an invalid length. [ 211.588801][T20565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=20565 comm=syz.0.3472 [ 211.611217][T20570] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 211.631337][T20570] loop2: detected capacity change from 0 to 1024 [ 211.672901][T20581] hub 8-0:1.0: USB hub found [ 211.677266][T20553] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.3476: missing EA_INODE flag [ 211.677782][T20581] hub 8-0:1.0: 8 ports detected [ 211.691341][T20553] EXT4-fs (loop2): Remounting filesystem read-only [ 211.742151][T20594] netlink: 'syz.2.3480': attribute type 27 has an invalid length. [ 211.760286][T20596] loop3: detected capacity change from 0 to 164 [ 211.769068][T20596] iso9660: Unknown parameter '' [ 211.776316][T20596] siw: device registration error -23 [ 211.825921][T20607] loop2: detected capacity change from 0 to 512 [ 211.834386][T20607] EXT4-fs: Ignoring removed bh option [ 211.840297][T20607] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.849413][T20607] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 211.860674][T20607] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 211.870340][T20607] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 211.887500][T20607] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3484: bg 0: block 353: padding at end of block bitmap is not set [ 212.194491][T20627] hub 8-0:1.0: USB hub found [ 212.215003][T20627] hub 8-0:1.0: 8 ports detected [ 212.410415][T20634] __nla_validate_parse: 31 callbacks suppressed [ 212.410459][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3492'. [ 212.479485][T20636] netlink: 'syz.4.3493': attribute type 27 has an invalid length. [ 212.498816][T20640] loop0: detected capacity change from 0 to 1024 [ 212.506563][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'. [ 212.544024][T20640] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3495: Allocating blocks 465-513 which overlap fs metadata [ 212.559765][T20640] EXT4-fs (loop0): pa ffff88810727e9a0: logic 256, phys. 369, len 9 [ 212.567964][T20640] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 212.578321][T20640] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 212.623241][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3506'. [ 212.650826][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3498'. [ 212.665983][T20657] netlink: 464 bytes leftover after parsing attributes in process `syz.0.3497'. [ 212.714290][T20694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3510'. [ 212.725675][T20692] loop2: detected capacity change from 0 to 1024 [ 212.813382][T20705] loop4: detected capacity change from 0 to 1024 [ 212.853849][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 212.862814][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 212.882920][T20705] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3502: Allocating blocks 465-513 which overlap fs metadata [ 212.899707][T20711] loop3: detected capacity change from 0 to 128 [ 212.906765][T20705] EXT4-fs (loop4): pa ffff88810727e9a0: logic 256, phys. 369, len 9 [ 212.914880][T20705] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 212.927490][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 212.937140][T20705] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 212.955969][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 213.020637][T20721] loop0: detected capacity change from 0 to 164 [ 213.027609][T20721] iso9660: Unknown parameter '' [ 213.034986][T20721] siw: device registration error -23 [ 213.063521][T20728] loop4: detected capacity change from 0 to 1024 [ 213.085795][T20692] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 213.319686][T20767] loop2: detected capacity change from 0 to 1024 [ 213.339395][T20765] SELinux: ebitmap: truncated map [ 213.345216][T20765] SELinux: failed to load policy [ 213.356767][T20767] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3519: Allocating blocks 465-513 which overlap fs metadata [ 213.372722][T20767] EXT4-fs (loop2): pa ffff888107219af0: logic 256, phys. 369, len 9 [ 213.380877][T20767] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 213.392132][T20767] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 213.417860][T20776] loop3: detected capacity change from 0 to 164 [ 213.424843][T20776] iso9660: Unknown parameter '' [ 213.432063][T20776] siw: device registration error -23 [ 213.520082][T20825] loop3: detected capacity change from 0 to 1024 [ 213.681590][T20842] hub 8-0:1.0: USB hub found [ 213.686462][T20842] hub 8-0:1.0: 8 ports detected [ 213.694498][T20844] SELinux: ebitmap: truncated map [ 213.700726][T20844] SELinux: failed to load policy [ 213.739735][T20855] loop1: detected capacity change from 0 to 164 [ 213.746598][T20855] iso9660: Unknown parameter '' [ 213.754273][T20855] siw: device registration error -23 [ 213.829272][T20897] loop1: detected capacity change from 0 to 1024 [ 213.844137][T20897] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3536: Allocating blocks 465-513 which overlap fs metadata [ 213.860501][T20897] EXT4-fs (loop1): pa ffff888107219af0: logic 256, phys. 369, len 9 [ 213.868592][T20897] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 213.880428][T20897] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 213.927160][T20904] loop4: detected capacity change from 0 to 1024 [ 213.996569][T20913] hub 8-0:1.0: USB hub found [ 214.001527][T20913] hub 8-0:1.0: 8 ports detected [ 214.073345][T20924] SELinux: ebitmap: truncated map [ 214.079279][T20924] SELinux: failed to load policy [ 214.133673][T20927] hub 8-0:1.0: USB hub found [ 214.138897][T20927] hub 8-0:1.0: 8 ports detected [ 214.222470][T20940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=20940 comm=syz.0.3546 [ 214.435028][T20949] loop2: detected capacity change from 0 to 1024 [ 214.463334][T20955] loop3: detected capacity change from 0 to 128 [ 214.525040][T20962] loop2: detected capacity change from 0 to 164 [ 214.531801][T20962] iso9660: Unknown parameter '' [ 214.545357][T20962] siw: device registration error -23 [ 214.612954][T20971] hub 8-0:1.0: USB hub found [ 214.617845][T20971] hub 8-0:1.0: 8 ports detected [ 214.655476][T20978] loop3: detected capacity change from 0 to 1024 [ 214.862357][T20978] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 215.024175][T21005] loop4: detected capacity change from 0 to 1024 [ 215.038871][T21007] loop0: detected capacity change from 0 to 164 [ 215.045884][T21007] iso9660: Unknown parameter '' [ 215.054986][T21007] siw: device registration error -23 [ 215.088802][ T29] kauditd_printk_skb: 1636 callbacks suppressed [ 215.088819][ T29] audit: type=1326 audit(215.074:37464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b82965ba7 code=0x7ffc0000 [ 215.118446][ T29] audit: type=1326 audit(215.074:37465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b8290ade9 code=0x7ffc0000 [ 215.141445][ T29] audit: type=1326 audit(215.074:37466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 215.164667][ T29] audit: type=1326 audit(215.074:37467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b82965ba7 code=0x7ffc0000 [ 215.187655][ T29] audit: type=1326 audit(215.074:37468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b8290ade9 code=0x7ffc0000 [ 215.206620][T21021] hub 8-0:1.0: USB hub found [ 215.210834][ T29] audit: type=1326 audit(215.074:37469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 215.238018][ T29] audit: type=1326 audit(215.104:37470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b82965ba7 code=0x7ffc0000 [ 215.241115][T21024] loop0: detected capacity change from 0 to 1024 [ 215.260944][ T29] audit: type=1326 audit(215.104:37471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b8290ade9 code=0x7ffc0000 [ 215.260983][ T29] audit: type=1326 audit(215.104:37472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 215.269908][T21021] hub 8-0:1.0: 8 ports detected [ 215.290228][ T29] audit: type=1326 audit(215.104:37473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20998 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 215.529818][T21045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21045 comm=syz.4.3574 [ 215.547872][T21024] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 215.592174][T21048] loop1: detected capacity change from 0 to 1024 [ 215.602408][T21049] loop2: detected capacity change from 0 to 1024 [ 215.635828][T21055] loop0: detected capacity change from 0 to 1024 [ 215.643831][T21048] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3575: Allocating blocks 465-513 which overlap fs metadata [ 215.659329][T21048] EXT4-fs (loop1): pa ffff88810727ea80: logic 256, phys. 369, len 9 [ 215.667432][T21048] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 215.677750][T21048] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 215.783231][T21082] hub 8-0:1.0: USB hub found [ 215.797434][T21082] hub 8-0:1.0: 8 ports detected [ 215.918447][T21096] validate_nla: 5 callbacks suppressed [ 215.918468][T21096] netlink: 'syz.3.3586': attribute type 13 has an invalid length. [ 215.972853][T21104] hub 8-0:1.0: USB hub found [ 215.979498][T21104] hub 8-0:1.0: 8 ports detected [ 216.204497][T21129] hub 8-0:1.0: USB hub found [ 216.209685][T21129] hub 8-0:1.0: 8 ports detected [ 216.236692][T21133] vti0: entered promiscuous mode [ 216.242057][T21133] vti0: entered allmulticast mode [ 216.384243][T21145] netlink: 'syz.4.3599': attribute type 13 has an invalid length. [ 216.448155][T21151] SELinux: ebitmap: truncated map [ 216.454212][T21151] SELinux: failed to load policy [ 216.585069][T21162] vti0: entered promiscuous mode [ 216.590206][T21162] vti0: entered allmulticast mode [ 216.596130][T21160] hub 8-0:1.0: USB hub found [ 216.601605][T21160] hub 8-0:1.0: 8 ports detected [ 216.628912][T21172] loop1: detected capacity change from 0 to 164 [ 216.639454][T21172] iso9660: Unknown parameter '' [ 216.646798][T21172] siw: device registration error -23 [ 216.895372][T21197] netlink: 'syz.0.3612': attribute type 13 has an invalid length. [ 217.058961][T21212] loop4: detected capacity change from 0 to 1024 [ 217.133334][T21223] loop1: detected capacity change from 0 to 1024 [ 217.441807][T21212] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 217.499572][T21251] 9pnet_fd: Insufficient options for proto=fd [ 217.525828][T21253] netlink: 'syz.1.3631': attribute type 27 has an invalid length. [ 217.534687][T21253] vti0: left promiscuous mode [ 217.539516][T21253] vti0: left allmulticast mode [ 217.542246][T21255] loop4: detected capacity change from 0 to 128 [ 217.549624][T21253] __nla_validate_parse: 34 callbacks suppressed [ 217.549643][T21253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3631'. [ 217.699780][T21267] loop4: detected capacity change from 0 to 1024 [ 217.725607][T21272] netlink: 464 bytes leftover after parsing attributes in process `syz.1.3637'. [ 217.756880][T21267] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3635: Allocating blocks 465-513 which overlap fs metadata [ 217.773110][T21267] EXT4-fs (loop4): pa ffff88810727ea80: logic 256, phys. 369, len 9 [ 217.781194][T21267] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 217.793232][T21267] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 217.867502][T21283] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3639'. [ 217.999101][T21291] netlink: 'syz.1.3643': attribute type 27 has an invalid length. [ 218.028707][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3643'. [ 218.123873][T21317] netlink: 464 bytes leftover after parsing attributes in process `syz.4.3652'. [ 218.151183][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 218.160183][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 218.171113][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 218.193039][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 218.202015][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 218.413123][T21335] netlink: 'syz.2.3658': attribute type 27 has an invalid length. [ 218.427713][T21335] vti0: left promiscuous mode [ 218.432453][T21335] vti0: left allmulticast mode [ 218.432599][T21339] loop4: detected capacity change from 0 to 128 [ 218.522208][T21345] hub 8-0:1.0: USB hub found [ 218.526860][T21345] hub 8-0:1.0: 8 ports detected [ 218.556155][T21347] netlink: 'syz.2.3664': attribute type 13 has an invalid length. [ 218.570348][T21362] loop4: detected capacity change from 0 to 1024 [ 218.578177][T21360] loop1: detected capacity change from 0 to 1024 [ 218.593957][T21362] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3668: Allocating blocks 465-513 which overlap fs metadata [ 218.616214][T21362] EXT4-fs (loop4): pa ffff88810727ea80: logic 256, phys. 369, len 9 [ 218.624416][T21362] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 218.636955][T21362] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 218.711472][T21370] loop0: detected capacity change from 0 to 1024 [ 218.790559][T21385] netlink: 'syz.4.3673': attribute type 27 has an invalid length. [ 218.896123][T21360] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 218.910910][T21404] loop2: detected capacity change from 0 to 1024 [ 218.967329][T21412] loop3: detected capacity change from 0 to 128 [ 219.125197][T21430] netlink: 'syz.4.3685': attribute type 27 has an invalid length. [ 219.205058][T21444] loop1: detected capacity change from 0 to 164 [ 219.212623][T21444] iso9660: Unknown parameter '' [ 219.219570][T21444] siw: device registration error -23 [ 219.255881][T21404] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 219.341135][T21452] loop4: detected capacity change from 0 to 1024 [ 219.364529][T21452] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3692: Allocating blocks 465-513 which overlap fs metadata [ 219.381198][T21452] EXT4-fs (loop4): pa ffff88810727ea80: logic 256, phys. 369, len 9 [ 219.389335][T21452] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 219.427687][T21452] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 219.483198][T21474] SELinux: ebitmap: truncated map [ 219.494815][T21474] SELinux: failed to load policy [ 219.612762][T21500] loop4: detected capacity change from 0 to 1024 [ 219.759329][T21511] SELinux: ebitmap: truncated map [ 219.766583][T21511] SELinux: failed to load policy [ 219.836541][T21525] SELinux: ebitmap: truncated map [ 219.842229][T21525] SELinux: failed to load policy [ 219.880257][T21536] netlink: 'syz.3.3716': attribute type 13 has an invalid length. [ 219.972649][T21546] loop3: detected capacity change from 0 to 128 [ 220.126417][ T29] kauditd_printk_skb: 1617 callbacks suppressed [ 220.126434][ T29] audit: type=1326 audit(220.104:39091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.165913][T21554] loop4: detected capacity change from 0 to 164 [ 220.169202][ T29] audit: type=1326 audit(220.134:39092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.195207][ T29] audit: type=1326 audit(220.134:39093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.195727][T21554] iso9660: Unknown parameter '' [ 220.218419][ T29] audit: type=1326 audit(220.134:39094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.246474][ T29] audit: type=1326 audit(220.134:39095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.269525][ T29] audit: type=1326 audit(220.134:39096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.281847][T21554] siw: device registration error -23 [ 220.292616][ T29] audit: type=1326 audit(220.134:39097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.320942][ T29] audit: type=1326 audit(220.144:39098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.343813][ T29] audit: type=1326 audit(220.144:39099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.366925][ T29] audit: type=1326 audit(220.144:39100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21553 comm="syz.4.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 220.423815][T21576] SELinux: ebitmap: truncated map [ 220.429397][T21576] SELinux: failed to load policy [ 220.482100][T21586] loop3: detected capacity change from 0 to 1024 [ 220.512270][T21593] loop4: detected capacity change from 0 to 1024 [ 220.542171][T21599] loop0: detected capacity change from 0 to 1024 [ 220.578132][T21599] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3739: Allocating blocks 465-513 which overlap fs metadata [ 220.592898][T21593] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3737: Allocating blocks 465-513 which overlap fs metadata [ 220.599862][T21599] EXT4-fs (loop0): pa ffff88810727eaf0: logic 256, phys. 369, len 9 [ 220.614967][T21599] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 220.627247][T21593] EXT4-fs (loop4): pa ffff88810727eb60: logic 256, phys. 369, len 9 [ 220.635274][T21593] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 220.635457][T21599] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 220.657233][T21593] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 220.742944][T21586] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 220.902065][T21620] loop3: detected capacity change from 0 to 164 [ 220.915169][T21620] iso9660: Unknown parameter '' [ 220.923572][T21620] siw: device registration error -23 [ 220.953993][T21627] SELinux: ebitmap: truncated map [ 220.960212][T21627] SELinux: failed to load policy [ 221.025120][T21641] loop4: detected capacity change from 0 to 1024 [ 221.034328][T21643] loop0: detected capacity change from 0 to 1024 [ 221.045013][T21646] validate_nla: 1 callbacks suppressed [ 221.045029][T21646] netlink: 'syz.3.3747': attribute type 13 has an invalid length. [ 221.058185][T21643] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3751: Allocating blocks 465-513 which overlap fs metadata [ 221.073404][T21643] EXT4-fs (loop0): pa ffff888107219af0: logic 256, phys. 369, len 9 [ 221.081596][T21643] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 221.092209][T21643] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 221.166824][T21652] hub 8-0:1.0: USB hub found [ 221.178853][T21652] hub 8-0:1.0: 8 ports detected [ 221.328196][T21670] SELinux: ebitmap: truncated map [ 221.335796][T21670] SELinux: failed to load policy [ 221.433177][T21694] loop3: detected capacity change from 0 to 1024 [ 221.524575][T21713] hub 8-0:1.0: USB hub found [ 221.529438][T21713] hub 8-0:1.0: 8 ports detected [ 221.610468][T21733] loop2: detected capacity change from 0 to 128 [ 221.610914][T21726] hub 8-0:1.0: USB hub found [ 221.621802][T21726] hub 8-0:1.0: 8 ports detected [ 221.785812][T21745] loop2: detected capacity change from 0 to 164 [ 221.824256][T21745] iso9660: Unknown parameter '' [ 221.831500][T21745] siw: device registration error -23 [ 221.906175][T21760] netlink: 'syz.2.3783': attribute type 27 has an invalid length. [ 221.999344][T21774] loop2: detected capacity change from 0 to 1024 [ 222.015939][T21774] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3788: Allocating blocks 465-513 which overlap fs metadata [ 222.031342][T21774] EXT4-fs (loop2): pa ffff888107219af0: logic 256, phys. 369, len 9 [ 222.039429][T21774] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 222.050153][T21774] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 222.080107][T21782] loop4: detected capacity change from 0 to 1024 [ 222.304814][T21811] netlink: 'syz.0.3795': attribute type 13 has an invalid length. [ 222.444198][T21824] loop3: detected capacity change from 0 to 1024 [ 222.470206][T21824] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3801: Allocating blocks 465-513 which overlap fs metadata [ 222.503253][T21832] loop0: detected capacity change from 0 to 1024 [ 222.512693][T21824] EXT4-fs (loop3): pa ffff88810727eb60: logic 256, phys. 369, len 9 [ 222.520889][T21824] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 222.579309][T21824] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 222.661313][T21844] loop3: detected capacity change from 0 to 128 [ 222.685941][T21849] loop4: detected capacity change from 0 to 1024 [ 222.754589][T21861] __nla_validate_parse: 41 callbacks suppressed [ 222.754607][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'. [ 222.875091][T21876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 222.884174][T21876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 222.893194][T21876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 222.922805][T21881] loop4: detected capacity change from 0 to 1024 [ 222.961825][T21882] hub 8-0:1.0: USB hub found [ 222.967614][T21882] hub 8-0:1.0: 8 ports detected [ 223.003084][T21895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3816'. [ 223.012220][T21895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3816'. [ 223.054756][T21903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3816'. [ 223.068245][T21897] loop1: detected capacity change from 0 to 164 [ 223.076515][T21897] iso9660: Unknown parameter '' [ 223.097753][T21897] siw: device registration error -23 [ 223.207749][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3821'. [ 223.232646][T21916] loop1: detected capacity change from 0 to 1024 [ 223.254812][T21921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3823'. [ 223.263940][T21919] loop4: detected capacity change from 0 to 1024 [ 223.460889][T21952] loop2: detected capacity change from 0 to 164 [ 223.468110][T21952] iso9660: Unknown parameter '' [ 223.475451][T21952] siw: device registration error -23 [ 223.490458][T21959] netlink: 'syz.4.3831': attribute type 27 has an invalid length. [ 223.503774][T21959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 223.562185][T21967] loop0: detected capacity change from 0 to 1024 [ 223.665338][T21983] loop4: detected capacity change from 0 to 128 [ 223.673872][T21978] loop0: detected capacity change from 0 to 1024 [ 223.794584][T21999] loop0: detected capacity change from 0 to 1024 [ 223.827202][T22003] netlink: 'syz.3.3841': attribute type 13 has an invalid length. [ 223.981447][T22021] netlink: 'syz.3.3846': attribute type 13 has an invalid length. [ 224.033733][T22029] loop3: detected capacity change from 0 to 128 [ 224.223920][T22060] netlink: 'syz.3.3855': attribute type 13 has an invalid length. [ 224.282952][T22068] netlink: 'syz.1.3858': attribute type 13 has an invalid length. [ 224.284723][T22071] loop0: detected capacity change from 0 to 128 [ 224.319995][T22076] loop3: detected capacity change from 0 to 1024 [ 224.340791][T22079] loop1: detected capacity change from 0 to 164 [ 224.347751][T22079] iso9660: Unknown parameter '' [ 224.354610][T22079] siw: device registration error -23 [ 224.527275][T22116] loop1: detected capacity change from 0 to 164 [ 224.540177][T22117] netlink: 'syz.0.3875': attribute type 13 has an invalid length. [ 224.565256][T22116] iso9660: Unknown parameter '' [ 224.576347][T22116] siw: device registration error -23 [ 224.587492][T22122] loop0: detected capacity change from 0 to 1024 [ 224.677336][T22130] loop1: detected capacity change from 0 to 128 [ 224.933379][T22173] netlink: 'syz.0.3890': attribute type 13 has an invalid length. [ 224.987189][T22176] loop2: detected capacity change from 0 to 1024 [ 225.128014][T22195] loop2: detected capacity change from 0 to 128 [ 225.134615][ T29] kauditd_printk_skb: 2706 callbacks suppressed [ 225.134630][ T29] audit: type=1326 audit(225.114:41807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4ce4835ba7 code=0x7ffc0000 [ 225.163972][ T29] audit: type=1326 audit(225.114:41808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ce47dade9 code=0x7ffc0000 [ 225.187019][ T29] audit: type=1326 audit(225.114:41809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 225.209957][ T29] audit: type=1326 audit(225.124:41810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4ce4835ba7 code=0x7ffc0000 [ 225.232961][ T29] audit: type=1326 audit(225.124:41811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ce47dade9 code=0x7ffc0000 [ 225.256009][ T29] audit: type=1326 audit(225.124:41812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 225.278889][ T29] audit: type=1326 audit(225.124:41813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22179 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 225.303858][ T29] audit: type=1326 audit(225.154:41814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4ce4835ba7 code=0x7ffc0000 [ 225.326856][ T29] audit: type=1326 audit(225.154:41815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4ce47dade9 code=0x7ffc0000 [ 225.349849][ T29] audit: type=1326 audit(225.154:41816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22177 comm="syz.0.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 225.402986][T22208] loop1: detected capacity change from 0 to 1024 [ 225.439196][T22216] loop2: detected capacity change from 0 to 1024 [ 225.455875][T22221] loop1: detected capacity change from 0 to 1024 [ 225.566909][T22236] loop4: detected capacity change from 0 to 128 [ 225.754632][T22258] loop2: detected capacity change from 0 to 1024 [ 225.865892][T22282] loop0: detected capacity change from 0 to 1024 [ 225.948443][T22293] loop1: detected capacity change from 0 to 128 [ 225.981429][T22295] loop4: detected capacity change from 0 to 1024 [ 226.161394][T22316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22316 comm=syz.2.3929 [ 226.229171][T22321] loop0: detected capacity change from 0 to 164 [ 226.236304][T22321] iso9660: Unknown parameter '' [ 226.243213][T22321] siw: device registration error -23 [ 226.389283][T22344] validate_nla: 3 callbacks suppressed [ 226.389358][T22344] netlink: 'syz.4.3937': attribute type 13 has an invalid length. [ 226.463080][T22350] loop1: detected capacity change from 0 to 1024 [ 226.668749][T22350] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 226.765043][T17451] EXT4-fs unmount: 141 callbacks suppressed [ 226.765063][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.852057][T22368] SELinux: ebitmap: truncated map [ 226.857887][T22368] SELinux: failed to load policy [ 226.862268][T22366] hub 8-0:1.0: USB hub found [ 226.867680][T22366] hub 8-0:1.0: 8 ports detected [ 226.966926][T22392] netlink: 'syz.3.3948': attribute type 13 has an invalid length. [ 226.984413][T22394] netlink: 'syz.4.3953': attribute type 27 has an invalid length. [ 227.053648][T22399] SELinux: ebitmap: truncated map [ 227.059347][T22399] SELinux: failed to load policy [ 227.216851][T22428] loop3: detected capacity change from 0 to 1024 [ 227.247439][T22431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22431 comm=syz.0.3962 [ 227.261701][T22425] netlink: 'syz.1.3964': attribute type 13 has an invalid length. [ 227.291330][T22428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.374123][T22440] hub 8-0:1.0: USB hub found [ 227.379162][T22440] hub 8-0:1.0: 8 ports detected [ 227.404790][T22453] loop2: detected capacity change from 0 to 128 [ 227.415512][T22453] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 227.484489][T16880] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.533983][T22428] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 227.539917][T22463] loop1: detected capacity change from 0 to 1024 [ 227.558723][T22463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.580803][T22463] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3974: Allocating blocks 465-513 which overlap fs metadata [ 227.600244][T22463] EXT4-fs (loop1): pa ffff888107219850: logic 256, phys. 369, len 9 [ 227.608373][T22463] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 227.620987][T18893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.636938][T22463] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 227.674691][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.855437][T22502] SELinux: ebitmap: truncated map [ 227.861261][T22502] SELinux: failed to load policy [ 227.903960][T22507] loop1: detected capacity change from 0 to 128 [ 227.913500][T22506] loop2: detected capacity change from 0 to 1024 [ 227.924958][T22507] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 227.960048][T22506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.995214][T17451] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.036553][T22521] loop3: detected capacity change from 0 to 128 [ 228.058935][T22521] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 228.077651][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.098054][T22533] __nla_validate_parse: 19 callbacks suppressed [ 228.098075][T22533] netlink: 464 bytes leftover after parsing attributes in process `syz.1.3993'. [ 228.116831][T18893] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.122577][T22537] loop2: detected capacity change from 0 to 1024 [ 228.152564][T22537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.213446][T22552] loop4: detected capacity change from 0 to 128 [ 228.223512][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.236947][T22552] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 228.339721][T18008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.401215][T22572] loop4: detected capacity change from 0 to 1024 [ 228.410649][T22573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22573 comm=syz.1.4001 [ 228.437208][T22572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.439267][T22573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4001'. [ 228.484532][T22583] loop2: detected capacity change from 0 to 128 [ 228.510859][T22583] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 228.623898][T16880] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.677515][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.703895][T22603] loop2: detected capacity change from 0 to 1024 [ 228.724844][T22603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.752963][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.772761][T22616] netlink: 464 bytes leftover after parsing attributes in process `syz.2.4011'. [ 228.950336][T22630] netlink: 'syz.2.4013': attribute type 13 has an invalid length. [ 228.994249][T22636] loop2: detected capacity change from 0 to 128 [ 229.005004][T22636] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 229.039209][T22641] SELinux: ebitmap: truncated map [ 229.044753][T22641] SELinux: failed to load policy [ 229.081289][T16880] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.102521][T22647] netlink: 464 bytes leftover after parsing attributes in process `syz.4.4023'. [ 229.136426][T22651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4022'. [ 229.145506][T22651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4022'. [ 229.228860][T22661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4025'. [ 229.270608][T22667] loop3: detected capacity change from 0 to 128 [ 229.287387][T22667] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 229.408986][T18893] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.465351][T22692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4036'. [ 229.509277][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4038'. [ 229.510487][T22696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22696 comm=syz.3.4035 [ 229.604389][T22696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4035'. [ 229.704788][T22711] loop4: detected capacity change from 0 to 1024 [ 229.716791][T22705] netlink: 'syz.0.4039': attribute type 13 has an invalid length. [ 229.735920][T22711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.792672][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.807365][T22727] netlink: 'syz.2.4050': attribute type 27 has an invalid length. [ 229.869820][T22738] loop4: detected capacity change from 0 to 128 [ 229.878860][T22738] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 229.906600][T18008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.931926][T22744] loop0: detected capacity change from 0 to 164 [ 229.939102][T22744] iso9660: Unknown parameter '' [ 229.945995][T22744] siw: device registration error -23 [ 230.034681][T22763] hub 8-0:1.0: USB hub found [ 230.039548][T22763] hub 8-0:1.0: 8 ports detected [ 230.068964][T22772] netlink: 'syz.0.4063': attribute type 27 has an invalid length. [ 230.187199][T22785] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 230.207484][T22785] SELinux: failed to load policy [ 230.220188][ T29] kauditd_printk_skb: 1818 callbacks suppressed [ 230.220206][ T29] audit: type=1326 audit(230.204:43635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.269110][ T29] audit: type=1326 audit(230.204:43636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.292146][ T29] audit: type=1326 audit(230.204:43637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.315119][ T29] audit: type=1326 audit(230.204:43638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.338245][ T29] audit: type=1326 audit(230.204:43639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.361138][ T29] audit: type=1326 audit(230.204:43640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.384369][ T29] audit: type=1326 audit(230.204:43641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.407301][ T29] audit: type=1326 audit(230.204:43642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.430336][ T29] audit: type=1326 audit(230.204:43643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22781 comm="syz.0.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.510184][T22799] SELinux: ebitmap: truncated map [ 230.515523][T22799] SELinux: failed to load policy [ 230.582653][T22806] netlink: 'syz.2.4075': attribute type 27 has an invalid length. [ 230.629863][ T29] audit: type=1326 audit(230.614:43644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22821 comm="syz.0.4081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 230.748266][T22835] loop4: detected capacity change from 0 to 1024 [ 230.773418][T22835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.885139][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.073628][T22866] loop1: detected capacity change from 0 to 164 [ 231.080775][T22866] iso9660: Unknown parameter '' [ 231.091184][T22866] siw: device registration error -23 [ 231.184159][T22880] loop1: detected capacity change from 0 to 1024 [ 231.204771][T22880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.240897][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.293425][T22891] loop1: detected capacity change from 0 to 1024 [ 231.315964][T22891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.368055][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.424728][T22900] loop4: detected capacity change from 0 to 1024 [ 231.446168][T22900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.528327][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.566474][T22923] netlink: 'syz.4.4106': attribute type 27 has an invalid length. [ 231.616579][T22931] loop1: detected capacity change from 0 to 1024 [ 231.616913][T22930] loop0: detected capacity change from 0 to 1024 [ 231.641575][T22930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.644808][T22931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.690012][T16206] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.746100][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.954020][T22965] netlink: 'syz.3.4119': attribute type 13 has an invalid length. [ 232.082358][T22977] netlink: 'syz.2.4123': attribute type 27 has an invalid length. [ 232.100368][T22979] loop0: detected capacity change from 0 to 1024 [ 232.123118][T22979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.139544][T22984] loop3: detected capacity change from 0 to 1024 [ 232.171253][T22984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.186853][T16206] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.219759][T22996] loop0: detected capacity change from 0 to 128 [ 232.228138][T18893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.237244][T22996] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 232.344696][T16206] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.457564][T23025] netlink: 'syz.4.4136': attribute type 27 has an invalid length. [ 232.728097][T23052] loop1: detected capacity change from 0 to 128 [ 232.773380][T23052] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 232.996183][T17451] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.056418][T23066] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 233.066834][T23066] SELinux: failed to load policy [ 233.080842][T23069] netlink: 'syz.1.4146': attribute type 13 has an invalid length. [ 233.130134][T23073] __nla_validate_parse: 29 callbacks suppressed [ 233.130173][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4153'. [ 233.150356][T23078] loop3: detected capacity change from 0 to 1024 [ 233.181620][T23078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.194424][T23081] loop4: detected capacity change from 0 to 164 [ 233.201519][T23081] iso9660: Unknown parameter '' [ 233.208227][T23081] siw: device registration error -23 [ 233.366771][T23101] loop2: detected capacity change from 0 to 1024 [ 233.378574][T18893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.405376][T23101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.445944][T23101] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4159: Allocating blocks 465-513 which overlap fs metadata [ 233.489447][T23101] EXT4-fs (loop2): pa ffff88810727ebd0: logic 256, phys. 369, len 9 [ 233.497672][T23101] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 233.507976][T23101] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 233.556111][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.588759][T23122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4167'. [ 233.638556][T23137] loop4: detected capacity change from 0 to 128 [ 233.646343][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4165'. [ 233.663109][T23137] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 233.680698][T23141] loop3: detected capacity change from 0 to 1024 [ 233.750547][T23141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.853116][T18008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.862847][T18893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.049828][T23181] loop4: detected capacity change from 0 to 164 [ 234.056759][T23181] iso9660: Unknown parameter '' [ 234.064022][T23181] siw: device registration error -23 [ 234.075822][T23179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4183'. [ 234.108631][T23187] loop1: detected capacity change from 0 to 1024 [ 234.133074][T23187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.233922][T23199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4189'. [ 234.312054][T23204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4191'. [ 234.394923][T23211] loop2: detected capacity change from 0 to 1024 [ 234.417614][T23187] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 234.420794][T23211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.462613][T16880] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.491858][T23224] loop2: detected capacity change from 0 to 128 [ 234.503191][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4197'. [ 234.513254][T17451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.525006][T23224] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 234.540293][T23230] loop0: detected capacity change from 0 to 128 [ 234.550127][T23232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4201'. [ 234.680649][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4203'. [ 234.689603][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4203'. [ 234.716780][T23255] loop2: detected capacity change from 0 to 1024 [ 234.800549][T23269] loop0: detected capacity change from 0 to 164 [ 234.809403][T23269] iso9660: Unknown parameter '' [ 234.833507][T23269] siw: device registration error -23 [ 234.889682][T23287] loop4: detected capacity change from 0 to 128 [ 234.918396][T23294] loop0: detected capacity change from 0 to 1024 [ 235.278404][T23348] SELinux: ebitmap: truncated map [ 235.283520][ T29] kauditd_printk_skb: 1785 callbacks suppressed [ 235.283538][ T29] audit: type=1326 audit(235.264:45430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23341 comm="syz.2.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec9beebe9 code=0x7ffc0000 [ 235.288098][T23348] SELinux: failed to load policy [ 235.289877][ T29] audit: type=1326 audit(235.264:45431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23341 comm="syz.2.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec9beebe9 code=0x7ffc0000 [ 235.358951][ T29] audit: type=1326 audit(235.344:45432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23350 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 235.382100][ T29] audit: type=1326 audit(235.344:45433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23350 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 235.408799][ T29] audit: type=1326 audit(235.384:45434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23350 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 235.431921][ T29] audit: type=1326 audit(235.384:45435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23350 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 235.454990][ T29] audit: type=1326 audit(235.384:45436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23350 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 235.478005][ T29] audit: type=1326 audit(235.384:45437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23350 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 235.484839][T23353] loop2: detected capacity change from 0 to 1024 [ 235.501080][ T29] audit: type=1326 audit(235.384:45438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23350 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 235.501136][ T29] audit: type=1326 audit(235.384:45439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23350 comm="syz.3.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b8296ebe9 code=0x7ffc0000 [ 235.606271][T23367] loop2: detected capacity change from 0 to 164 [ 235.613243][T23367] iso9660: Unknown parameter '' [ 235.621731][T23367] siw: device registration error -23 [ 235.635910][T23371] netlink: 'syz.3.4240': attribute type 13 has an invalid length. [ 235.741137][T23388] loop3: detected capacity change from 0 to 1024 [ 235.775247][T23393] loop2: detected capacity change from 0 to 164 [ 235.782391][T23393] iso9660: Unknown parameter '' [ 235.797198][T23393] siw: device registration error -23 [ 235.832373][T23404] loop2: detected capacity change from 0 to 1024 [ 235.879088][T23418] loop2: detected capacity change from 0 to 1024 [ 236.069809][T23418] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 236.125940][T23477] loop0: detected capacity change from 0 to 1024 [ 236.330170][T23538] netlink: 'syz.2.4268': attribute type 27 has an invalid length. [ 236.406419][T23552] loop0: detected capacity change from 0 to 1024 [ 236.587915][T23611] loop2: detected capacity change from 0 to 164 [ 236.604292][T23611] iso9660: Unknown parameter '' [ 236.606930][T23615] netlink: 'syz.4.4282': attribute type 27 has an invalid length. [ 236.618228][T23611] siw: device registration error -23 [ 236.644927][T23622] loop4: detected capacity change from 0 to 1024 [ 236.672712][T23627] loop3: detected capacity change from 0 to 1024 [ 236.744650][T23640] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 236.759239][T23640] SELinux: failed to load policy [ 236.765128][T23620] SELinux: ebitmap: truncated map [ 236.771562][T23620] SELinux: failed to load policy [ 236.779638][T23636] netlink: 'syz.2.4287': attribute type 13 has an invalid length. [ 236.926577][T23697] loop0: detected capacity change from 0 to 164 [ 236.935215][T23697] iso9660: Unknown parameter '' [ 236.976288][T23702] netlink: 'syz.1.4295': attribute type 13 has an invalid length. [ 237.006344][T23703] loop2: detected capacity change from 0 to 1024 [ 237.014899][T23697] siw: device registration error -23 [ 237.066014][T23622] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 237.085545][T23717] loop3: detected capacity change from 0 to 128 [ 237.143963][T23726] netlink: 'syz.0.4300': attribute type 13 has an invalid length. [ 237.231681][T23779] loop0: detected capacity change from 0 to 164 [ 237.234651][T23781] netlink: 'syz.3.4312': attribute type 27 has an invalid length. [ 237.238818][T23779] iso9660: Unknown parameter '' [ 237.256073][T23779] siw: device registration error -23 [ 237.262290][T23785] netlink: 'syz.2.4309': attribute type 13 has an invalid length. [ 237.325675][T23792] loop2: detected capacity change from 0 to 128 [ 237.404806][T23815] loop0: detected capacity change from 0 to 164 [ 237.412813][T23815] iso9660: Unknown parameter '' [ 237.420176][T23815] siw: device registration error -23 [ 237.455963][T23823] netlink: 'syz.3.4325': attribute type 27 has an invalid length. [ 237.560509][T23828] netlink: 'syz.0.4327': attribute type 13 has an invalid length. [ 237.604258][T23841] loop3: detected capacity change from 0 to 1024 [ 237.628197][T23846] loop0: detected capacity change from 0 to 128 [ 237.674711][T23854] loop3: detected capacity change from 0 to 1024 [ 237.698392][T23861] loop0: detected capacity change from 0 to 164 [ 237.705645][T23861] iso9660: Unknown parameter '' [ 237.722438][T23861] siw: device registration error -23 [ 237.806969][T23884] loop2: detected capacity change from 0 to 1024 [ 237.817817][T23881] SELinux: ebitmap: truncated map [ 237.823389][T23881] SELinux: failed to load policy [ 237.834768][T23888] loop3: detected capacity change from 0 to 1024 [ 237.901316][T23894] SELinux: ebitmap: truncated map [ 237.906669][T23894] SELinux: failed to load policy [ 237.925018][T23891] netlink: 'syz.1.4346': attribute type 13 has an invalid length. [ 237.942459][T23902] netlink: 'syz.0.4349': attribute type 27 has an invalid length. [ 238.050084][T23907] SELinux: ebitmap: truncated map [ 238.055475][T23907] SELinux: failed to load policy [ 238.069787][T23911] loop3: detected capacity change from 0 to 164 [ 238.076843][T23911] iso9660: Unknown parameter '' [ 238.083519][T23911] siw: device registration error -23 [ 238.142031][T23917] __nla_validate_parse: 59 callbacks suppressed [ 238.142051][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4353'. [ 238.275018][T23928] loop0: detected capacity change from 0 to 1024 [ 238.302945][T23937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4356'. [ 238.312043][T23937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4356'. [ 238.330893][T23937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4356'. [ 238.341032][T23937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4356'. [ 238.350047][T23937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4356'. [ 238.406931][T23943] SELinux: ebitmap: truncated map [ 238.412554][T23943] SELinux: failed to load policy [ 238.494432][T23957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4365'. [ 238.568820][T23968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4370'. [ 238.669966][T23981] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 238.680063][T23981] SELinux: failed to load policy [ 238.690862][T23979] SELinux: ebitmap: truncated map [ 238.696440][T23979] SELinux: failed to load policy [ 238.761592][T23998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4380'. [ 238.778372][T24002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4382'. [ 238.819286][T24010] loop4: detected capacity change from 0 to 164 [ 238.826184][T24010] iso9660: Unknown parameter '' [ 238.833182][T24010] siw: device registration error -23 [ 238.876150][T24017] loop0: detected capacity change from 0 to 1024 [ 238.984673][T24033] loop0: detected capacity change from 0 to 1024 [ 239.070807][T24047] loop4: detected capacity change from 0 to 128 [ 239.102794][T24049] loop1: detected capacity change from 0 to 164 [ 239.115280][T24049] iso9660: Unknown parameter '' [ 239.123383][T24049] siw: device registration error -23 [ 239.205758][T24064] SELinux: ebitmap: truncated map [ 239.211447][T24064] SELinux: failed to load policy [ 239.391390][T24083] loop1: detected capacity change from 0 to 128 [ 239.477809][T24096] loop0: detected capacity change from 0 to 164 [ 239.484949][T24096] iso9660: Unknown parameter '' [ 239.499365][T24096] siw: device registration error -23 [ 239.507537][T24105] loop1: detected capacity change from 0 to 128 [ 239.548817][T24097] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 239.558810][T24097] SELinux: failed to load policy [ 240.001532][T24185] loop1: detected capacity change from 0 to 1024 [ 240.131880][T24245] loop1: detected capacity change from 0 to 164 [ 240.147697][T24245] iso9660: Unknown parameter '' [ 240.159301][T24245] siw: device registration error -23 [ 240.277749][T24267] loop0: detected capacity change from 0 to 1024 [ 240.461961][ T29] kauditd_printk_skb: 1801 callbacks suppressed [ 240.461979][ T29] audit: type=1326 audit(240.444:47241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.495888][T24325] loop4: detected capacity change from 0 to 164 [ 240.502986][T24325] iso9660: Unknown parameter '' [ 240.504065][ T29] audit: type=1326 audit(240.474:47242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.513148][T24325] siw: device registration error -23 [ 240.531188][ T29] audit: type=1326 audit(240.474:47243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.531226][ T29] audit: type=1326 audit(240.474:47244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.531258][ T29] audit: type=1326 audit(240.474:47245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.605597][ T29] audit: type=1326 audit(240.474:47246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.605634][ T29] audit: type=1326 audit(240.474:47247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.651559][ T29] audit: type=1326 audit(240.474:47248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.674410][ T29] audit: type=1326 audit(240.474:47249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.697460][ T29] audit: type=1326 audit(240.474:47250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24323 comm="syz.4.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6c2acbebe9 code=0x7ffc0000 [ 240.821525][T24386] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 240.831567][T24386] SELinux: failed to load policy [ 240.877331][T24390] @: renamed from vlan0 [ 240.886332][T24390] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.924081][T24400] loop2: detected capacity change from 0 to 164 [ 240.931538][T24400] iso9660: Unknown parameter '' [ 240.954580][T24400] siw: device registration error -23 [ 240.979130][T24406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24406 comm=syz.0.4465 [ 241.144099][T24465] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 241.154055][T24465] SELinux: failed to load policy [ 241.202345][T24469] SELinux: ebitmap: truncated map [ 241.208174][T24469] SELinux: failed to load policy [ 241.246316][T24473] loop0: detected capacity change from 0 to 164 [ 241.253446][T24473] iso9660: Unknown parameter '' [ 241.260800][T24473] siw: device registration error -23 [ 241.320935][T24485] loop1: detected capacity change from 0 to 1024 [ 241.432224][T24500] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 241.445213][T24500] SELinux: failed to load policy [ 241.695845][T24532] loop4: detected capacity change from 0 to 128 [ 241.712628][T24536] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 241.722930][T24536] SELinux: failed to load policy [ 241.798528][T24550] validate_nla: 6 callbacks suppressed [ 241.798545][T24550] netlink: 'syz.1.4506': attribute type 27 has an invalid length. [ 241.882372][T24561] netlink: 'syz.3.4508': attribute type 13 has an invalid length. [ 241.936308][T24568] SELinux: ebitmap: truncated map [ 241.941723][T24565] loop4: detected capacity change from 0 to 164 [ 241.957772][T24565] iso9660: Unknown parameter '' [ 241.974335][T24565] siw: device registration error -23 [ 241.982957][T24576] FAULT_INJECTION: forcing a failure. [ 241.982957][T24576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.996123][T24576] CPU: 0 UID: 0 PID: 24576 Comm: ’ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.996226][T24576] Tainted: [W]=WARN [ 241.996233][T24576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.996247][T24576] Call Trace: [ 241.996253][T24576] [ 241.996262][T24576] __dump_stack+0x1d/0x30 [ 241.996343][T24576] dump_stack_lvl+0xe8/0x140 [ 241.996430][T24576] dump_stack+0x15/0x1b [ 241.996447][T24576] should_fail_ex+0x265/0x280 [ 241.996470][T24576] should_fail+0xb/0x20 [ 241.996572][T24576] should_fail_usercopy+0x1a/0x20 [ 241.996596][T24576] _copy_from_user+0x1c/0xb0 [ 241.996627][T24576] memdup_user+0x5e/0xd0 [ 241.996763][T24576] autofs_dev_ioctl+0x167/0x6a0 [ 241.996840][T24576] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 241.996868][T24576] __se_sys_ioctl+0xce/0x140 [ 241.996942][T24576] __x64_sys_ioctl+0x43/0x50 [ 241.996976][T24576] x64_sys_call+0x1816/0x2ff0 [ 241.996999][T24576] do_syscall_64+0xd2/0x200 [ 241.997029][T24576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.997110][T24576] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.997213][T24576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.997236][T24576] RIP: 0033:0x7f4ce483ebe9 [ 241.997252][T24576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.997271][T24576] RSP: 002b:00007f4ce329f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.997291][T24576] RAX: ffffffffffffffda RBX: 00007f4ce4a65fa0 RCX: 00007f4ce483ebe9 [ 241.997304][T24576] RDX: 0000200000000240 RSI: 00000000c0189374 RDI: 0000000000000005 [ 241.997389][T24576] RBP: 00007f4ce329f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.997402][T24576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.997415][T24576] R13: 00007f4ce4a66038 R14: 00007f4ce4a65fa0 R15: 00007ffe087812f8 [ 241.997481][T24576] [ 242.244612][T24581] loop2: detected capacity change from 0 to 164 [ 242.252398][T24581] iso9660: Unknown parameter '' [ 242.260980][T24581] siw: device registration error -23 [ 242.274863][T24588] netlink: 'syz.0.4519': attribute type 27 has an invalid length. [ 242.379963][T24603] SELinux: ebitmap: truncated map [ 242.401714][T24608] netlink: 'syz.3.4525': attribute type 13 has an invalid length. [ 242.513802][T24621] loop2: detected capacity change from 0 to 164 [ 242.534149][T24621] iso9660: Unknown parameter '' [ 242.546376][T24623] netlink: 'syz.3.4533': attribute type 13 has an invalid length. [ 242.572833][T24621] siw: device registration error -23 [ 242.670279][T24636] hub 8-0:1.0: USB hub found [ 242.675094][T24636] hub 8-0:1.0: 8 ports detected [ 242.689518][T24636] netlink: 'syz.3.4541': attribute type 2 has an invalid length. [ 242.771588][T24655] netlink: 'syz.3.4544': attribute type 13 has an invalid length. [ 242.809627][T24657] netlink: 'syz.4.4546': attribute type 13 has an invalid length. [ 242.868570][T24665] loop3: detected capacity change from 0 to 164 [ 242.889085][T24665] iso9660: Unknown parameter '' [ 242.898535][T24665] siw: device registration error -23 [ 242.951759][T24675] FAULT_INJECTION: forcing a failure. [ 242.951759][T24675] name failslab, interval 1, probability 0, space 0, times 0 [ 242.964625][T24675] CPU: 0 UID: 0 PID: 24675 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.964676][T24675] Tainted: [W]=WARN [ 242.964684][T24675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.964701][T24675] Call Trace: [ 242.964708][T24675] [ 242.964717][T24675] __dump_stack+0x1d/0x30 [ 242.964744][T24675] dump_stack_lvl+0xe8/0x140 [ 242.964769][T24675] dump_stack+0x15/0x1b [ 242.964825][T24675] should_fail_ex+0x265/0x280 [ 242.964852][T24675] should_failslab+0x8c/0xb0 [ 242.964964][T24675] kmem_cache_alloc_node_noprof+0x57/0x320 [ 242.965004][T24675] ? __alloc_skb+0x101/0x320 [ 242.965048][T24675] __alloc_skb+0x101/0x320 [ 242.965101][T24675] netlink_alloc_large_skb+0xba/0xf0 [ 242.965204][T24675] netlink_sendmsg+0x3cf/0x6b0 [ 242.965236][T24675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.965265][T24675] __sock_sendmsg+0x145/0x180 [ 242.965360][T24675] ____sys_sendmsg+0x31e/0x4e0 [ 242.965394][T24675] ___sys_sendmsg+0x17b/0x1d0 [ 242.965442][T24675] __x64_sys_sendmsg+0xd4/0x160 [ 242.965515][T24675] x64_sys_call+0x191e/0x2ff0 [ 242.965542][T24675] do_syscall_64+0xd2/0x200 [ 242.965576][T24675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 242.965638][T24675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 242.965670][T24675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.965693][T24675] RIP: 0033:0x7f3b8296ebe9 [ 242.965708][T24675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.965731][T24675] RSP: 002b:00007f3b813d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.965806][T24675] RAX: ffffffffffffffda RBX: 00007f3b82b95fa0 RCX: 00007f3b8296ebe9 [ 242.965819][T24675] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 242.965832][T24675] RBP: 00007f3b813d7090 R08: 0000000000000000 R09: 0000000000000000 [ 242.965847][T24675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.965862][T24675] R13: 00007f3b82b96038 R14: 00007f3b82b95fa0 R15: 00007ffca20080b8 [ 242.965887][T24675] [ 243.176977][T24683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=24683 comm=syz.2.4555 [ 243.189814][T24683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=24683 comm=syz.2.4555 [ 243.202606][T24683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=24683 comm=syz.2.4555 [ 243.269138][T24692] netlink: 'syz.1.4558': attribute type 27 has an invalid length. [ 243.300771][T24692] __nla_validate_parse: 50 callbacks suppressed [ 243.300785][T24692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4558'. [ 243.348299][T24705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4562'. [ 243.360777][T24694] netlink: 'syz.2.4559': attribute type 13 has an invalid length. [ 243.370183][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 243.379125][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 243.391366][T24701] FAULT_INJECTION: forcing a failure. [ 243.391366][T24701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.404741][T24701] CPU: 0 UID: 0 PID: 24701 Comm: syz.4.4561 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.404777][T24701] Tainted: [W]=WARN [ 243.404784][T24701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.404800][T24701] Call Trace: [ 243.404808][T24701] [ 243.404816][T24701] __dump_stack+0x1d/0x30 [ 243.404838][T24701] dump_stack_lvl+0xe8/0x140 [ 243.404856][T24701] dump_stack+0x15/0x1b [ 243.404888][T24701] should_fail_ex+0x265/0x280 [ 243.404933][T24701] should_fail+0xb/0x20 [ 243.404954][T24701] should_fail_usercopy+0x1a/0x20 [ 243.405029][T24701] _copy_from_user+0x1c/0xb0 [ 243.405067][T24701] kstrtouint_from_user+0x69/0xf0 [ 243.405091][T24701] ? 0xffffffff81000000 [ 243.405136][T24701] ? selinux_file_permission+0x1e4/0x320 [ 243.405163][T24701] proc_fail_nth_write+0x50/0x160 [ 243.405196][T24701] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.405283][T24701] vfs_write+0x266/0x960 [ 243.405309][T24701] ? vfs_read+0x4e6/0x770 [ 243.405334][T24701] ? __rcu_read_unlock+0x4f/0x70 [ 243.405361][T24701] ? __fget_files+0x184/0x1c0 [ 243.405437][T24701] ksys_write+0xda/0x1a0 [ 243.405511][T24701] __x64_sys_write+0x40/0x50 [ 243.405540][T24701] x64_sys_call+0x27fe/0x2ff0 [ 243.405639][T24701] do_syscall_64+0xd2/0x200 [ 243.405672][T24701] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.405703][T24701] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 243.405792][T24701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.405820][T24701] RIP: 0033:0x7f6c2acbd69f [ 243.405837][T24701] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 243.405865][T24701] RSP: 002b:00007f6c2971f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.405961][T24701] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c2acbd69f [ 243.406044][T24701] RDX: 0000000000000001 RSI: 00007f6c2971f0a0 RDI: 0000000000000007 [ 243.406065][T24701] RBP: 00007f6c2971f090 R08: 0000000000000000 R09: 0000000000000000 [ 243.406080][T24701] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 243.406094][T24701] R13: 00007f6c2aee6038 R14: 00007f6c2aee5fa0 R15: 00007fff97365a28 [ 243.406117][T24701] [ 243.408195][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 243.637757][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 243.646805][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 243.812053][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4573'. [ 243.885026][T24750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4576'. [ 243.976818][T24762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4581'. [ 243.988174][T24762] loop4: detected capacity change from 0 to 128 [ 243.997571][T24762] SELinux: security policydb version 17 (MLS) not backwards compatible [ 244.005973][T24762] sel_write_load: 2 callbacks suppressed [ 244.006002][T24762] SELinux: failed to load policy [ 244.021413][T24762] FAULT_INJECTION: forcing a failure. [ 244.021413][T24762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.034539][T24762] CPU: 1 UID: 0 PID: 24762 Comm: syz.4.4581 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 244.034580][T24762] Tainted: [W]=WARN [ 244.034588][T24762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.034605][T24762] Call Trace: [ 244.034613][T24762] [ 244.034622][T24762] __dump_stack+0x1d/0x30 [ 244.034649][T24762] dump_stack_lvl+0xe8/0x140 [ 244.034680][T24762] dump_stack+0x15/0x1b [ 244.034700][T24762] should_fail_ex+0x265/0x280 [ 244.034727][T24762] should_fail+0xb/0x20 [ 244.034749][T24762] should_fail_usercopy+0x1a/0x20 [ 244.034806][T24762] _copy_from_user+0x1c/0xb0 [ 244.034843][T24762] simple_transaction_get+0xe2/0x130 [ 244.034921][T24762] selinux_transaction_write+0x9d/0x110 [ 244.034956][T24762] ? __pfx_selinux_transaction_write+0x10/0x10 [ 244.035013][T24762] vfs_write+0x266/0x960 [ 244.035041][T24762] ? __rcu_read_unlock+0x4f/0x70 [ 244.035163][T24762] ? __fget_files+0x184/0x1c0 [ 244.035199][T24762] ksys_write+0xda/0x1a0 [ 244.035288][T24762] __x64_sys_write+0x40/0x50 [ 244.035316][T24762] x64_sys_call+0x27fe/0x2ff0 [ 244.035424][T24762] do_syscall_64+0xd2/0x200 [ 244.035460][T24762] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.035491][T24762] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 244.035543][T24762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.035565][T24762] RIP: 0033:0x7f6c2acbebe9 [ 244.035583][T24762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.035604][T24762] RSP: 002b:00007f6c2971f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.035645][T24762] RAX: ffffffffffffffda RBX: 00007f6c2aee5fa0 RCX: 00007f6c2acbebe9 [ 244.035663][T24762] RDX: 0000000000000046 RSI: 00002000000002c0 RDI: 0000000000000009 [ 244.035680][T24762] RBP: 00007f6c2971f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.035755][T24762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.035768][T24762] R13: 00007f6c2aee6038 R14: 00007f6c2aee5fa0 R15: 00007fff97365a28 [ 244.035788][T24762] [ 244.265560][T24773] loop0: detected capacity change from 0 to 128 [ 244.278754][T24773] SELinux: security policydb version 17 (MLS) not backwards compatible [ 244.287228][T24773] SELinux: failed to load policy [ 244.442497][T24803] SELinux: ebitmap: truncated map [ 244.452602][T24803] SELinux: failed to load policy [ 244.471296][T24808] loop3: detected capacity change from 0 to 1024 [ 244.590634][T24822] loop0: detected capacity change from 0 to 164 [ 244.597847][T24822] iso9660: Unknown parameter '' [ 244.605688][T24822] siw: device registration error -23 [ 244.666833][T24841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24841 comm=syz.0.4598 [ 244.786459][T24857] SELinux: ebitmap: truncated map [ 244.792418][T24857] SELinux: failed to load policy [ 244.825914][T24865] loop3: detected capacity change from 0 to 1024 [ 244.893181][T24884] loop0: detected capacity change from 0 to 164 [ 244.906057][T24884] iso9660: Unknown parameter '' [ 244.913475][T24884] siw: device registration error -23 [ 245.018005][T24893] SELinux: ebitmap: truncated map [ 245.023689][T24893] SELinux: failed to load policy [ 245.174568][T24939] SELinux: ebitmap: truncated map [ 245.182626][T24939] SELinux: failed to load policy [ 245.467870][ T29] kauditd_printk_skb: 2015 callbacks suppressed [ 245.467886][ T29] audit: type=1326 audit(245.444:49264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.497293][ T29] audit: type=1326 audit(245.444:49265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.520415][ T29] audit: type=1326 audit(245.444:49266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.543751][ T29] audit: type=1326 audit(245.454:49267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.567211][ T29] audit: type=1326 audit(245.454:49268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.590364][ T29] audit: type=1326 audit(245.454:49269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.613842][ T29] audit: type=1326 audit(245.454:49270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.636876][ T29] audit: type=1326 audit(245.454:49271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.655446][T25018] SELinux: ebitmap: truncated map [ 245.660049][ T29] audit: type=1326 audit(245.454:49272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.687402][T25018] SELinux: failed to load policy [ 245.688153][ T29] audit: type=1326 audit(245.454:49273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.1.4628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dec7ebe9 code=0x7ffc0000 [ 245.958396][T25043] loop0: detected capacity change from 0 to 8192 [ 245.987920][T25043] loop0: p1 p2 < > p3 p4 < p5 > [ 245.993068][T25043] loop0: partition table partially beyond EOD, truncated [ 246.016678][T25058] loop4: detected capacity change from 0 to 164 [ 246.016947][T25043] loop0: p1 size 100663296 extends beyond EOD, truncated [ 246.024337][T25058] iso9660: Unknown parameter '' [ 246.045639][T25058] siw: device registration error -23 [ 246.058268][T25061] SELinux: ebitmap: truncated map [ 246.058284][T25043] loop0: p2 start 591104 is beyond EOD, truncated [ 246.064365][T25061] SELinux: failed to load policy [ 246.069965][T25043] loop0: p3 start 33572980 is beyond EOD, truncated [ 246.133505][T25043] loop0: p5 size 100663296 extends beyond EOD, truncated [ 246.275658][T25096] vlan2: entered allmulticast mode [ 246.281030][T25096] dummy0: entered allmulticast mode [ 246.410095][T25109] SELinux: ebitmap: truncated map [ 246.415788][T25109] SELinux: failed to load policy [ 246.679857][T25034] 9pnet_fd: p9_fd_create_tcp (25034): problem connecting socket to 127.0.0.1 [ 246.847738][T25144] validate_nla: 10 callbacks suppressed [ 246.847754][T25144] netlink: 'syz.0.4665': attribute type 27 has an invalid length. [ 246.889833][T25146] loop1: detected capacity change from 0 to 164 [ 246.897001][T25146] iso9660: Unknown parameter '' [ 246.905336][T25146] siw: device registration error -23 [ 247.121778][T25170] netlink: 'syz.1.4672': attribute type 13 has an invalid length. [ 247.139351][T25167] netlink: 'syz.3.4673': attribute type 13 has an invalid length. [ 247.514996][T25214] netlink: 'syz.3.4687': attribute type 13 has an invalid length. [ 247.625998][T25223] vlan2: entered allmulticast mode [ 247.640547][T25223] dummy0: entered allmulticast mode [ 247.754938][T25236] SELinux: ebitmap: truncated map [ 247.761341][T25236] SELinux: failed to load policy [ 247.868180][T25252] 9pnet_fd: Insufficient options for proto=fd [ 247.899055][T25259] FAULT_INJECTION: forcing a failure. [ 247.899055][T25259] name failslab, interval 1, probability 0, space 0, times 0 [ 247.911806][T25259] CPU: 1 UID: 0 PID: 25259 Comm: syz.4.4704 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 247.911843][T25259] Tainted: [W]=WARN [ 247.911852][T25259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.911946][T25259] Call Trace: [ 247.911953][T25259] [ 247.911961][T25259] __dump_stack+0x1d/0x30 [ 247.911982][T25259] dump_stack_lvl+0xe8/0x140 [ 247.912083][T25259] dump_stack+0x15/0x1b [ 247.912102][T25259] should_fail_ex+0x265/0x280 [ 247.912122][T25259] ? sctp_add_bind_addr+0x71/0x1e0 [ 247.912177][T25259] should_failslab+0x8c/0xb0 [ 247.912206][T25259] __kmalloc_cache_noprof+0x4c/0x320 [ 247.912237][T25259] sctp_add_bind_addr+0x71/0x1e0 [ 247.912264][T25259] sctp_do_bind+0x427/0x4b0 [ 247.912380][T25259] sctp_connect_new_asoc+0x153/0x3a0 [ 247.912414][T25259] __sctp_connect+0x424/0x7a0 [ 247.912448][T25259] ? selinux_sctp_bind_connect+0x20d/0x250 [ 247.912513][T25259] sctp_getsockopt_connectx3+0x220/0x300 [ 247.912557][T25259] sctp_getsockopt+0x910/0xaa0 [ 247.912623][T25259] sock_common_getsockopt+0x5d/0x70 [ 247.912720][T25259] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 247.912785][T25259] do_sock_getsockopt+0x1fd/0x240 [ 247.912811][T25259] __x64_sys_getsockopt+0x11e/0x1a0 [ 247.912839][T25259] x64_sys_call+0x2bc6/0x2ff0 [ 247.912941][T25259] do_syscall_64+0xd2/0x200 [ 247.912971][T25259] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 247.912995][T25259] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 247.913019][T25259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.913072][T25259] RIP: 0033:0x7f6c2acbebe9 [ 247.913087][T25259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.913105][T25259] RSP: 002b:00007f6c2971f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 247.913167][T25259] RAX: ffffffffffffffda RBX: 00007f6c2aee5fa0 RCX: 00007f6c2acbebe9 [ 247.913179][T25259] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 247.913191][T25259] RBP: 00007f6c2971f090 R08: 0000200000000180 R09: 0000000000000000 [ 247.913203][T25259] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.913241][T25259] R13: 00007f6c2aee6038 R14: 00007f6c2aee5fa0 R15: 00007fff97365a28 [ 247.913260][T25259] [ 248.170942][T25267] loop2: detected capacity change from 0 to 512 [ 248.181274][T25267] EXT4-fs: dax option not supported [ 248.292939][T25300] 9pnet_fd: Insufficient options for proto=fd [ 248.319389][T25305] __nla_validate_parse: 39 callbacks suppressed [ 248.319413][T25305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4717'. [ 248.335019][T25307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4718'. [ 248.335467][T25305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4717'. [ 248.416198][T25311] SELinux: ebitmap: truncated map [ 248.521040][T25332] 9pnet_fd: Insufficient options for proto=fd [ 248.533002][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4728'. [ 248.542647][T25334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4728'. [ 248.557649][T25334] FAULT_INJECTION: forcing a failure. [ 248.557649][T25334] name failslab, interval 1, probability 0, space 0, times 0 [ 248.570385][T25334] CPU: 1 UID: 0 PID: 25334 Comm: syz.2.4728 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.570450][T25334] Tainted: [W]=WARN [ 248.570457][T25334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.570469][T25334] Call Trace: [ 248.570476][T25334] [ 248.570485][T25334] __dump_stack+0x1d/0x30 [ 248.570578][T25334] dump_stack_lvl+0xe8/0x140 [ 248.570600][T25334] dump_stack+0x15/0x1b [ 248.570624][T25334] should_fail_ex+0x265/0x280 [ 248.570648][T25334] ? tcf_block_get_ext+0x19e/0xb30 [ 248.570691][T25334] should_failslab+0x8c/0xb0 [ 248.570737][T25334] __kmalloc_cache_noprof+0x4c/0x320 [ 248.570818][T25334] ? unwind_get_return_address+0x16/0x40 [ 248.570846][T25334] tcf_block_get_ext+0x19e/0xb30 [ 248.570904][T25334] ? filter_irq_stacks+0x1d/0x70 [ 248.571000][T25334] ? stack_depot_save_flags+0xa93/0xb80 [ 248.571091][T25334] tcf_block_get+0x67/0xa0 [ 248.571151][T25334] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 248.571183][T25334] sfq_init+0x7f/0x1290 [ 248.571208][T25334] ? netlink_rcv_skb+0x123/0x220 [ 248.571281][T25334] ? rtnetlink_rcv+0x1c/0x30 [ 248.571312][T25334] ? netlink_unicast+0x5bd/0x690 [ 248.571350][T25334] ? netlink_sendmsg+0x58b/0x6b0 [ 248.571422][T25334] ? __sock_sendmsg+0x145/0x180 [ 248.571455][T25334] ? ____sys_sendmsg+0x31e/0x4e0 [ 248.571473][T25334] ? ___sys_sendmsg+0x17b/0x1d0 [ 248.571526][T25334] ? __x64_sys_sendmsg+0xd4/0x160 [ 248.571549][T25334] ? x64_sys_call+0x191e/0x2ff0 [ 248.571610][T25334] ? do_syscall_64+0xd2/0x200 [ 248.571774][T25334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.571797][T25334] ? __pfx_sfq_dequeue+0x10/0x10 [ 248.571822][T25334] ? qdisc_alloc+0x3c3/0x440 [ 248.571851][T25334] ? __pfx_sfq_init+0x10/0x10 [ 248.571918][T25334] qdisc_create+0x591/0x9e0 [ 248.571944][T25334] tc_modify_qdisc+0xf2e/0x1420 [ 248.571977][T25334] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 248.572018][T25334] rtnetlink_rcv_msg+0x65a/0x6d0 [ 248.572041][T25334] ? avc_has_perm_noaudit+0x1b1/0x200 [ 248.572065][T25334] netlink_rcv_skb+0x123/0x220 [ 248.572081][T25334] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.572181][T25334] rtnetlink_rcv+0x1c/0x30 [ 248.572202][T25334] netlink_unicast+0x5bd/0x690 [ 248.572232][T25334] netlink_sendmsg+0x58b/0x6b0 [ 248.572266][T25334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.572285][T25334] __sock_sendmsg+0x145/0x180 [ 248.572312][T25334] ____sys_sendmsg+0x31e/0x4e0 [ 248.572333][T25334] ___sys_sendmsg+0x17b/0x1d0 [ 248.572366][T25334] __x64_sys_sendmsg+0xd4/0x160 [ 248.572469][T25334] x64_sys_call+0x191e/0x2ff0 [ 248.572498][T25334] do_syscall_64+0xd2/0x200 [ 248.572531][T25334] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 248.572558][T25334] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 248.572602][T25334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.572620][T25334] RIP: 0033:0x7faec9beebe9 [ 248.572633][T25334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.572648][T25334] RSP: 002b:00007faec864f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.572665][T25334] RAX: ffffffffffffffda RBX: 00007faec9e15fa0 RCX: 00007faec9beebe9 [ 248.572724][T25334] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000003 [ 248.572739][T25334] RBP: 00007faec864f090 R08: 0000000000000000 R09: 0000000000000000 [ 248.572754][T25334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.572768][T25334] R13: 00007faec9e16038 R14: 00007faec9e15fa0 R15: 00007ffda1e3a558 [ 248.572786][T25334] [ 248.981496][T25344] loop0: detected capacity change from 0 to 1024 [ 249.022657][T25354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4734'. [ 249.033625][T25356] FAULT_INJECTION: forcing a failure. [ 249.033625][T25356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.046744][T25356] CPU: 1 UID: 0 PID: 25356 Comm: syz.2.4735 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.046778][T25356] Tainted: [W]=WARN [ 249.046787][T25356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.046841][T25356] Call Trace: [ 249.046851][T25356] [ 249.046861][T25356] __dump_stack+0x1d/0x30 [ 249.046888][T25356] dump_stack_lvl+0xe8/0x140 [ 249.046913][T25356] dump_stack+0x15/0x1b [ 249.047002][T25356] should_fail_ex+0x265/0x280 [ 249.047030][T25356] should_fail+0xb/0x20 [ 249.047057][T25356] should_fail_usercopy+0x1a/0x20 [ 249.047086][T25356] _copy_from_user+0x1c/0xb0 [ 249.047124][T25356] do_ipv6_setsockopt+0x124/0x2160 [ 249.047155][T25356] ? kstrtoull+0x111/0x140 [ 249.047180][T25356] ? __rcu_read_unlock+0x4f/0x70 [ 249.047273][T25356] ? avc_has_perm_noaudit+0x1b1/0x200 [ 249.047337][T25356] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 249.047393][T25356] ipv6_setsockopt+0x59/0x130 [ 249.047454][T25356] tcp_setsockopt+0x95/0xb0 [ 249.047473][T25356] sock_common_setsockopt+0x69/0x80 [ 249.047498][T25356] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 249.047524][T25356] __sys_setsockopt+0x184/0x200 [ 249.047569][T25356] __x64_sys_setsockopt+0x64/0x80 [ 249.047588][T25356] x64_sys_call+0x20ec/0x2ff0 [ 249.047607][T25356] do_syscall_64+0xd2/0x200 [ 249.047638][T25356] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 249.047659][T25356] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 249.047681][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.047771][T25356] RIP: 0033:0x7faec9beebe9 [ 249.047827][T25356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.047845][T25356] RSP: 002b:00007faec864f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.047862][T25356] RAX: ffffffffffffffda RBX: 00007faec9e15fa0 RCX: 00007faec9beebe9 [ 249.047938][T25356] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000006 [ 249.047950][T25356] RBP: 00007faec864f090 R08: 0000000000000008 R09: 0000000000000000 [ 249.047961][T25356] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 249.047972][T25356] R13: 00007faec9e16038 R14: 00007faec9e15fa0 R15: 00007ffda1e3a558 [ 249.048020][T25356] [ 249.339816][T25371] loop3: detected capacity change from 0 to 164 [ 249.346893][T25371] iso9660: Unknown parameter '' [ 249.370359][T25371] siw: device registration error -23 [ 249.378346][T25383] loop0: detected capacity change from 0 to 256 [ 249.433738][T25388] loop2: detected capacity change from 0 to 1024 [ 249.443872][T25396] loop1: detected capacity change from 0 to 1024 [ 249.455950][T25395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4745'. [ 249.490119][T25409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4750'. [ 249.587440][T25424] netlink: 'syz.0.4749': attribute type 13 has an invalid length. [ 249.660728][T25432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.669342][T25432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.697932][T25438] loop4: detected capacity change from 0 to 164 [ 249.704990][T25438] iso9660: Unknown parameter '' [ 249.712142][T25438] siw: device registration error -23 [ 249.760913][T25447] SELinux: ebitmap: truncated map [ 249.767758][T25447] sel_write_load: 1 callbacks suppressed [ 249.767775][T25447] SELinux: failed to load policy [ 249.792516][T25455] loop4: detected capacity change from 0 to 1024 [ 249.820855][T25465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4763'. [ 249.914915][T25476] netlink: 'syz.1.4766': attribute type 13 has an invalid length. [ 249.974767][T25486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4768'. [ 250.204764][T25507] SELinux: ebitmap: truncated map [ 250.210557][T25507] SELinux: failed to load policy [ 250.217932][T25509] IPVS: Error connecting to the multicast addr [ 250.233204][T25509] loop0: detected capacity change from 0 to 2048 [ 250.268751][T25509] loop0: p1 < > p4 [ 250.273604][T25518] loop1: detected capacity change from 0 to 1024 [ 250.277724][T25509] loop0: p4 size 8388608 extends beyond EOD, truncated [ 250.400355][T25544] loop4: detected capacity change from 0 to 1024 [ 250.412750][T25544] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 250.423878][T25544] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 250.516896][T25544] JBD2: no valid journal superblock found [ 250.522697][T25544] EXT4-fs (loop4): Could not load journal inode [ 250.550711][ T29] kauditd_printk_skb: 1988 callbacks suppressed [ 250.550749][ T29] audit: type=1326 audit(250.534:51262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.584705][T25551] loop0: detected capacity change from 0 to 164 [ 250.592259][T25551] iso9660: Unknown parameter '' [ 250.601081][T25551] siw: device registration error -23 [ 250.618746][ T29] audit: type=1326 audit(250.564:51263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.641928][ T29] audit: type=1326 audit(250.564:51264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.665231][ T29] audit: type=1326 audit(250.564:51265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.688401][ T29] audit: type=1326 audit(250.564:51266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.711810][ T29] audit: type=1326 audit(250.564:51267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.735010][ T29] audit: type=1326 audit(250.564:51268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.758136][ T29] audit: type=1326 audit(250.564:51269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.781360][ T29] audit: type=1326 audit(250.564:51270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.804535][ T29] audit: type=1326 audit(250.564:51271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25550 comm="syz.0.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4ce483ebe9 code=0x7ffc0000 [ 250.815141][T25563] SELinux: ebitmap: truncated map [ 250.834569][T25563] SELinux: failed to load policy [ 250.884523][T25566] SELinux: ebitmap: truncated map [ 250.891023][T25566] SELinux: failed to load policy [ 250.936687][T25578] netlink: 'syz.0.4793': attribute type 27 has an invalid length. [ 251.056238][T25624] loop0: detected capacity change from 0 to 1024 [ 251.143533][T25634] SELinux: ebitmap: truncated map [ 251.149780][T25634] SELinux: failed to load policy [ 251.179519][T25636] loop0: detected capacity change from 0 to 164 [ 251.188952][T25636] iso9660: Unknown parameter '' [ 251.196339][T25636] siw: device registration error -23 [ 251.261221][T25644] netlink: 'syz.4.4804': attribute type 27 has an invalid length. [ 251.311951][T25692] loop0: detected capacity change from 0 to 1024 [ 251.408567][T25703] SELinux: ebitmap: truncated map [ 251.416772][T25703] SELinux: failed to load policy [ 251.445706][T25713] loop0: detected capacity change from 0 to 164 [ 251.452637][T25713] iso9660: Unknown parameter '' [ 251.461305][T25713] siw: device registration error -23 [ 251.486862][T25740] netlink: 'syz.4.4815': attribute type 6 has an invalid length. [ 251.516387][T25756] netlink: 'syz.0.4819': attribute type 27 has an invalid length. [ 251.624040][T25769] 9pnet_fd: Insufficient options for proto=fd [ 251.689071][T25776] SELinux: ebitmap: truncated map [ 251.696049][T25776] SELinux: failed to load policy [ 251.889818][T25819] loop1: detected capacity change from 0 to 164 [ 251.898441][T25819] iso9660: Unknown parameter '' [ 251.899749][T25821] validate_nla: 1 callbacks suppressed [ 251.899766][T25821] netlink: 'syz.2.4831': attribute type 27 has an invalid length. [ 251.905843][T25819] siw: device registration error -23 [ 251.981206][T25828] program syz.1.4833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.251833][T25847] loop3: detected capacity change from 0 to 1024 [ 252.359942][T25855] netlink: 'syz.4.4842': attribute type 27 has an invalid length. [ 252.724995][T25928] loop1: detected capacity change from 0 to 1024 [ 253.150782][T26032] netlink: 'syz.1.4864': attribute type 13 has an invalid length. [ 253.164855][T26031] SELinux: ebitmap: truncated map [ 253.170666][T26031] SELinux: failed to load policy [ 253.215502][T26036] SELinux: ebitmap: truncated map [ 253.221529][T26036] SELinux: failed to load policy [ 253.292273][T26047] SELinux: ebitmap: truncated map [ 253.297954][T26047] SELinux: failed to load policy [ 253.339591][T26055] __nla_validate_parse: 53 callbacks suppressed [ 253.339609][T26055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4875'. [ 253.363888][ T4325] ================================================================== [ 253.371984][ T4325] BUG: KCSAN: data-race in copy_process / free_pid [ 253.378523][ T4325] [ 253.380850][ T4325] read-write to 0xffffffff8685fc48 of 4 bytes by task 26079 on cpu 1: [ 253.389003][ T4325] free_pid+0x77/0x180 [ 253.393079][ T4325] free_pids+0x7a/0xb0 [ 253.397160][ T4325] release_task+0x9a9/0xb60 [ 253.401703][ T4325] do_exit+0xd81/0x15c0 [ 253.405877][ T4325] call_usermodehelper_exec_async+0x247/0x250 [ 253.411969][ T4325] ret_from_fork+0xda/0x150 [ 253.416520][ T4325] ret_from_fork_asm+0x1a/0x30 [ 253.421296][ T4325] [ 253.423624][ T4325] read to 0xffffffff8685fc48 of 4 bytes by task 4325 on cpu 0: [ 253.431175][ T4325] copy_process+0x14a6/0x2000 [ 253.435864][ T4325] kernel_clone+0x16c/0x5c0 [ 253.440378][ T4325] user_mode_thread+0x7d/0xb0 [ 253.445092][ T4325] call_usermodehelper_exec_work+0x41/0x160 [ 253.451317][ T4325] process_scheduled_works+0x4ce/0x9d0 [ 253.456881][ T4325] worker_thread+0x582/0x770 [ 253.461486][ T4325] kthread+0x486/0x510 [ 253.465561][ T4325] ret_from_fork+0xda/0x150 [ 253.470071][ T4325] ret_from_fork_asm+0x1a/0x30 [ 253.474846][ T4325] [ 253.477175][ T4325] value changed: 0x80000190 -> 0x8000018f [ 253.482890][ T4325] [ 253.485213][ T4325] Reported by Kernel Concurrency Sanitizer on: [ 253.491373][ T4325] CPU: 0 UID: 0 PID: 4325 Comm: kworker/u8:60 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 253.502930][ T4325] Tainted: [W]=WARN [ 253.506739][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.516800][ T4325] Workqueue: events_unbound call_usermodehelper_exec_work [ 253.523954][ T4325] ================================================================== [ 253.539828][T26057] netlink: 'syz.4.4876': attribute type 13 has an invalid length.