last executing test programs: 3m1.742211999s ago: executing program 4 (id=598): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0xea98a1b64c0b9f7d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000020}) io_uring_enter(r0, 0x749d, 0xad37, 0x0, 0x0, 0x0) 3m1.690774124s ago: executing program 4 (id=601): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0xb}, {0x1c}, {0x6, 0x4, 0x80, 0x7ffffeb9}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) 3m1.610723561s ago: executing program 4 (id=604): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="8871", 0x2}], 0x1}, 0x240480c3) r2 = dup(r1) write$binfmt_elf32(r1, &(0x7f00000006c0)=ANY=[], 0x5c) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000008c0)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e24, 0x4, @empty, 0x3}}}, 0x38) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) 3m1.52021428s ago: executing program 4 (id=609): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x40c, &(0x7f0000000940)={[{@noinit_itable}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x440, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 3m1.419797709s ago: executing program 4 (id=616): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0xb0}, 0x18) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff00000225be04020bfe050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653601800000000500eb16000049935ade4a018089b6ec0c3959547f509058ba86c902000000004a3200040016000b000a0000000000", 0x69, 0x4000804, 0x0, 0x0) 3m1.168575942s ago: executing program 4 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r0}, 0x10) 3m1.141338115s ago: executing program 32 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r0}, 0x10) 2m41.145724237s ago: executing program 0 (id=1560): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r0, 0x1, 0x70bd2d}, 0x14}}, 0x0) 2m41.127641169s ago: executing program 0 (id=1562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 2m41.104200171s ago: executing program 0 (id=1564): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1267, 0x0) 2m41.041741526s ago: executing program 0 (id=1566): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4c400, 0x20) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f", 0xb1) 2m40.651966223s ago: executing program 0 (id=1571): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m40.400625366s ago: executing program 0 (id=1576): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x2, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa284}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="a6", 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xa00, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) 2m40.386758468s ago: executing program 33 (id=1576): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x2, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa284}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="a6", 0x1}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xa00, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) 47.808439859s ago: executing program 3 (id=4232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000100)={0xe, 0x7, 0x1, {{0x1, '-'}, 0x207}}, 0xe) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 47.416536365s ago: executing program 3 (id=4236): bpf$TOKEN_CREATE(0x24, &(0x7f0000001080), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000023000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getitimer(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) 47.375879899s ago: executing program 3 (id=4237): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000100000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x1400, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_io_uring_setup(0xec4, &(0x7f0000000c00)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000001080), &(0x7f00000002c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r4}, 0x18) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000105fefde3fffedb", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 45.791449766s ago: executing program 3 (id=4260): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0xb, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="280000001800010000000000000000000a00000008000000e00000020c0008800800", @ANYRES32], 0x28}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4f8, &(0x7f00000005c0)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, '\x02\x00\x00\xe2Q\x00\x00H\x905P.D\x01\x00a=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x63) 45.564460347s ago: executing program 3 (id=4264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_setup(0xa82, &(0x7f0000000400)={0x0, 0xdfd4, 0x1, 0x3, 0xbd7f7fff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$pppl2tp(r4, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x1, 0x3, 0x4, {0xa, 0x4e22, 0x8, @local, 0x23}}}, 0x32) syz_io_uring_submit(r2, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000380), &(0x7f0000000640)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x2) 45.223762589s ago: executing program 3 (id=4269): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0xb, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x40000004, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc6, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e3, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x20009, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0xffffffff, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x1, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xc0, 0xdf72c67}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 45.208448791s ago: executing program 34 (id=4269): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0xb, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x40000004, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc6, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e3, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x20009, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0xffffffff, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x1, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xc0, 0xdf72c67}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 28.064171397s ago: executing program 1 (id=4501): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50248, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x200, 0x100000001}, 0x0, 0x4, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/192, 0xc0}, {0x0}], 0x2) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000000)={0x16, 0x2c, 0x1, 0xf, 0x7, 0xeb8e, 0x5, 0x9b}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = gettid() r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d70421f5306d03d991bfa14e3bc03a73ec663b226be9f8b639ed6450ec62d612557795f3fa3597f697fa53364f71801fc009fa147a2ba30d968389e1882847761413f11cdd292f56678c486b596b122b14bf8a3d5ce807a4f612b81a291fa0ecad6fa66244dae1d80979fc08b94b54685c9ac1df8603298c7a3d1b4c5db829809", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES8=r9], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r12, 0x0, 0x0, 0x0, 0x0, 0x0) 27.980052635s ago: executing program 1 (id=4503): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, 0x0, 0x0, 0x40078, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x20, r3, 0x1, 0x70bd2c, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0xff07}, 0x2000000) 27.92611123s ago: executing program 1 (id=4506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') pread64(r2, 0x0, 0x0, 0x0) 27.836494198s ago: executing program 1 (id=4509): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000040)='--\t+@\x00\xdc\xe4c\xe4\x83\xcb~\xfc\x9bu\x1cF~^\xdd\x1a\x9b;\xc6\x91\x98\xca\xd2\xd3\xb2w\xebi\xd2xe\xbdR\xad\x1bC\x1e\x10r:\xc5uy\xa3\vL$\x9dQ\xdf}\xd9=\xe5\xe1\xda2\xe3\x92\x1e\x82=\x05f\xd9O\xc4\x87I\xbe\xaaMuA\xb1\xa0j Nl\n^\xe9\x86\xad\xb1\x8d\xa8\x83K\x95\xdb-\x1c Q\xb2\xfd@\xd1B\xec\x18\x8a\xc9\xa3\x9d\x00\xb4J\x12\xda1\xf3DQ%\xf1C\x86\xee\xf2r+\xf4(1i\xf5~X\\<\xa0f\xef\xc3\xdc`\xb8\x8ef6\x03\xc8\x8f/\xb7\xc1kf\x1b\xaf\xd8\xf1\x9a\x16\xb8^N\xc7\xbd\x02\xe8\xda\x8b\xec\t\xfcF&\xc2\xe3_\xea\xd2Y\x15\v\t\v\xdf\xbd\xf5\xf5\xcb\xfe\xeb\xb8\x9f') syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7be, &(0x7f00000005c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000040)='--\t+@\x00\xdc\xe4c\xe4\x83\xcb~\xfc\x9bu\x1cF~^\xdd\x1a\x9b;\xc6\x91\x98\xca\xd2\xd3\xb2w\xebi\xd2xe\xbdR\xad\x1bC\x1e\x10r:\xc5uy\xa3\vL$\x9dQ\xdf}\xd9=\xe5\xe1\xda2\xe3\x92\x1e\x82=\x05f\xd9O\xc4\x87I\xbe\xaaMuA\xb1\xa0j Nl\n^\xe9\x86\xad\xb1\x8d\xa8\x83K\x95\xdb-\x1c Q\xb2\xfd@\xd1B\xec\x18\x8a\xc9\xa3\x9d\x00\xb4J\x12\xda1\xf3DQ%\xf1C\x86\xee\xf2r+\xf4(1i\xf5~X\\<\xa0f\xef\xc3\xdc`\xb8\x8ef6\x03\xc8\x8f/\xb7\xc1kf\x1b\xaf\xd8\xf1\x9a\x16\xb8^N\xc7\xbd\x02\xe8\xda\x8b\xec\t\xfcF&\xc2\xe3_\xea\xd2Y\x15\v\t\v\xdf\xbd\xf5\xf5\xcb\xfe\xeb\xb8\x9f') (async) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7be, &(0x7f00000005c0)="$eJzs3U1oHPfZAPBn9EqxooAJeUtqjOOM7RRs6iq7q0SpyCHdrEbyJNKu2F0Vm1KSEMvFWPkgJrTxoYkvST8pPfWY5hpy6a3QQ6GHtqdCc+ilh0Igp5JCA6WlFFRmdtdeyfpyLNlJ+vuJ6D8788x/npmdzLOz1swEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBJY7ZSqSYHI2L5bLq1xmy7tbjN9EF/v17XbLPciKT4L8bH41Bv1KEvXJ98f/HreBzpvToS4yODCfc+/v+jI4P5t0nokzq2y7gk4o0ioUvPra6uvLIPidxGP/jVTc/yr7Xi93zWzDutfLE+n6V5p5XOTE9XHj4z10nn8oWsc67TzRbTRjurd1vt9GTjVFqdmZlKs8lzreXm/Gx9IRuMfOwrtUplOn1qcimrtzut5sNPTXYaZ/KFhbw5X8bUKt+OIuaxYkd8Ou+m3ay+mKYXLq6uTO2UahFUXTfmwLod58hD93746gcfX1wpdsitOkn6+1+tWq3VqtOPzjz6WKUyWqvU1o+obBDXImIkoojYl52Wz5A9OnLDrRsp6v/HScRC5NGM5TgbaaQxUv6+/jMW4zEb7WjFYvH6T2Mbpt9Q/7/08N/+sN1yh+v/oMofuj75cJT1/2jv1dEYL5rxuHLPuvpfHJQ35rF/P833etkMj7scr8WVuBTPxWqsxkq8chvz+UQ/I3vb33xk0Yw8OtGKPBajXo5J+2PSmInpmI5KPBNnYi46kcZc5LEQWXTiXHR+ONp/vxvRjizq0Y1WtCONk9GIU5FGNWZiJqYijSwm41y0YjmaMR+zUS97uRAXy+0+tSGv+7/7bPLGHz98uxi+FlTdZkWS4sNcEfT3bYL6xfzB2FX9v7u/busj1P/Pm/H++7zb+L04bMOeWCvP/0fvdBoAAADAPkrKb9+TiBiLB8qhuXwh+8adTgsAAADYQ+XfNR8pmrFi6IFIivP/yiaR79/23AAAAIC9kZTX2CURMREP9oYGl0tt9iUAAAAA8BlU/vv/0aKZiHi9HOH8HwAAAD5nvjd0j/0YvsfuB3f179HbWTqQ/F8/eunsQ8kL9WKo/kJ/XL/5+rUeu3OHk4P9TspmevTKPUlEjDayI8ng7pf/OdBrPyp7OHz9BoQb87h2r992eyy5unUCsX0C5av4URzrxRw732vPD6b0ljIxly9kk43WwuPVpP/lSPfVFy9+J6JY+vebiweTuHBxdWXy+ZdWz5e5XC16ufpC//bwyU3kstbfAvHA5ms8Vl6I0V/uRG+5leH17z8SYWT7ZSbDy3wzjvdijk/02on16z9eLLM6+Xg16vWDI93sbPfVtaG172dRvcU1fzNO9GJOnDzRazbJorYuixdvzKI2nMXutsWus3j72Otn//HbVpJN7ZTF1C1mAXCnXCjv+nO9Ct1dVqF/r/UU9X9D3R3c1fymjnIXrn/KGMw/VOtGY2+q+5txshdzsvd5YvTwJnWlsskR/eWLL/+uf0R/5N2f/fybR3//i62r21qyfRbvxqleYL+J+35zQxZFF9Vyy/54Q1V9p5jjnS2ramehlsRYjPSmDCavfGvlxVptarrySKXyaC3Gyo8K/UbtAWATOz5jZxdP4Xlk87PqGFS8+679ScFkPB8vxWqcj9Pl1QYR8eDmvU4M/RnC6R3OWieGnvByeodzy+uxtY2xB04ksUXs1NAW++JPy+af+/eeAMB+O75DHd5N/T+9w3n3+lp+qvfg3MHZcWxdyzfz1f3eIADwPyBrf5RMdN9K2u186ZnqzEy13j2Tpe1W4+m0nc/OZ2ne7Gbtxpl6cz5Ll9qtbqsx+OJ4NuukneWlpVa7m8612ulSq5OfLZ/8nvYf/d7JFuvNbt7oLC1k9U6WNlrNbr3RTWfzTiNdWn5yIe+cydrlzJ2lrJHP5Y16N281005rud3IJtO0k2VDgfls1uzmc3kx2EyX2vlivX01IhaWF7N0Nus02vlSt9XrcLCsvDnXai+W3U7euPp/vd3bGwA+DS6/duXSc6urK6+sH1hLNo7ZfODPu4i5HLF2p1cTABgyXKUBAAAAAAAAAAAAAIBPpxsv1yvG7nhJ3/DAWNxE8IaBA/FJ5vr8Dnz5vd7bshcd3ko/d697T+/q7yx3fvvc9MCzTzxxaauYJ18/dOYvWcTO/Wz+f8rle27Ye+OtgxF3/fInvTFfu11r+n701iJGb2r2tWSbmDt2SAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf03AAD//2tvTu0=") (async) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) (async) syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(r0, &(0x7f00000000c0)='task\x00') (async) fchdir(r1) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) (async) syz_open_procfs(r0, &(0x7f0000000040)='status\x00') (async) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) (async) 27.828129649s ago: executing program 1 (id=4511): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000000), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='kfree\x00', r4, 0x0, 0x80}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r6, 0x1, 0x8, 0x6, @broadcast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 27.611747589s ago: executing program 1 (id=4512): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$update(0x2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1b, 0x0, 0x1, 0xf5, 0x6, @broadcast}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000004000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1101) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000063c0), 0x74540, 0x300) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x9400) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r6) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x7fff, 0x3, 0x2, 0x24, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) fcntl$setstatus(r6, 0x4, 0x2c00) r7 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6}) io_uring_enter(r7, 0x48e9, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x7, 0xb3fd, 0x88]}, &(0x7f0000000040)=0x44) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 27.594567981s ago: executing program 35 (id=4512): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$update(0x2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1b, 0x0, 0x1, 0xf5, 0x6, @broadcast}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000004000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1101) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000063c0), 0x74540, 0x300) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x9400) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r6) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x7fff, 0x3, 0x2, 0x24, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) fcntl$setstatus(r6, 0x4, 0x2c00) r7 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6}) io_uring_enter(r7, 0x48e9, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x7, 0xb3fd, 0x88]}, &(0x7f0000000040)=0x44) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 3.653738759s ago: executing program 2 (id=4958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18010000214a0000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000a00)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x2000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000600)=@can_newroute={0x13c, 0x18, 0x4, 0x70bd2d, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_CS_CRC8={0x11e, 0x6, {0x15, 0x79, 0x2b, 0x0, 0x2, "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", 0x3, "afe170a55469f54e693fcd0f0c7377862b9fb544"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="019b1d35eb66c40f13002f"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02002abdd600fedbdf253d0000000831000200303030303a30303a31302e30000000001c008201736f987263655f6d61635f69735f6d6c7469636173740000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x70}, 0x4008800) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRESDEC], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x20050890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x0) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x8) fchdir(r12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.828509166s ago: executing program 2 (id=4972): syz_open_dev$usbfs(0x0, 0x204, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) close(r1) 2.706603068s ago: executing program 2 (id=4974): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000006c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x9, 0x2, 0x0, @broadcast, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x98, 0x0, {0x5, 0x4, 0x2, 0x2a, 0x1, 0x68, 0xa, 0x64, 0x1, 0x3, @multicast1, @rand_addr=0x64010100}}}}}}, 0x0) 2.536388934s ago: executing program 2 (id=4978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RLERRORu(r5, &(0x7f0000000100)={0xe, 0x7, 0x1, {{0x1, '-'}, 0x207}}, 0xe) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 2.464488901s ago: executing program 2 (id=4983): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) syz_open_dev$usbmon(&(0x7f0000000000), 0xdc4f, 0x141000) shutdown(r0, 0x1) 2.174002388s ago: executing program 2 (id=4985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 2.011794543s ago: executing program 7 (id=4987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x9, 0x9, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x65, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0xc, 0x8, "9f519ee0234f"}]}, @generic={0x4, 0x5, "99ff90"}, @generic={0x88, 0xf, "7ef092f1a7725a3b260ba85c01"}, @ssrr={0x89, 0x1b, 0x88, [@multicast1, @loopback, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) unshare(0x62040200) 1.530647907s ago: executing program 6 (id=4989): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) membarrier(0x40, 0x0) 1.412628598s ago: executing program 6 (id=4990): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.387133151s ago: executing program 8 (id=4991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 1.314308258s ago: executing program 8 (id=4992): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0xf) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r4, 0x0, 0x0, 0xcc844, &(0x7f0000000180)={0xa, 0x4e23, 0xa19, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d"], 0x5c}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r9, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r9, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x5, 0x65, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) epoll_create1(0x80000) unlink(&(0x7f0000000200)='./cgroup\x00') recvfrom$inet6(r3, 0x0, 0xfffffffffffffdb2, 0x8020, 0x0, 0x0) 918.990175ms ago: executing program 7 (id=4999): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x5, 0x0, &(0x7f00000000c0)) 892.300546ms ago: executing program 8 (id=5000): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000002400128009"], 0x44}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) r2 = syz_open_pts(r1, 0x101000) r3 = dup3(r2, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x12, 0x1, 0x10001, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0], 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pwritev2(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000040)="e5", 0x1}], 0x1, 0x1, 0xfffffffb, 0x1a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, r3, 0x19, 0x2010, 0x0, @value, @void, @void, @void, r4}, 0x20) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\b', @ANYRES16=0x0, @ANYBLOB], 0x24}}, 0x20000001) 714.758623ms ago: executing program 5 (id=5004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 685.133886ms ago: executing program 5 (id=5005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x40002, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000019c0)) (async) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) setreuid(0x0, 0xee00) (async) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xac) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) fcntl$setlease(r1, 0x400, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x42000, &(0x7f0000000380)={[], [{@context={'context', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@appraise_type}, {@permit_directio}]}) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 648.5779ms ago: executing program 5 (id=5006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 646.21521ms ago: executing program 6 (id=5007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 628.675741ms ago: executing program 5 (id=5008): write$selinux_load(0xffffffffffffffff, 0x0, 0x190da) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="070000000400000008020000f8ffffffffffffffcd4399eabb5d82df402a5f523a12f73a2fe09afc7a83908fa8c97b0c922390d44cae1c9de392964f677f510b236c8225fdc05de70e3d88961ef9d795a5eccc018bc07723daaac905bc7f444343bc567032b5e8cae907ad38ac9bade5deaa4827a72719f166133934344d76a5f4c6c2b58d3b6574284e68c57129d195e88c4242f00b87a5977f16b2c3fc5c32fd50c4795ea7d127fcc85432307fa5c091a0c9ba0a10dbd2a51bd449a357e83035c1f2e9e9e640c0afc26ca7245a01832c548dc156e748502f1950a922861bbd268edfe7eba9505737dc5224aa95453ee58c1e09422ea0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="f17e524f5108a5e37fba181ae95659b237708d015ecb8e007c148f6505a683d0866ec526d4f9dbd404a74ac796a70023e3", @ANYRES16=r5, @ANYBLOB="19072bbd7000fcdbdf2506000000"], 0x14}}, 0x880) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x5e}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x1c, 0x0, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4088}, 0x840) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "831c85db3a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "e81f724d3b0a36cdff2480831e7a92"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc4) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x40000022) acct(&(0x7f0000000480)='./file0\x00') r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 591.393325ms ago: executing program 7 (id=5009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x34, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x18) 590.616865ms ago: executing program 6 (id=5010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x9, 0x9, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x65, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0xc, 0x8, "9f519ee0234f"}]}, @generic={0x4, 0x5, "99ff90"}, @generic={0x88, 0xf, "7ef092f1a7725a3b260ba85c01"}, @ssrr={0x89, 0x17, 0x88, [@multicast1, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) unshare(0x62040200) 550.125499ms ago: executing program 5 (id=5011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(r3) 521.596232ms ago: executing program 7 (id=5012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 503.440973ms ago: executing program 7 (id=5013): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) 449.655898ms ago: executing program 5 (id=5014): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000008000046ce000000000000000000000594bd14bbaa00c1", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000500000005001b0000000000"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)) r3 = syz_open_pts(r2, 0x101000) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x12, 0x1, 0x10001, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r6, &(0x7f0000000600)=[{&(0x7f0000000040)="e5", 0x1}], 0x1, 0x1, 0xfffffffb, 0x1a) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x8048004}, 0x881) r8 = dup(r7) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r6, r4, 0x19, 0x2010, 0x0, @value=r8, @void, @void, @void, r5}, 0x20) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf2510000000080008000d0000000800090008000000"], 0x24}}, 0x20000001) 430.745669ms ago: executing program 7 (id=5015): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0], 0x4a, 0x2d1, &(0x7f0000000c80)="$eJzs3U9rI2UcB/DfpOlk1ENy8CTCDrgHT4vdm3hJkV0Qe3LJYfWgxd0FaYKwCwX/YNyTVy8ePPgKBMGL72IvvgPBq+DNFRZGZjLTTGraJtpUbD+fS3995vnO8zzp0zQ55OkHL08O7uXx4PHnv0SWJdEZxjCeJjGITjS+jAXDrwMA+D97WhTxezGzTi6JiGxz0wIANmi1v//defnjhUwLANigO3fffXt3b+/WO1lkcXvy1eGofGdffp1d330QH8U47sdr0Y9nEdXrhPqNf1nfLopi2s1Lg7g+mR6OyuTk/Sf1/Xd/i6jyO9GPwVGserVR5d/au7VTxfNeKz8t5/F8Pf6wzN+Mfrx4FF7I35zl83Y+Rmm8+kpr/jeiHz9/GB/HOO5Vk5jnv9jJ8zeLb/747L1yemU+mR6OelW/uWLrIn8uAAAAAAAAAAAAAAAAAAAAAABcbjfy5vCd/Fpcn5RN9fk7W8/Suk/dZTBPlddnVdI0tc4HKk2L+G52pOD2wnjz83268VK3fbAgAAAAAAAAAAAAAAAAAAAAXF2PPvn0YH88vv/wXIrmNIBuRPx5J+Kf3mfYarkWp3fu1WPuj8edulzo8yRtt8RW0yeJOHUa5SLO6WE5q3guOzbnpvj+h3KB69wwa7W8vnyB22et627v3+6NZncd7CfLx+pF05LVm+TbNGLeJ40Vx0pPulREe/udteR06aX+2mtPX6iK6Yl9imTJFm0Vb/w6u163JHHslyitHtWlo2/XRSt+bG+stJ8jm8X//lyRVKd19DbxNAQAAAAAAAAAAAAAAAAAACx8xrv87qfFi49PjXYKHwUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JKY////NYppHV6hcxoPH/3HSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//cutM2w==") r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095", @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000004000000ff0f040007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="346d6da9000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r8) truncate(&(0x7f0000000040)='./file2\x00', 0x5) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) get_mempolicy(0x0, &(0x7f0000000440), 0x401, &(0x7f0000ffc000/0x2000)=nil, 0x2) mount$bind(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x21400b1, 0x0) open(&(0x7f0000000380)='./file2\x00', 0x48800, 0x50) 0s ago: executing program 8 (id=5016): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='host1x_channel_submitted\x00', r1, 0x0, 0x7ffffffe}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) write$UHID_INPUT(r5, &(0x7f0000001e00)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000780)={@ll={0x11, 0x10, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, {&(0x7f0000000700)=""/39, 0x27}, &(0x7f0000000740)}, 0xa0) r7 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r7, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="b5", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 189.027277][ T29] audit: type=1400 audit(1767136499.994:2726): avc: denied { recv } for pid=3028 comm="dbus-daemon" saddr=127.0.0.1 src=20001 daddr=127.0.0.1 dest=20001 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 189.052108][ T29] audit: type=1400 audit(1767136499.994:2727): avc: denied { write } for pid=14088 comm="syz.2.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 189.080411][ T29] audit: type=1400 audit(1767136500.024:2728): avc: denied { read write } for pid=12972 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.104759][ T29] audit: type=1400 audit(1767136500.024:2729): avc: denied { open } for pid=12972 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.128970][ T29] audit: type=1400 audit(1767136500.024:2730): avc: denied { ioctl } for pid=12972 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.156419][ T29] audit: type=1400 audit(1767136500.104:2731): avc: denied { open } for pid=14092 comm="syz.5.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 189.175868][ T29] audit: type=1400 audit(1767136500.104:2732): avc: denied { perfmon } for pid=14092 comm="syz.5.4166" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.196823][ T29] audit: type=1400 audit(1767136500.104:2733): avc: denied { kernel } for pid=14092 comm="syz.5.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 189.218196][T14095] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 189.232957][T14095] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 189.265062][T14099] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 189.478586][T14114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.486034][T14114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.493836][T14114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.501280][T14114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.803890][T14137] loop5: detected capacity change from 0 to 32768 [ 189.811263][ T3899] Bluetooth: hci0: command 0x1003 tx timeout [ 189.817272][T11866] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.871382][ T3310] loop5: p1 p3 < > [ 189.878714][T14137] loop5: p1 p3 < > [ 190.000053][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 190.011366][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 190.037031][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 190.054282][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 190.572780][T14184] lo speed is unknown, defaulting to 1000 [ 190.638092][T14191] FAULT_INJECTION: forcing a failure. [ 190.638092][T14191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.651229][T14191] CPU: 1 UID: 0 PID: 14191 Comm: syz.5.4204 Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.651256][T14191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.651270][T14191] Call Trace: [ 190.651308][T14191] [ 190.651316][T14191] __dump_stack+0x1d/0x30 [ 190.651339][T14191] dump_stack_lvl+0x95/0xd0 [ 190.651358][T14191] dump_stack+0x15/0x1b [ 190.651374][T14191] should_fail_ex+0x265/0x280 [ 190.651431][T14191] should_fail+0xb/0x20 [ 190.651447][T14191] should_fail_usercopy+0x1a/0x20 [ 190.651471][T14191] _copy_from_user+0x1c/0xb0 [ 190.651577][T14191] ___sys_sendmsg+0xc1/0x1d0 [ 190.651620][T14191] __x64_sys_sendmsg+0xd4/0x160 [ 190.651648][T14191] x64_sys_call+0x17ba/0x3000 [ 190.651692][T14191] do_syscall_64+0xca/0x2b0 [ 190.651729][T14191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.651748][T14191] RIP: 0033:0x7f7e07e5f749 [ 190.651759][T14191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.651846][T14191] RSP: 002b:00007f7e068bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.651861][T14191] RAX: ffffffffffffffda RBX: 00007f7e080b5fa0 RCX: 00007f7e07e5f749 [ 190.651871][T14191] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 190.651881][T14191] RBP: 00007f7e068bf090 R08: 0000000000000000 R09: 0000000000000000 [ 190.651891][T14191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.651901][T14191] R13: 00007f7e080b6038 R14: 00007f7e080b5fa0 R15: 00007ffcc950dd68 [ 190.651949][T14191] [ 190.871726][T14198] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 191.342008][T14233] lo speed is unknown, defaulting to 1000 [ 192.427534][T14276] loop5: detected capacity change from 0 to 256 [ 192.648005][T14290] loop2: detected capacity change from 0 to 1024 [ 192.728387][T14290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.852214][T14290] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.863856][T14297] __nla_validate_parse: 22 callbacks suppressed [ 192.863867][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4245'. [ 192.952899][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4244'. [ 193.071551][T11730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 193.082468][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 193.175469][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4251'. [ 193.446531][T14312] loop6: detected capacity change from 0 to 32768 [ 193.551040][ T3310] loop6: p1 p3 < > [ 193.807542][T14334] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4258'. [ 193.836394][T14312] loop6: p1 p3 < > [ 193.842922][T14334] sd 0:0:1:0: device reset [ 193.905949][T14340] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.940057][T14340] loop3: detected capacity change from 0 to 736 [ 193.964423][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 193.964466][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 193.990446][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 194.001148][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 194.018397][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 194.018411][ T29] audit: type=1400 audit(1767136504.984:3133): avc: denied { write } for pid=14345 comm="syz.1.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.057551][ T29] audit: type=1400 audit(1767136505.024:3134): avc: denied { unmount } for pid=9853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 194.079544][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4263'. [ 194.188088][ T29] audit: type=1400 audit(1767136505.154:3135): avc: denied { create } for pid=14348 comm="syz.1.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.209695][ T29] audit: type=1400 audit(1767136505.154:3136): avc: denied { write } for pid=14348 comm="syz.1.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 194.229920][ T29] audit: type=1400 audit(1767136505.154:3137): avc: denied { read } for pid=14348 comm="syz.1.4265" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.252905][ T29] audit: type=1400 audit(1767136505.154:3138): avc: denied { open } for pid=14348 comm="syz.1.4265" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.276238][ T29] audit: type=1400 audit(1767136505.154:3139): avc: denied { create } for pid=14348 comm="syz.1.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 194.296212][ T29] audit: type=1400 audit(1767136505.154:3140): avc: denied { name_bind } for pid=14348 comm="syz.1.4265" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 194.318024][ T29] audit: type=1400 audit(1767136505.154:3141): avc: denied { node_bind } for pid=14348 comm="syz.1.4265" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 194.340783][ T29] audit: type=1400 audit(1767136505.184:3142): avc: denied { connect } for pid=14348 comm="syz.1.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 194.415362][T14355] loop1: detected capacity change from 0 to 2048 [ 194.436857][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.462263][T14355] loop1: p2 < > p4 [ 194.465158][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4268'. [ 194.475693][T14355] loop1: p4 size 262144 extends beyond EOD, truncated [ 194.486369][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.503077][ T3005] loop1: p2 < > p4 [ 194.507543][ T3005] loop1: p4 size 262144 extends beyond EOD, truncated [ 194.526961][T14361] loop5: detected capacity change from 0 to 1024 [ 194.536147][T14361] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 194.555122][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.562643][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 194.581148][T14361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.610201][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 194.633404][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.661202][T14357] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.4268: missing EA_INODE flag [ 194.673874][T14357] EXT4-fs (loop5): Remounting filesystem read-only [ 194.754165][T12972] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.797712][ T53] ip6gretap0 (unregistering): left allmulticast mode [ 194.852048][ T53] erspan0 (unregistering): left allmulticast mode [ 195.034727][T14383] netlink: 188 bytes leftover after parsing attributes in process `gtp'. [ 195.043248][T14383] netlink: 188 bytes leftover after parsing attributes in process `gtp'. [ 195.274879][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.284854][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.294935][ T53] bond0 (unregistering): Released all slaves [ 195.313932][T14369] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 195.347305][T14362] lo speed is unknown, defaulting to 1000 [ 195.536807][T14419] sd 0:0:1:0: device reset [ 195.562638][ T53] hsr_slave_0: left promiscuous mode [ 195.572140][ T53] hsr_slave_1: left promiscuous mode [ 195.577834][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.585266][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.617864][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.625445][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.650517][ T53] veth1_macvtap: left promiscuous mode [ 195.658303][ T53] veth0_macvtap: left promiscuous mode [ 195.670687][ T53] veth1_vlan: left promiscuous mode [ 195.678330][ T53] veth0_vlan: left promiscuous mode [ 195.738690][T14426] sd 0:0:1:0: device reset [ 195.751074][ T53] pimreg (unregistering): left allmulticast mode [ 195.965697][T14362] chnl_net:caif_netlink_parms(): no params data found [ 196.021333][T14362] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.028483][T14362] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.053941][T14362] bridge_slave_0: entered allmulticast mode [ 196.060556][T14362] bridge_slave_0: entered promiscuous mode [ 196.079470][T14362] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.086682][T14362] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.107762][T14362] bridge_slave_1: entered allmulticast mode [ 196.114513][T14362] bridge_slave_1: entered promiscuous mode [ 196.138329][ T53] IPVS: stop unused estimator thread 0... [ 196.161117][T14362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.173580][T14362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.264215][T14362] team0: Port device team_slave_0 added [ 196.276578][T14362] team0: Port device team_slave_1 added [ 196.299189][T14362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.306222][T14362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.332302][T14362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.364582][T14362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.371660][T14362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.397576][T14362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.460170][T14362] hsr_slave_0: entered promiscuous mode [ 196.473633][T14362] hsr_slave_1: entered promiscuous mode [ 196.479609][T14362] debugfs: 'hsr0' already exists in 'hsr' [ 196.485407][T14362] Cannot create hsr debugfs directory [ 196.544571][T14500] netlink: 'syz.2.4296': attribute type 21 has an invalid length. [ 196.563259][T14500] netlink: 'syz.2.4296': attribute type 1 has an invalid length. [ 196.589138][T14501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14501 comm=syz.2.4296 [ 196.616016][T14362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 196.625945][T14362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.647356][T14362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.672052][T14362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.682396][T14515] loop1: detected capacity change from 0 to 164 [ 196.699974][T14515] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.716270][T14515] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.724856][T14515] Symlink component flag not implemented [ 196.730528][T14515] Symlink component flag not implemented [ 196.772489][T14362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.816551][T14362] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.824830][T14515] Symlink component flag not implemented (7) [ 196.830861][T14515] Symlink component flag not implemented (116) [ 196.848458][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.855524][T14286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.866223][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.873296][T14286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.904808][T14362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.915235][T14362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.014003][T14362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.074256][T14552] sd 0:0:1:0: device reset [ 197.347564][T14362] veth0_vlan: entered promiscuous mode [ 197.360591][T14362] veth1_vlan: entered promiscuous mode [ 197.378281][T14581] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 197.416509][T14362] veth0_macvtap: entered promiscuous mode [ 197.428507][T14581] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 197.438765][T14362] veth1_macvtap: entered promiscuous mode [ 197.465642][T14362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.486609][T14362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.513959][T14287] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.533424][T14287] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.556960][T14600] xt_ipcomp: unknown flags 1D [ 197.562200][T14287] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.572158][T14600] SELinux: policydb version 0 does not match my version range 15-35 [ 197.580281][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.590379][T14600] SELinux: failed to load policy [ 197.680475][T14614] xt_hashlimit: size too large, truncated to 1048576 [ 197.687276][T14614] xt_hashlimit: max too large, truncated to 1048576 [ 197.848725][T14608] loop7: detected capacity change from 0 to 32768 [ 197.895278][ T3310] loop7: p1 p3 < > [ 197.913833][T14638] FAULT_INJECTION: forcing a failure. [ 197.913833][T14638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.926938][T14638] CPU: 1 UID: 0 PID: 14638 Comm: syz.5.4332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.926965][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.927038][T14638] Call Trace: [ 197.927044][T14638] [ 197.927052][T14638] __dump_stack+0x1d/0x30 [ 197.927127][T14638] dump_stack_lvl+0x95/0xd0 [ 197.927151][T14638] dump_stack+0x15/0x1b [ 197.927192][T14638] should_fail_ex+0x265/0x280 [ 197.927211][T14638] should_fail+0xb/0x20 [ 197.927228][T14638] should_fail_usercopy+0x1a/0x20 [ 197.927255][T14638] _copy_from_user+0x1c/0xb0 [ 197.927309][T14638] memdup_user+0x5e/0xd0 [ 197.927328][T14638] ucma_set_option+0xcc/0x6e0 [ 197.927471][T14638] ? _parse_integer+0x27/0x40 [ 197.927488][T14638] ? kstrtoull+0x111/0x140 [ 197.927519][T14638] ? kstrtouint+0x76/0xc0 [ 197.927540][T14638] ? kstrtouint_from_user+0x9f/0xf0 [ 197.927561][T14638] ? should_fail_ex+0xdb/0x280 [ 197.927652][T14638] ucma_write+0x1b3/0x250 [ 197.927721][T14638] ? __pfx_ucma_write+0x10/0x10 [ 197.927747][T14638] vfs_write+0x269/0x960 [ 197.927768][T14638] ? __rcu_read_unlock+0x4f/0x70 [ 197.927880][T14638] ? __fget_files+0x184/0x1c0 [ 197.927950][T14638] ksys_write+0xda/0x1a0 [ 197.927974][T14638] __x64_sys_write+0x40/0x50 [ 197.928058][T14638] x64_sys_call+0x2847/0x3000 [ 197.928080][T14638] do_syscall_64+0xca/0x2b0 [ 197.928149][T14638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.928249][T14638] RIP: 0033:0x7f7e07e5f749 [ 197.928263][T14638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.928291][T14638] RSP: 002b:00007f7e068bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.928312][T14638] RAX: ffffffffffffffda RBX: 00007f7e080b5fa0 RCX: 00007f7e07e5f749 [ 197.928323][T14638] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000003 [ 197.928335][T14638] RBP: 00007f7e068bf090 R08: 0000000000000000 R09: 0000000000000000 [ 197.928349][T14638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.928441][T14638] R13: 00007f7e080b6038 R14: 00007f7e080b5fa0 R15: 00007ffcc950dd68 [ 197.928462][T14638] [ 197.947298][T14641] __nla_validate_parse: 18 callbacks suppressed [ 197.947333][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4331'. [ 198.077045][T14608] loop7: p1 p3 < > [ 198.310123][T14658] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 198.331423][T14658] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4339'. [ 198.357154][T14658] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 198.375209][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 198.376287][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 198.468782][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 198.470154][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 198.630521][T14692] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4352'. [ 198.683157][T14698] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 198.695779][T14698] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4354'. [ 198.706389][T14698] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 198.747561][T14706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4357'. [ 198.848616][T14716] FAULT_INJECTION: forcing a failure. [ 198.848616][T14716] name failslab, interval 1, probability 0, space 0, times 0 [ 198.861330][T14716] CPU: 0 UID: 0 PID: 14716 Comm: syz.7.4361 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.861366][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.861379][T14716] Call Trace: [ 198.861407][T14716] [ 198.861414][T14716] __dump_stack+0x1d/0x30 [ 198.861442][T14716] dump_stack_lvl+0x95/0xd0 [ 198.861466][T14716] dump_stack+0x15/0x1b [ 198.861488][T14716] should_fail_ex+0x265/0x280 [ 198.861514][T14716] should_failslab+0x8c/0xb0 [ 198.861554][T14716] __kmalloc_noprof+0xb9/0x5a0 [ 198.861573][T14716] ? sock_kmalloc+0x85/0xc0 [ 198.861650][T14716] ? terminate_walk+0x1e6/0x210 [ 198.861683][T14716] ? iovec_from_user+0x5e/0x210 [ 198.861799][T14716] sock_kmalloc+0x85/0xc0 [ 198.861904][T14716] ____sys_sendmsg+0xf8/0x4a0 [ 198.861933][T14716] ___sys_sendmsg+0x17b/0x1d0 [ 198.862078][T14716] __x64_sys_sendmsg+0xd4/0x160 [ 198.862111][T14716] x64_sys_call+0x17ba/0x3000 [ 198.862134][T14716] do_syscall_64+0xca/0x2b0 [ 198.862170][T14716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.862247][T14716] RIP: 0033:0x7f22367cf749 [ 198.862260][T14716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.862276][T14716] RSP: 002b:00007f2235237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.862292][T14716] RAX: ffffffffffffffda RBX: 00007f2236a25fa0 RCX: 00007f22367cf749 [ 198.862373][T14716] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000006 [ 198.862384][T14716] RBP: 00007f2235237090 R08: 0000000000000000 R09: 0000000000000000 [ 198.862397][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.862410][T14716] R13: 00007f2236a26038 R14: 00007f2236a25fa0 R15: 00007fff94d8f5e8 [ 198.862432][T14716] [ 199.076608][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 199.076624][ T29] audit: type=1400 audit(1767136510.044:3348): avc: denied { read write } for pid=14719 comm="syz.6.4362" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.079401][ T3398] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 199.083048][ T29] audit: type=1400 audit(1767136510.044:3349): avc: denied { open } for pid=14719 comm="syz.6.4362" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.137933][ T3398] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.224275][T14724] fido_id[14724]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.274284][ T29] audit: type=1400 audit(1767136510.244:3350): avc: denied { write } for pid=14728 comm="syz.7.4365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.372853][ T29] audit: type=1400 audit(1767136510.344:3351): avc: denied { getopt } for pid=14737 comm="syz.1.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.448000][T14742] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4364'. [ 199.474387][ T29] audit: type=1400 audit(1767136510.424:3352): avc: denied { create } for pid=14737 comm="syz.1.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.494010][ T29] audit: type=1400 audit(1767136510.424:3353): avc: denied { connect } for pid=14737 comm="syz.1.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.513628][ T29] audit: type=1400 audit(1767136510.424:3354): avc: denied { ioctl } for pid=14737 comm="syz.1.4368" path="socket:[48251]" dev="sockfs" ino=48251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.538474][ T29] audit: type=1400 audit(1767136510.434:3355): avc: denied { write } for pid=14737 comm="syz.1.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.442927][ T29] audit: type=1400 audit(1767136511.034:3356): avc: denied { read write } for pid=14743 comm="syz.2.4370" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.466414][ T29] audit: type=1400 audit(1767136511.034:3357): avc: denied { open } for pid=14743 comm="syz.2.4370" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.616302][T14761] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4376'. [ 200.621768][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4371'. [ 200.663615][T14770] 9p: Bad value for 'wfdno' [ 200.692548][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4379'. [ 200.829588][T14783] tipc: Started in network mode [ 200.834517][T14783] tipc: Node identity 2e18709b94c2, cluster identity 4711 [ 200.841735][T14783] tipc: Enabled bearer , priority 0 [ 200.867242][T14781] tipc: Disabling bearer [ 200.928665][T14794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4381'. [ 201.006508][T14798] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 201.033930][T14798] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 201.888392][T14810] loop7: detected capacity change from 0 to 32768 [ 201.930966][ T3310] loop7: p1 p3 < > [ 201.975029][T14810] loop7: p1 p3 < > [ 202.057184][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 202.077769][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 202.136216][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 202.142919][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 203.185817][T14839] __nla_validate_parse: 3 callbacks suppressed [ 203.185831][T14839] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4395'. [ 203.202290][T14839] sd 0:0:1:0: device reset [ 203.430885][T14854] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 203.554302][T14848] loop1: detected capacity change from 0 to 512 [ 203.631564][T13640] syz_tun (unregistering): left allmulticast mode [ 203.682464][T14816] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 203.736536][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4408'. [ 203.767039][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4407'. [ 203.793880][T14285] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.818755][T14873] loop5: detected capacity change from 0 to 128 [ 203.854571][T14285] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.944700][ T37] kworker/u8:2: attempt to access beyond end of device [ 203.944700][ T37] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 204.004012][T14285] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.094833][T14883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4410'. [ 204.231213][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 204.231236][ T29] audit: type=1400 audit(1767136515.204:3738): avc: denied { create } for pid=14884 comm="syz.5.4412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.375935][ T29] audit: type=1400 audit(1767136515.234:3739): avc: denied { getopt } for pid=14884 comm="syz.5.4412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.395658][ T29] audit: type=1400 audit(1767136515.234:3740): avc: denied { compute_member } for pid=14884 comm="syz.5.4412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 204.472489][T14862] lo speed is unknown, defaulting to 1000 [ 204.504388][T14285] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.516112][ T29] audit: type=1400 audit(1767136515.464:3741): avc: denied { read write } for pid=12972 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.540687][ T29] audit: type=1400 audit(1767136515.464:3742): avc: denied { open } for pid=12972 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.565091][ T29] audit: type=1400 audit(1767136515.464:3743): avc: denied { ioctl } for pid=12972 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.590887][ T29] audit: type=1400 audit(1767136515.474:3744): avc: denied { recv } for pid=3005 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.154 dest=37550 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 204.630401][ T29] audit: type=1400 audit(1767136515.584:3745): avc: denied { prog_load } for pid=14890 comm="syz.7.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.649558][ T29] audit: type=1400 audit(1767136515.584:3746): avc: denied { bpf } for pid=14890 comm="syz.7.4416" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.670207][ T29] audit: type=1400 audit(1767136515.584:3747): avc: denied { perfmon } for pid=14890 comm="syz.7.4416" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.700496][T14895] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 204.769940][T14862] chnl_net:caif_netlink_parms(): no params data found [ 204.783066][T14897] loop7: detected capacity change from 0 to 128 [ 204.800520][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4419'. [ 204.876013][T14904] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 204.883245][T14862] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.893466][T14862] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.925386][T14911] loop1: detected capacity change from 0 to 164 [ 204.942006][T14862] bridge_slave_0: entered allmulticast mode [ 204.949491][T14911] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 204.950383][T14862] bridge_slave_0: entered promiscuous mode [ 204.965426][T14862] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.972656][T14862] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.981532][T14862] bridge_slave_1: entered allmulticast mode [ 204.988355][T14862] bridge_slave_1: entered promiscuous mode [ 204.990328][T14911] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 205.002818][T14911] Symlink component flag not implemented [ 205.008462][T14911] Symlink component flag not implemented [ 205.015103][T14911] Symlink component flag not implemented (7) [ 205.021189][T14911] Symlink component flag not implemented (116) [ 205.035524][T14911] netlink: 8 bytes leftover after parsing attributes in process `'. [ 205.053784][T14285] bridge_slave_1: left allmulticast mode [ 205.059463][T14285] bridge_slave_1: left promiscuous mode [ 205.065182][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.086924][T14285] bridge_slave_0: left allmulticast mode [ 205.092853][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.169879][T14923] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4426'. [ 205.182967][T14285] bridge0 (unregistering): left allmulticast mode [ 205.189841][T14923] sd 0:0:1:0: device reset [ 205.493982][T14285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.504680][T14285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.514910][T14285] bond0 (unregistering): Released all slaves [ 205.523232][T14911] netlink: 8 bytes leftover after parsing attributes in process `'. [ 205.533612][T14862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.545157][T14862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.554389][T14918] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 205.579532][T14862] team0: Port device team_slave_0 added [ 205.590064][T14862] team0: Port device team_slave_1 added [ 205.683411][T14285] hsr_slave_0: left promiscuous mode [ 205.699238][T14285] hsr_slave_1: left promiscuous mode [ 205.760927][T14285] veth1_macvtap: left promiscuous mode [ 205.766769][T14285] veth0_macvtap: left promiscuous mode [ 205.779080][T14285] veth1_vlan: left promiscuous mode [ 205.786162][T14285] veth0_vlan: left promiscuous mode [ 205.894461][T14285] team0 (unregistering): Port device team_slave_1 removed [ 205.905697][T14285] team0 (unregistering): Port device team_slave_0 removed [ 205.913915][ T1606] smc: removing ib device syz! [ 205.971096][T14862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.978114][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.004084][T14862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.065965][T14862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.073055][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.099036][T14862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.125838][T14939] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 206.203351][T14953] FAULT_INJECTION: forcing a failure. [ 206.203351][T14953] name failslab, interval 1, probability 0, space 0, times 0 [ 206.216131][T14953] CPU: 0 UID: 0 PID: 14953 Comm: syz.2.4432 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.216160][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.216173][T14953] Call Trace: [ 206.216180][T14953] [ 206.216195][T14953] __dump_stack+0x1d/0x30 [ 206.216222][T14953] dump_stack_lvl+0x95/0xd0 [ 206.216320][T14953] dump_stack+0x15/0x1b [ 206.216337][T14953] should_fail_ex+0x265/0x280 [ 206.216359][T14953] should_failslab+0x8c/0xb0 [ 206.216384][T14953] kmem_cache_alloc_noprof+0x69/0x4b0 [ 206.216405][T14953] ? audit_log_start+0x342/0x720 [ 206.216464][T14953] audit_log_start+0x342/0x720 [ 206.216487][T14953] ? kstrtouint+0x76/0xc0 [ 206.216509][T14953] audit_seccomp+0x48/0x100 [ 206.216540][T14953] ? __seccomp_filter+0x832/0x1260 [ 206.216588][T14953] __seccomp_filter+0x843/0x1260 [ 206.216617][T14953] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 206.216649][T14953] ? vfs_write+0x7e8/0x960 [ 206.216675][T14953] __secure_computing+0x82/0x150 [ 206.216746][T14953] syscall_trace_enter+0xcf/0x1e0 [ 206.216766][T14953] do_syscall_64+0xa4/0x2b0 [ 206.216797][T14953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.216818][T14953] RIP: 0033:0x7fdfbfd8f749 [ 206.216839][T14953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.216937][T14953] RSP: 002b:00007fdfbe7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.216958][T14953] RAX: ffffffffffffffda RBX: 00007fdfbffe5fa0 RCX: 00007fdfbfd8f749 [ 206.216972][T14953] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 0000000000000000 [ 206.216983][T14953] RBP: 00007fdfbe7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 206.216993][T14953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.217011][T14953] R13: 00007fdfbffe6038 R14: 00007fdfbffe5fa0 R15: 00007ffcd50157f8 [ 206.217026][T14953] [ 206.424371][T14862] hsr_slave_0: entered promiscuous mode [ 206.445760][T14862] hsr_slave_1: entered promiscuous mode [ 206.460985][T14862] debugfs: 'hsr0' already exists in 'hsr' [ 206.466775][T14862] Cannot create hsr debugfs directory [ 206.541197][T14956] lo speed is unknown, defaulting to 1000 [ 206.804002][T14985] loop5: detected capacity change from 0 to 128 [ 206.905983][T14991] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 207.024070][T14285] IPVS: stop unused estimator thread 0... [ 207.104294][T15003] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 207.157530][T14862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 207.196597][T14862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 207.235497][T14862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 207.262353][T14862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 207.311415][T15008] loop7: detected capacity change from 0 to 256 [ 207.410247][T14862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.449629][T14862] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.569862][ T1606] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.577043][ T1606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.597700][ T1606] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.604803][ T1606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.121873][T14862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.285791][T14287] kworker/u8:18: attempt to access beyond end of device [ 208.285791][T14287] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 208.424655][T14862] veth0_vlan: entered promiscuous mode [ 208.472804][T14862] veth1_vlan: entered promiscuous mode [ 208.525067][T14862] veth0_macvtap: entered promiscuous mode [ 208.546872][T14862] veth1_macvtap: entered promiscuous mode [ 208.563450][T15092] loop7: detected capacity change from 0 to 128 [ 208.581169][T14862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.608436][T15092] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 208.617770][T14862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.650656][T15092] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.675836][T14287] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.740461][T14287] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.786452][T14362] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.800796][T14287] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.829345][T14287] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.994548][T14285] Bluetooth: hci0: Frame reassembly failed (-84) [ 209.423356][ T29] kauditd_printk_skb: 748 callbacks suppressed [ 209.423371][ T29] audit: type=1400 audit(1767136520.394:4494): avc: denied { search } for pid=15150 comm="sed" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.452024][ T29] audit: type=1400 audit(1767136520.394:4495): avc: denied { read } for pid=15150 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.473978][ T29] audit: type=1400 audit(1767136520.394:4496): avc: denied { open } for pid=15150 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.523868][T15154] __nla_validate_parse: 6 callbacks suppressed [ 209.523882][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4460'. [ 209.601805][ T29] audit: type=1400 audit(1767136520.394:4497): avc: denied { getattr } for pid=15150 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.627145][ T29] audit: type=1400 audit(1767136520.454:4498): avc: denied { recv } for pid=14978 comm="syz.1.4437" saddr=10.128.0.163 src=30036 daddr=10.128.0.154 dest=37550 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 209.653298][ T29] audit: type=1400 audit(1767136520.474:4499): avc: denied { read write } for pid=11730 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.677867][ T29] audit: type=1400 audit(1767136520.474:4500): avc: denied { open } for pid=11730 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.702068][ T29] audit: type=1400 audit(1767136520.474:4501): avc: denied { ioctl } for pid=11730 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.727760][ T29] audit: type=1400 audit(1767136520.484:4502): avc: denied { map_create } for pid=15153 comm="syz.2.4460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.747011][ T29] audit: type=1400 audit(1767136520.484:4503): avc: denied { map_read map_write } for pid=15153 comm="syz.2.4460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.893331][T15178] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4466'. [ 210.032379][T14980] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 210.065428][T15195] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4470'. [ 210.101442][T15198] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 210.109748][T15198] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 210.158911][T15204] loop5: detected capacity change from 0 to 512 [ 210.172193][T15204] ext4: Bad value for 'init_itable' [ 210.219627][T15199] loop1: detected capacity change from 0 to 256 [ 210.268879][T15213] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4477'. [ 210.419016][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4479'. [ 210.523487][T15246] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4482'. [ 210.792816][T15230] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 210.894758][T15269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4488'. [ 210.973770][T15280] FAULT_INJECTION: forcing a failure. [ 210.973770][T15280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.987075][T15280] CPU: 0 UID: 0 PID: 15280 Comm: syz.1.4491 Not tainted syzkaller #0 PREEMPT(voluntary) [ 210.987095][T15280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.987123][T15280] Call Trace: [ 210.987127][T15280] [ 210.987133][T15280] __dump_stack+0x1d/0x30 [ 210.987152][T15280] dump_stack_lvl+0x95/0xd0 [ 210.987168][T15280] dump_stack+0x15/0x1b [ 210.987216][T15280] should_fail_ex+0x265/0x280 [ 210.987235][T15280] should_fail+0xb/0x20 [ 210.987250][T15280] should_fail_usercopy+0x1a/0x20 [ 210.987304][T15280] _copy_from_user+0x1c/0xb0 [ 210.987337][T15280] do_sys_poll+0x149/0xbd0 [ 210.987365][T15280] ? avc_has_perm+0xf7/0x180 [ 210.987408][T15280] ? set_user_sigmask+0x84/0x190 [ 210.987452][T15280] __se_sys_ppoll+0x1b9/0x200 [ 210.987515][T15280] ? __bpf_trace_sys_enter+0x10/0x30 [ 210.987533][T15280] ? __traceiter_sys_enter+0x5c/0x80 [ 210.987581][T15280] __x64_sys_ppoll+0x67/0x80 [ 210.987607][T15280] x64_sys_call+0x22fe/0x3000 [ 210.987637][T15280] do_syscall_64+0xca/0x2b0 [ 210.987694][T15280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.987759][T15280] RIP: 0033:0x7f3c587af749 [ 210.987862][T15280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.987877][T15280] RSP: 002b:00007f3c57217038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 210.987892][T15280] RAX: ffffffffffffffda RBX: 00007f3c58a05fa0 RCX: 00007f3c587af749 [ 210.987901][T15280] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 210.987911][T15280] RBP: 00007f3c57217090 R08: 0000000000000000 R09: 0000000000000000 [ 210.987985][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.988009][T15280] R13: 00007f3c58a06038 R14: 00007f3c58a05fa0 R15: 00007ffc9bffb738 [ 210.988023][T15280] [ 211.053570][T11866] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 211.062452][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 211.154949][T15283] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 211.218427][T15283] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 211.369505][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4495'. [ 211.559072][T15309] 9p: Bad value for 'rfdno' [ 211.567591][T15309] loop1: detected capacity change from 0 to 512 [ 211.591839][T15309] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.606766][T15309] EXT4-fs (loop1): mount failed [ 211.698969][T15316] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 211.709996][T15316] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 211.769590][ T1606] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.798377][T14285] Bluetooth: hci2: Frame reassembly failed (-84) [ 211.808429][T15330] loop1: detected capacity change from 0 to 764 [ 211.836216][T11883] Symlink component flag not implemented [ 211.970741][ T3899] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 212.162544][T15336] lo speed is unknown, defaulting to 1000 [ 212.216745][T15336] chnl_net:caif_netlink_parms(): no params data found [ 212.253099][T15336] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.260151][T15336] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.267345][T15336] bridge_slave_0: entered allmulticast mode [ 212.273794][T15336] bridge_slave_0: entered promiscuous mode [ 212.280595][T15336] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.287691][T15336] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.294887][T15336] bridge_slave_1: entered allmulticast mode [ 212.302103][T15336] bridge_slave_1: entered promiscuous mode [ 212.325697][T15336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.336132][T15336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.355027][T15336] team0: Port device team_slave_0 added [ 212.361735][T15336] team0: Port device team_slave_1 added [ 212.382964][T15353] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 212.394810][T15336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.401851][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.427865][T15336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.439346][T15336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.446301][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.472229][T15336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.504683][T15336] hsr_slave_0: entered promiscuous mode [ 212.510947][T15336] hsr_slave_1: entered promiscuous mode [ 212.517344][T15336] debugfs: 'hsr0' already exists in 'hsr' [ 212.523123][T15336] Cannot create hsr debugfs directory [ 212.571987][T15362] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 212.602685][T15362] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 212.622529][T15366] loop6: detected capacity change from 0 to 512 [ 212.635963][T15366] ext4: Bad value for 'init_itable' [ 212.651155][T15366] Invalid logical block size (4608) [ 212.682584][T15336] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 212.697950][T15336] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 212.711010][T15336] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 212.719666][T15372] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 212.735449][T15336] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 212.782911][T15375] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 212.793566][T15375] SELinux: failed to load policy [ 212.805849][T15336] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.812986][T15336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.820285][T15336] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.827337][T15336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.857745][T15336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.875174][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.889670][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.897310][T15385] SELinux: policydb magic number 0x34343831 does not match expected magic number 0xf97cff8c [ 212.907762][T15385] SELinux: failed to load policy [ 212.916480][T15336] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.926782][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.933913][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.945040][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.952229][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.972654][T15388] FAULT_INJECTION: forcing a failure. [ 212.972654][T15388] name failslab, interval 1, probability 0, space 0, times 0 [ 212.985318][T15388] CPU: 1 UID: 0 PID: 15388 Comm: syz.2.4525 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.985340][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.985414][T15388] Call Trace: [ 212.985419][T15388] [ 212.985425][T15388] __dump_stack+0x1d/0x30 [ 212.985477][T15388] dump_stack_lvl+0x95/0xd0 [ 212.985501][T15388] dump_stack+0x15/0x1b [ 212.985523][T15388] should_fail_ex+0x265/0x280 [ 212.985549][T15388] should_failslab+0x8c/0xb0 [ 212.985574][T15388] kmem_cache_alloc_noprof+0x69/0x4b0 [ 212.985599][T15388] ? audit_log_start+0x342/0x720 [ 212.985623][T15388] audit_log_start+0x342/0x720 [ 212.985646][T15388] ? kstrtouint+0x76/0xc0 [ 212.985709][T15388] audit_seccomp+0x48/0x100 [ 212.985772][T15388] ? __seccomp_filter+0x832/0x1260 [ 212.985873][T15388] __seccomp_filter+0x843/0x1260 [ 212.985963][T15388] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.985995][T15388] ? vfs_write+0x7e8/0x960 [ 212.986015][T15388] ? __rcu_read_unlock+0x4f/0x70 [ 212.986034][T15388] ? __fget_files+0x184/0x1c0 [ 212.986057][T15388] __secure_computing+0x82/0x150 [ 212.986090][T15388] syscall_trace_enter+0xcf/0x1e0 [ 212.986111][T15388] do_syscall_64+0xa4/0x2b0 [ 212.986140][T15388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.986221][T15388] RIP: 0033:0x7fdfbfd8f749 [ 212.986235][T15388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.986254][T15388] RSP: 002b:00007fdfbe7d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 212.986280][T15388] RAX: ffffffffffffffda RBX: 00007fdfbffe6090 RCX: 00007fdfbfd8f749 [ 212.986291][T15388] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffffffffffffff [ 212.986301][T15388] RBP: 00007fdfbe7d6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.986311][T15388] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 212.986325][T15388] R13: 00007fdfbffe6128 R14: 00007fdfbffe6090 R15: 00007ffcd50157f8 [ 212.986346][T15388] [ 213.221108][T15393] veth0_to_bridge: entered promiscuous mode [ 213.227032][T15393] veth0_to_bridge: entered allmulticast mode [ 213.240174][T15393] veth0_to_bridge: left promiscuous mode [ 213.245919][T15393] veth0_to_bridge: left allmulticast mode [ 213.293567][T15336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.327494][T15405] loop2: detected capacity change from 0 to 1024 [ 213.346437][T15409] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 213.354356][T15405] EXT4-fs: Ignoring removed orlov option [ 213.364380][T15409] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 213.387334][T15405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.413243][T15417] Invalid logical block size (4608) [ 213.480159][T15336] veth0_vlan: entered promiscuous mode [ 213.487887][T15336] veth1_vlan: entered promiscuous mode [ 213.504269][T15336] veth0_macvtap: entered promiscuous mode [ 213.511861][T15336] veth1_macvtap: entered promiscuous mode [ 213.523316][T15336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.536083][T15336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.546979][ T53] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.556112][ T53] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.566610][ T53] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.576060][ T53] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.810687][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 213.811627][T11866] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.816924][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 213.844414][T15436] loop8: detected capacity change from 0 to 32768 [ 213.891580][ T3310] loop8: p1 p3 < > [ 213.899260][T15436] loop8: p1 p3 < > [ 213.969022][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 213.981921][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 214.016471][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 214.031828][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 214.148774][T15446] lo speed is unknown, defaulting to 1000 [ 214.507359][T15457] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 214.593623][T15461] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 214.604340][T15461] SELinux: failed to load policy [ 214.646742][T15470] __nla_validate_parse: 5 callbacks suppressed [ 214.646756][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4552'. [ 214.667850][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 214.667883][ T29] audit: type=1326 audit(1767136525.634:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15459 comm="syz.6.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 214.698613][ T29] audit: type=1326 audit(1767136525.664:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15459 comm="syz.6.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 214.722247][ T29] audit: type=1326 audit(1767136525.664:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15459 comm="syz.6.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 214.745842][ T29] audit: type=1326 audit(1767136525.664:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15459 comm="syz.6.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 214.769464][ T29] audit: type=1326 audit(1767136525.664:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15459 comm="syz.6.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 214.793084][ T29] audit: type=1326 audit(1767136525.664:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15459 comm="syz.6.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 214.866604][ T29] audit: type=1400 audit(1767136525.834:4824): avc: denied { bind } for pid=15472 comm="syz.5.4553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.886265][ T29] audit: type=1400 audit(1767136525.834:4825): avc: denied { name_bind } for pid=15472 comm="syz.5.4553" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 214.908425][ T29] audit: type=1400 audit(1767136525.834:4826): avc: denied { node_bind } for pid=15472 comm="syz.5.4553" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 214.930731][ T29] audit: type=1400 audit(1767136525.834:4827): avc: denied { write } for pid=15472 comm="syz.5.4553" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.170169][T15485] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 215.178644][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4558'. [ 215.189031][T15485] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 215.198280][T15483] loop6: detected capacity change from 0 to 8192 [ 215.231931][T15483] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.374434][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4566'. [ 215.383433][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4566'. [ 215.393292][T15504] ipvlan1: entered promiscuous mode [ 215.398545][T15504] ipvlan1: entered allmulticast mode [ 215.403943][T15504] veth0_vlan: entered allmulticast mode [ 215.414312][T15506] loop7: detected capacity change from 0 to 164 [ 215.425479][T15506] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 215.435720][T15506] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 215.444238][T15506] Symlink component flag not implemented [ 215.449881][T15506] Symlink component flag not implemented [ 215.456442][T15506] Symlink component flag not implemented (7) [ 215.462438][T15506] Symlink component flag not implemented (116) [ 215.469618][T15506] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.483276][T15506] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.496444][T15506] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.506014][T15506] netlink: 8 bytes leftover after parsing attributes in process `'. [ 215.525302][T15510] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 215.533705][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4569'. [ 215.545873][T15510] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 215.624349][T15518] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 215.723696][T15526] FAULT_INJECTION: forcing a failure. [ 215.723696][T15526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.736843][T15526] CPU: 0 UID: 0 PID: 15526 Comm: syz.8.4576 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.736865][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.736875][T15526] Call Trace: [ 215.736880][T15526] [ 215.736906][T15526] __dump_stack+0x1d/0x30 [ 215.736987][T15526] dump_stack_lvl+0x95/0xd0 [ 215.737005][T15526] dump_stack+0x15/0x1b [ 215.737032][T15526] should_fail_ex+0x265/0x280 [ 215.737056][T15526] should_fail+0xb/0x20 [ 215.737140][T15526] should_fail_usercopy+0x1a/0x20 [ 215.737167][T15526] _copy_to_user+0x20/0xa0 [ 215.737265][T15526] simple_read_from_buffer+0xb5/0x130 [ 215.737290][T15526] proc_fail_nth_read+0x10e/0x150 [ 215.737360][T15526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.737383][T15526] vfs_read+0x1a8/0x770 [ 215.737447][T15526] ? __rcu_read_unlock+0x4f/0x70 [ 215.737463][T15526] ? __fget_files+0x184/0x1c0 [ 215.737482][T15526] ? mutex_lock+0x58/0x90 [ 215.737511][T15526] ksys_read+0xda/0x1a0 [ 215.737532][T15526] __x64_sys_read+0x40/0x50 [ 215.737589][T15526] x64_sys_call+0x2889/0x3000 [ 215.737609][T15526] do_syscall_64+0xca/0x2b0 [ 215.737637][T15526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.737655][T15526] RIP: 0033:0x7f69f490e15c [ 215.737745][T15526] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.737765][T15526] RSP: 002b:00007f69f336f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.737785][T15526] RAX: ffffffffffffffda RBX: 00007f69f4b65fa0 RCX: 00007f69f490e15c [ 215.737798][T15526] RDX: 000000000000000f RSI: 00007f69f336f0a0 RDI: 0000000000000004 [ 215.737812][T15526] RBP: 00007f69f336f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.737997][T15526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.738011][T15526] R13: 00007f69f4b66038 R14: 00007f69f4b65fa0 R15: 00007ffc673aece8 [ 215.738035][T15526] [ 216.018132][T15536] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4578'. [ 216.028505][T15536] sd 0:0:1:0: device reset [ 216.326656][T11730] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.363194][T15566] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 216.707087][T15581] lo speed is unknown, defaulting to 1000 [ 216.897383][T15585] lo speed is unknown, defaulting to 1000 [ 217.045759][T15588] loop5: detected capacity change from 0 to 256 [ 217.075636][T15591] loop2: detected capacity change from 0 to 164 [ 217.084572][T15588] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.131671][T15591] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 217.170817][T15591] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 217.213830][T15591] Symlink component flag not implemented [ 217.219488][T15591] Symlink component flag not implemented [ 217.230697][T15591] Symlink component flag not implemented (7) [ 217.236819][T15591] Symlink component flag not implemented (116) [ 218.347614][T15657] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 218.391382][T15661] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 218.399774][T15661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15661 comm=syz.2.4622 [ 218.430307][T15661] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 218.482555][T15659] loop7: detected capacity change from 0 to 256 [ 218.654399][T15684] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 218.704259][T15687] lo speed is unknown, defaulting to 1000 [ 218.747812][T15698] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 218.841600][T15704] loop6: detected capacity change from 0 to 256 [ 219.127446][T15719] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 219.152159][T15719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15719 comm=syz.7.4642 [ 219.173106][T15719] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 219.214356][T15715] loop2: detected capacity change from 0 to 32768 [ 219.272052][ T7536] loop2: p1 p3 < > [ 219.279084][T15736] loop6: detected capacity change from 0 to 164 [ 219.287879][T15715] loop2: p1 p3 < > [ 219.290498][T15736] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 219.309739][T15736] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 219.324673][T15736] Symlink component flag not implemented [ 219.330321][T15736] Symlink component flag not implemented [ 219.339447][T15736] Symlink component flag not implemented (7) [ 219.345495][T15736] Symlink component flag not implemented (116) [ 219.358467][ T7533] udevd[7533]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 219.431798][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 219.489894][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 219.501182][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 219.592789][T15746] lo speed is unknown, defaulting to 1000 [ 219.785260][T15758] __nla_validate_parse: 15 callbacks suppressed [ 219.785279][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4655'. [ 219.808134][T15750] loop2: detected capacity change from 0 to 2048 [ 219.861335][T15760] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 219.973324][T15750] Alternate GPT is invalid, using primary GPT. [ 219.979750][T15750] loop2: p1 p2 p3 [ 219.983506][T15750] loop2: partition table partially beyond EOD, truncated [ 220.024908][ T3005] Alternate GPT is invalid, using primary GPT. [ 220.031212][ T3005] loop2: p1 p2 p3 [ 220.035005][ T3005] loop2: partition table partially beyond EOD, truncated [ 220.060554][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 220.060568][ T29] audit: type=1326 audit(1767136531.024:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.137340][ T29] audit: type=1326 audit(1767136531.064:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.160855][ T29] audit: type=1326 audit(1767136531.064:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.184404][ T29] audit: type=1326 audit(1767136531.064:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.207958][ T29] audit: type=1326 audit(1767136531.064:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.231537][ T29] audit: type=1326 audit(1767136531.064:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.255031][ T29] audit: type=1326 audit(1767136531.064:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.278534][ T29] audit: type=1326 audit(1767136531.064:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.302073][ T29] audit: type=1326 audit(1767136531.064:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.325620][ T29] audit: type=1326 audit(1767136531.064:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15774 comm="syz.6.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f694b40f749 code=0x7ffc0000 [ 220.404163][T15786] loop6: detected capacity change from 0 to 164 [ 220.423229][T15786] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 220.432366][T15789] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 220.465111][T15786] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 220.473547][T15786] Symlink component flag not implemented [ 220.479188][T15786] Symlink component flag not implemented [ 220.504071][T15786] Symlink component flag not implemented (7) [ 220.510068][T15786] Symlink component flag not implemented (116) [ 220.520136][T15791] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 220.532709][T15792] netlink: 8 bytes leftover after parsing attributes in process `'. [ 220.541319][T15791] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4668'. [ 220.558964][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4666'. [ 220.569984][T15791] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 220.577331][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4666'. [ 220.588233][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4666'. [ 220.701599][T15805] FAULT_INJECTION: forcing a failure. [ 220.701599][T15805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.714778][T15805] CPU: 0 UID: 0 PID: 15805 Comm: syz.2.4672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.714873][T15805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.714904][T15805] Call Trace: [ 220.714911][T15805] [ 220.714919][T15805] __dump_stack+0x1d/0x30 [ 220.714947][T15805] dump_stack_lvl+0x95/0xd0 [ 220.715002][T15805] dump_stack+0x15/0x1b [ 220.715055][T15805] should_fail_ex+0x265/0x280 [ 220.715165][T15805] should_fail+0xb/0x20 [ 220.715189][T15805] should_fail_usercopy+0x1a/0x20 [ 220.715217][T15805] _copy_to_user+0x20/0xa0 [ 220.715357][T15805] rfkill_fop_read+0x1bb/0x2c0 [ 220.715386][T15805] ? __pfx_rfkill_fop_read+0x10/0x10 [ 220.715426][T15805] vfs_read+0x1a8/0x770 [ 220.715449][T15805] ? __rcu_read_unlock+0x4f/0x70 [ 220.715475][T15805] ? __fget_files+0x184/0x1c0 [ 220.715542][T15805] ksys_read+0xda/0x1a0 [ 220.715568][T15805] __x64_sys_read+0x40/0x50 [ 220.715659][T15805] x64_sys_call+0x2889/0x3000 [ 220.715692][T15805] do_syscall_64+0xca/0x2b0 [ 220.715754][T15805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.715781][T15805] RIP: 0033:0x7fdfbfd8f749 [ 220.715796][T15805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.715831][T15805] RSP: 002b:00007fdfbe7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.715855][T15805] RAX: ffffffffffffffda RBX: 00007fdfbffe5fa0 RCX: 00007fdfbfd8f749 [ 220.715871][T15805] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000005 [ 220.715887][T15805] RBP: 00007fdfbe7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.715944][T15805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.715958][T15805] R13: 00007fdfbffe6038 R14: 00007fdfbffe5fa0 R15: 00007ffcd50157f8 [ 220.715982][T15805] [ 220.982775][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4678'. [ 221.090550][T15828] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4680'. [ 221.128132][T15828] sd 0:0:1:0: device reset [ 221.273141][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4681'. [ 221.318195][T14284] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.369724][ T3426] Process accounting resumed [ 221.548773][T15842] loop7: detected capacity change from 0 to 32768 [ 221.590956][ T3310] loop7: p1 p3 < > [ 221.602527][T15842] loop7: p1 p3 < > [ 221.665753][ T346] Bluetooth: hci1: Frame reassembly failed (-84) [ 221.712971][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 221.722817][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 221.739265][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 221.749806][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 221.766551][T15846] loop6: detected capacity change from 0 to 256 [ 221.864767][T15850] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4691'. [ 222.106128][ T3633] IPVS: starting estimator thread 0... [ 222.200690][T15872] IPVS: using max 2640 ests per chain, 132000 per kthread [ 222.291994][T15875] loop6: detected capacity change from 0 to 32768 [ 222.331187][T15875] loop6: p1 p3 < > [ 222.425056][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 222.436864][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 223.082674][T15901] sd 0:0:1:0: device reset [ 223.330734][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 223.454895][ T3899] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.731014][ T3899] Bluetooth: hci1: command 0x1003 tx timeout [ 223.737089][T11866] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 223.839557][T15914] netlink: 'syz.2.4713': attribute type 1 has an invalid length. [ 223.855237][T15914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.983893][T15920] bond1: (slave geneve2): making interface the new active one [ 223.993340][T15920] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 224.713276][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.807600][T15957] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 224.816413][T15957] __nla_validate_parse: 7 callbacks suppressed [ 224.816423][T15957] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4729'. [ 224.834102][T15957] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 224.877816][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4731'. [ 225.072098][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 225.072113][ T29] audit: type=1400 audit(1767136536.044:5366): avc: denied { connect } for pid=15966 comm="syz.5.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.098998][ T29] audit: type=1400 audit(1767136536.044:5367): avc: denied { allowed } for pid=15966 comm="syz.5.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 225.118422][ T29] audit: type=1400 audit(1767136536.044:5368): avc: denied { create } for pid=15966 comm="syz.5.4734" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 225.139769][ T29] audit: type=1400 audit(1767136536.044:5369): avc: denied { map } for pid=15966 comm="syz.5.4734" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 225.164035][ T29] audit: type=1400 audit(1767136536.044:5370): avc: denied { read write } for pid=15966 comm="syz.5.4734" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 225.188985][ T29] audit: type=1400 audit(1767136536.044:5371): avc: denied { write } for pid=15966 comm="syz.5.4734" path="socket:[53606]" dev="sockfs" ino=53606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.410673][ T44] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 225.520158][ T29] audit: type=1400 audit(1767136536.484:5372): avc: denied { open } for pid=15980 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 225.539222][ T29] audit: type=1400 audit(1767136536.484:5373): avc: denied { kernel } for pid=15980 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 225.603508][T15981] loop2: detected capacity change from 0 to 256 [ 225.613166][ T29] audit: type=1400 audit(1767136536.584:5374): avc: denied { mounton } for pid=15980 comm="+}[@" path="/282/file0" dev="tmpfs" ino=1496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 225.641568][ T29] audit: type=1400 audit(1767136536.614:5375): avc: denied { mount } for pid=15980 comm="+}[@" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 225.816617][T15983] lo speed is unknown, defaulting to 1000 [ 225.892857][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4741'. [ 225.993060][T15998] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4742'. [ 226.004372][T15998] sd 0:0:1:0: device reset [ 226.084271][T16003] netlink: 'syz.5.4746': attribute type 1 has an invalid length. [ 226.097747][T16003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.145044][T16003] bond1: (slave geneve2): making interface the new active one [ 226.153980][T16003] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 226.325421][T16011] loop5: detected capacity change from 0 to 32768 [ 226.387450][T16011] loop5: p1 p3 < > [ 226.456911][T16017] lo speed is unknown, defaulting to 1000 [ 226.509213][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 226.509277][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 226.698375][T16024] lo speed is unknown, defaulting to 1000 [ 226.770711][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 226.770736][ T3899] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.976353][T16030] loop5: detected capacity change from 0 to 164 [ 226.984142][T16030] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 227.012185][T16030] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 227.020561][T16030] Symlink component flag not implemented [ 227.026254][T16030] Symlink component flag not implemented [ 227.032666][T16030] Symlink component flag not implemented (7) [ 227.038682][T16030] Symlink component flag not implemented (116) [ 227.087825][T16034] loop6: detected capacity change from 0 to 164 [ 227.101569][T16037] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4756'. [ 227.112141][T16034] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 227.123873][T16034] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 227.141323][T16037] sd 0:0:1:0: device reset [ 227.150882][T16034] Symlink component flag not implemented [ 227.156542][T16034] Symlink component flag not implemented [ 227.163757][T16034] Symlink component flag not implemented (7) [ 227.169824][T16034] Symlink component flag not implemented (116) [ 227.177572][T16034] netlink: 8 bytes leftover after parsing attributes in process `'. [ 227.186736][T16034] netlink: 8 bytes leftover after parsing attributes in process `'. [ 227.195193][T16034] netlink: 8 bytes leftover after parsing attributes in process `'. [ 227.203646][T16034] netlink: 8 bytes leftover after parsing attributes in process `'. [ 227.267700][T16044] lo speed is unknown, defaulting to 1000 [ 227.338764][T16053] program syz.6.4762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.385200][T16057] loop2: detected capacity change from 0 to 164 [ 227.405208][T16055] loop7: detected capacity change from 0 to 512 [ 227.452754][T16057] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 227.488774][T16055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.505972][T16057] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 227.514457][T16055] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.528196][T16055] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.4766: corrupted xattr block 6: invalid header [ 227.536745][T16057] Symlink component flag not implemented [ 227.546935][T16057] Symlink component flag not implemented [ 227.552912][T16055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 227.562271][T16055] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.4766: corrupted xattr block 6: invalid header [ 227.576283][T16055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 227.585828][T16055] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.4766: corrupted xattr block 6: invalid header [ 227.599042][T16055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 227.601739][T16057] Symlink component flag not implemented (7) [ 227.608617][T16055] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.4766: corrupted xattr block 6: invalid header [ 227.614015][T16057] Symlink component flag not implemented (116) [ 227.633758][T16055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 227.642870][T16055] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.4766: corrupted xattr block 6: invalid header [ 227.656286][T16055] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 227.665853][T16055] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.4766: corrupted xattr block 6: invalid header [ 227.725934][T14362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.874304][T16080] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 227.919310][T16087] loop5: detected capacity change from 0 to 164 [ 227.933213][T16087] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 227.946460][T16087] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 227.958342][T16087] Symlink component flag not implemented [ 227.964149][T16087] Symlink component flag not implemented [ 227.992356][T16087] Symlink component flag not implemented (7) [ 227.998411][T16087] Symlink component flag not implemented (116) [ 228.024369][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4781'. [ 228.033282][T16089] lo speed is unknown, defaulting to 1000 [ 228.156820][T16096] loop7: detected capacity change from 0 to 8192 [ 228.174908][T16109] Driver unsupported XDP return value 0 on prog (id 1746) dev N/A, expect packet loss! [ 228.220778][ T3310] loop7: p1 p2 p3 p4 [ 228.224938][ T3310] loop7: p1 size 262144 extends beyond EOD, truncated [ 228.242581][ T3310] loop7: p2 start 4293394690 is beyond EOD, truncated [ 228.249563][ T3310] loop7: p3 size 100663552 extends beyond EOD, truncated [ 228.271061][ T3310] loop7: p4 size 50331648 extends beyond EOD, truncated [ 228.290767][T16096] loop7: p1 p2 p3 p4 [ 228.294817][T16096] loop7: p1 size 262144 extends beyond EOD, truncated [ 228.317664][T16096] loop7: p2 start 4293394690 is beyond EOD, truncated [ 228.324588][T16096] loop7: p3 size 100663552 extends beyond EOD, truncated [ 228.345579][T16096] loop7: p4 size 50331648 extends beyond EOD, truncated [ 228.409216][T16105] loop5: detected capacity change from 0 to 32768 [ 228.430511][T16116] FAULT_INJECTION: forcing a failure. [ 228.430511][T16116] name failslab, interval 1, probability 0, space 0, times 0 [ 228.443220][T16116] CPU: 1 UID: 0 PID: 16116 Comm: syz.7.4789 Not tainted syzkaller #0 PREEMPT(voluntary) [ 228.443309][T16116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.443319][T16116] Call Trace: [ 228.443350][T16116] [ 228.443358][T16116] __dump_stack+0x1d/0x30 [ 228.443401][T16116] dump_stack_lvl+0x95/0xd0 [ 228.443449][T16116] dump_stack+0x15/0x1b [ 228.443466][T16116] should_fail_ex+0x265/0x280 [ 228.443488][T16116] should_failslab+0x8c/0xb0 [ 228.443527][T16116] __kmalloc_noprof+0xb9/0x5a0 [ 228.443548][T16116] ? unix_bind+0x1c4/0x940 [ 228.443624][T16116] unix_bind+0x1c4/0x940 [ 228.443740][T16116] __sys_bind+0x1d1/0x2a0 [ 228.443772][T16116] __x64_sys_bind+0x3f/0x50 [ 228.443802][T16116] x64_sys_call+0x2ceb/0x3000 [ 228.443824][T16116] do_syscall_64+0xca/0x2b0 [ 228.443856][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.443892][T16116] RIP: 0033:0x7f22367cf749 [ 228.443909][T16116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.443926][T16116] RSP: 002b:00007f2235237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 228.444008][T16116] RAX: ffffffffffffffda RBX: 00007f2236a25fa0 RCX: 00007f22367cf749 [ 228.444019][T16116] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000005 [ 228.444030][T16116] RBP: 00007f2235237090 R08: 0000000000000000 R09: 0000000000000000 [ 228.444083][T16116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.444096][T16116] R13: 00007f2236a26038 R14: 00007f2236a25fa0 R15: 00007fff94d8f5e8 [ 228.444119][T16116] [ 228.449883][ T7533] udevd[7533]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 228.454592][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 228.462618][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 228.717244][T16120] loop6: detected capacity change from 0 to 128 [ 228.748382][T16120] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff84a5) [ 228.756275][T16120] FAT-fs (loop6): Filesystem has been set read-only [ 228.798570][T16120] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff84a5) [ 228.863135][T16105] loop5: p1 p3 < > [ 228.883874][ T7533] udevd[7533]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 228.884210][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 228.895566][T16125] syz.6.4790: attempt to access beyond end of device [ 228.895566][T16125] loop6: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 228.905778][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 228.988665][T16125] syz.6.4790: attempt to access beyond end of device [ 228.988665][T16125] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 229.045708][T16125] syz.6.4790: attempt to access beyond end of device [ 229.045708][T16125] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 229.119235][T16125] syz.6.4790: attempt to access beyond end of device [ 229.119235][T16125] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 229.166241][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 229.185902][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 229.231182][T16125] syz.6.4790: attempt to access beyond end of device [ 229.231182][T16125] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 229.305215][T16125] syz.6.4790: attempt to access beyond end of device [ 229.305215][T16125] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 229.320678][T16125] syz.6.4790: attempt to access beyond end of device [ 229.320678][T16125] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 229.360803][T16125] syz.6.4790: attempt to access beyond end of device [ 229.360803][T16125] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 229.394965][T16125] syz.6.4790: attempt to access beyond end of device [ 229.394965][T16125] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 229.441318][T16125] syz.6.4790: attempt to access beyond end of device [ 229.441318][T16125] loop6: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 229.476499][T16152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.492204][T16152] netlink: 'syz.8.4804': attribute type 10 has an invalid length. [ 229.500175][T16152] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.507349][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.526047][T16152] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.533132][T16152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.540501][T16152] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.547647][T16152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.562391][T16152] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 229.582314][T16161] netlink: 'syz.6.4805': attribute type 1 has an invalid length. [ 229.624656][T16161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.672687][T16152] infiniband syz1: set active [ 229.672789][T16166] syz_tun: entered allmulticast mode [ 229.677488][T16152] infiniband syz1: added syz_tun [ 229.688809][T16166] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 229.697350][T16166] mroute: pending queue full, dropping entries [ 229.711834][T16166] syz_tun (unregistering): left allmulticast mode [ 229.723156][T16152] RDS/IB: syz1: added [ 229.730728][T16152] smc: adding ib device syz1 with port count 1 [ 229.736962][T16152] smc: ib device syz1 port 1 has no pnetid [ 229.738641][T16161] bond1: (slave geneve2): making interface the new active one [ 229.752971][T16161] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 230.148010][ T29] kauditd_printk_skb: 1072 callbacks suppressed [ 230.148027][ T29] audit: type=1400 audit(1767136541.114:6448): avc: denied { recv } for pid=16129 comm="syz.5.4794" saddr=10.128.0.163 src=30036 daddr=10.128.0.154 dest=37550 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 230.200353][ T29] audit: type=1400 audit(1767136541.114:6449): avc: denied { read write } for pid=14862 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.224702][ T29] audit: type=1400 audit(1767136541.114:6450): avc: denied { open } for pid=14862 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.249074][ T29] audit: type=1400 audit(1767136541.114:6451): avc: denied { ioctl } for pid=14862 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.320057][T16195] Process accounting resumed [ 230.334693][T16202] netlink: 'syz.2.4822': attribute type 1 has an invalid length. [ 230.369280][T16202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.396091][ T29] audit: type=1400 audit(1767136541.184:6452): avc: denied { create } for pid=16195 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 230.415833][ T29] audit: type=1400 audit(1767136541.224:6453): avc: denied { connect } for pid=16195 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 230.435695][ T29] audit: type=1400 audit(1767136541.224:6454): avc: denied { map_create } for pid=16195 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.454933][ T29] audit: type=1400 audit(1767136541.224:6455): avc: denied { prog_load } for pid=16195 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.474059][ T29] audit: type=1400 audit(1767136541.224:6456): avc: denied { bpf } for pid=16195 comm="syz.6.4819" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.494660][ T29] audit: type=1400 audit(1767136541.224:6457): avc: denied { perfmon } for pid=16195 comm="syz.6.4819" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.539635][T16200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 230.582116][T16200] netlink: 'syz.7.4821': attribute type 3 has an invalid length. [ 230.642102][T14362] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 230.698496][T16224] __nla_validate_parse: 6 callbacks suppressed [ 230.698506][T16224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4831'. [ 230.798480][T16239] netlink: 'syz.2.4837': attribute type 1 has an invalid length. [ 230.813900][T16239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.862291][T16231] set_capacity_and_notify: 1 callbacks suppressed [ 230.862304][T16231] loop6: detected capacity change from 0 to 4096 [ 230.865794][T16233] loop5: detected capacity change from 0 to 1024 [ 230.870326][T16229] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 230.909219][T16231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.922180][T16229] SELinux: failed to load policy [ 230.983800][T16246] netlink: 'syz.2.4838': attribute type 1 has an invalid length. [ 231.005602][T16246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.040475][T14862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.153594][T16264] loop7: detected capacity change from 0 to 164 [ 231.169205][T16253] Process accounting resumed [ 231.194303][T16264] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 231.204824][T16268] loop6: detected capacity change from 0 to 164 [ 231.213771][T16264] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 231.241786][T16268] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 231.242697][T16264] Symlink component flag not implemented [ 231.255712][T16264] Symlink component flag not implemented [ 231.288705][T16268] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 231.326256][T16268] Symlink component flag not implemented [ 231.331986][T16268] Symlink component flag not implemented [ 231.346257][T16268] Symlink component flag not implemented (7) [ 231.352296][T16268] Symlink component flag not implemented (116) [ 231.380907][T16264] Symlink component flag not implemented (7) [ 231.386928][T16264] Symlink component flag not implemented (116) [ 231.519338][T16284] lo speed is unknown, defaulting to 1000 [ 231.712378][T16286] bond2 (unregistering): Released all slaves [ 232.021707][T16300] lo speed is unknown, defaulting to 1000 [ 232.338417][T16302] FAULT_INJECTION: forcing a failure. [ 232.338417][T16302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.351610][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.5.4861 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.351713][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.351723][T16302] Call Trace: [ 232.351728][T16302] [ 232.351734][T16302] __dump_stack+0x1d/0x30 [ 232.351752][T16302] dump_stack_lvl+0x95/0xd0 [ 232.351768][T16302] dump_stack+0x15/0x1b [ 232.351785][T16302] should_fail_ex+0x265/0x280 [ 232.351844][T16302] should_fail+0xb/0x20 [ 232.351858][T16302] should_fail_usercopy+0x1a/0x20 [ 232.351945][T16302] _copy_from_user+0x1c/0xb0 [ 232.351966][T16302] ___sys_sendmsg+0xc1/0x1d0 [ 232.351998][T16302] __x64_sys_sendmsg+0xd4/0x160 [ 232.352097][T16302] x64_sys_call+0x17ba/0x3000 [ 232.352148][T16302] do_syscall_64+0xca/0x2b0 [ 232.352173][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.352189][T16302] RIP: 0033:0x7f7e07e5f749 [ 232.352200][T16302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.352213][T16302] RSP: 002b:00007f7e068bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.352234][T16302] RAX: ffffffffffffffda RBX: 00007f7e080b5fa0 RCX: 00007f7e07e5f749 [ 232.352244][T16302] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 232.352253][T16302] RBP: 00007f7e068bf090 R08: 0000000000000000 R09: 0000000000000000 [ 232.352291][T16302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.352300][T16302] R13: 00007f7e080b6038 R14: 00007f7e080b5fa0 R15: 00007ffcc950dd68 [ 232.352314][T16302] [ 232.522442][T16307] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 232.544993][T16307] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 232.567791][T16307] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 232.580389][T16305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4859'. [ 232.603650][T16308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.611181][T16308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.619755][T16308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.627188][T16308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.711551][T16312] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length. [ 232.752692][T16312] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.759988][T16312] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.869209][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4873'. [ 232.876990][T16312] veth1_vlan: left allmulticast mode [ 232.878364][T16335] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4873'. [ 232.920208][T16312] macvlan0: left promiscuous mode [ 232.925305][T16312] macvlan0: left allmulticast mode [ 232.958335][T16312] syz_tun: left allmulticast mode [ 232.964963][T16312] macvtap1: left promiscuous mode [ 232.970032][T16312] macvtap1: left allmulticast mode [ 232.995049][ T37] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.022751][ T37] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.049288][ T37] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.061272][T16326] lo speed is unknown, defaulting to 1000 [ 233.077021][ T37] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.224260][T16360] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4883'. [ 233.403393][T16357] loop5: detected capacity change from 0 to 32768 [ 233.470994][T16357] loop5: p1 p3 < > [ 233.564254][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 233.569803][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 233.582014][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4888'. [ 233.592687][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4888'. [ 233.619600][T16371] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 233.628618][T16371] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 233.661279][T16367] geneve2: entered promiscuous mode [ 233.666566][T16367] geneve2: entered allmulticast mode [ 233.675345][T16371] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 233.828998][T16388] loop6: detected capacity change from 0 to 1024 [ 233.843251][T16384] loop5: detected capacity change from 0 to 128 [ 233.850291][T16384] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 233.850586][T16388] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.869905][T16384] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.897238][T16384] ext2 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.908941][T16384] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.920496][T16366] loop7: detected capacity change from 0 to 32768 [ 233.936026][T16388] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.952626][ T7536] loop7: p1 p3 < > [ 233.958136][T16388] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.4894: bad orphan inode 11 [ 233.969417][T16366] loop7: p1 p3 < > [ 233.976240][T16388] ext4_test_bit(bit=10, block=4) = 1 [ 233.981751][T16388] is_bad_inode(inode)=0 [ 233.985913][T16388] NEXT_ORPHAN(inode)=3254779904 [ 233.990839][T16388] max_ino=32 [ 233.994035][T16388] i_nlink=0 [ 233.998448][T16388] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.4894: lblock 2 mapped to illegal pblock 2 (length 1) [ 234.016535][T16388] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.4894: lblock 0 mapped to illegal pblock 48 (length 1) [ 234.032106][T16388] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.4894: Failed to acquire dquot type 0 [ 234.043497][T16388] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 234.053080][T16388] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.4894: mark_inode_dirty error [ 234.064580][T16388] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 234.075807][T16388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.107255][T16388] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4894'. [ 234.127879][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 234.139031][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 234.154886][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 234.167354][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 234.217623][T14862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.231652][T14862] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 234.246680][T14862] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 234.256523][T14862] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 234.290019][T16414] FAULT_INJECTION: forcing a failure. [ 234.290019][T16414] name failslab, interval 1, probability 0, space 0, times 0 [ 234.302647][T16414] CPU: 1 UID: 0 PID: 16414 Comm: syz.7.4907 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.302679][T16414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.302741][T16414] Call Trace: [ 234.302747][T16414] [ 234.302762][T16414] __dump_stack+0x1d/0x30 [ 234.302788][T16414] dump_stack_lvl+0x95/0xd0 [ 234.302813][T16414] dump_stack+0x15/0x1b [ 234.302831][T16414] should_fail_ex+0x265/0x280 [ 234.302851][T16414] should_failslab+0x8c/0xb0 [ 234.302901][T16414] kmem_cache_alloc_noprof+0x69/0x4b0 [ 234.302920][T16414] ? getname_flags+0x80/0x3b0 [ 234.302977][T16414] getname_flags+0x80/0x3b0 [ 234.303000][T16414] start_creating_user_path+0x27/0x130 [ 234.303123][T16414] bpf_obj_pin_user+0xe0/0x260 [ 234.303158][T16414] bpf_obj_pin+0xac/0xd0 [ 234.303195][T16414] __sys_bpf+0x6d6/0x7c0 [ 234.303217][T16414] __x64_sys_bpf+0x41/0x50 [ 234.303250][T16414] x64_sys_call+0x28e1/0x3000 [ 234.303303][T16414] do_syscall_64+0xca/0x2b0 [ 234.303332][T16414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.303350][T16414] RIP: 0033:0x7f22367cf749 [ 234.303416][T16414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.303496][T16414] RSP: 002b:00007f2235237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.303516][T16414] RAX: ffffffffffffffda RBX: 00007f2236a25fa0 RCX: 00007f22367cf749 [ 234.303531][T16414] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000006 [ 234.303541][T16414] RBP: 00007f2235237090 R08: 0000000000000000 R09: 0000000000000000 [ 234.303551][T16414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.303570][T16414] R13: 00007f2236a26038 R14: 00007f2236a25fa0 R15: 00007fff94d8f5e8 [ 234.303590][T16414] [ 234.366065][T16415] lo speed is unknown, defaulting to 1000 [ 234.516300][T16422] lo speed is unknown, defaulting to 1000 [ 234.527590][T16421] FAULT_INJECTION: forcing a failure. [ 234.527590][T16421] name failslab, interval 1, probability 0, space 0, times 0 [ 234.540319][T16421] CPU: 0 UID: 0 PID: 16421 Comm: syz.5.4909 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.540410][T16421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.540424][T16421] Call Trace: [ 234.540431][T16421] [ 234.540439][T16421] __dump_stack+0x1d/0x30 [ 234.540465][T16421] dump_stack_lvl+0x95/0xd0 [ 234.540494][T16421] dump_stack+0x15/0x1b [ 234.540513][T16421] should_fail_ex+0x265/0x280 [ 234.540533][T16421] should_failslab+0x8c/0xb0 [ 234.540554][T16421] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 234.540583][T16421] ? sidtab_sid2str_get+0xa0/0x130 [ 234.540668][T16421] kmemdup_noprof+0x2b/0x70 [ 234.540686][T16421] sidtab_sid2str_get+0xa0/0x130 [ 234.540774][T16421] security_sid_to_context_core+0x1eb/0x2e0 [ 234.540878][T16421] security_sid_to_context+0x27/0x40 [ 234.540906][T16421] selinux_lsmprop_to_secctx+0x67/0xf0 [ 234.540936][T16421] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 234.540984][T16421] audit_log_subj_ctx+0xa4/0x3e0 [ 234.541008][T16421] ? skb_put+0xa9/0xf0 [ 234.541035][T16421] audit_log_task_context+0x48/0x70 [ 234.541130][T16421] audit_log_task+0xf4/0x250 [ 234.541164][T16421] ? kstrtouint+0x76/0xc0 [ 234.541186][T16421] audit_seccomp+0x61/0x100 [ 234.541220][T16421] ? __seccomp_filter+0x832/0x1260 [ 234.541306][T16421] __seccomp_filter+0x843/0x1260 [ 234.541336][T16421] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 234.541369][T16421] ? vfs_write+0x7e8/0x960 [ 234.541427][T16421] __secure_computing+0x82/0x150 [ 234.541458][T16421] syscall_trace_enter+0xcf/0x1e0 [ 234.541490][T16421] do_syscall_64+0xa4/0x2b0 [ 234.541519][T16421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.541556][T16421] RIP: 0033:0x7f7e07e5f749 [ 234.541572][T16421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.541593][T16421] RSP: 002b:00007f7e068bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.541613][T16421] RAX: ffffffffffffffda RBX: 00007f7e080b5fa0 RCX: 00007f7e07e5f749 [ 234.541707][T16421] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000004 [ 234.541720][T16421] RBP: 00007f7e068bf090 R08: 0000000000000000 R09: 0000000000000000 [ 234.541734][T16421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.541762][T16421] R13: 00007f7e080b6038 R14: 00007f7e080b5fa0 R15: 00007ffcc950dd68 [ 234.541777][T16421] [ 234.817615][T16425] FAULT_INJECTION: forcing a failure. [ 234.817615][T16425] name failslab, interval 1, probability 0, space 0, times 0 [ 234.830255][T16425] CPU: 0 UID: 0 PID: 16425 Comm: syz.7.4908 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.830325][T16425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.830338][T16425] Call Trace: [ 234.830345][T16425] [ 234.830353][T16425] __dump_stack+0x1d/0x30 [ 234.830380][T16425] dump_stack_lvl+0x95/0xd0 [ 234.830404][T16425] dump_stack+0x15/0x1b [ 234.830484][T16425] should_fail_ex+0x265/0x280 [ 234.830507][T16425] should_failslab+0x8c/0xb0 [ 234.830525][T16425] kmem_cache_alloc_noprof+0x69/0x4b0 [ 234.830579][T16425] ? skb_clone+0x151/0x1f0 [ 234.830615][T16425] skb_clone+0x151/0x1f0 [ 234.830644][T16425] __netlink_deliver_tap+0x2c9/0x500 [ 234.830674][T16425] netlink_unicast+0x66b/0x690 [ 234.830742][T16425] netlink_sendmsg+0x58b/0x6b0 [ 234.830779][T16425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.830816][T16425] __sock_sendmsg+0x145/0x180 [ 234.830903][T16425] ____sys_sendmsg+0x31e/0x4a0 [ 234.830933][T16425] ___sys_sendmsg+0x17b/0x1d0 [ 234.830979][T16425] __x64_sys_sendmsg+0xd4/0x160 [ 234.831062][T16425] x64_sys_call+0x17ba/0x3000 [ 234.831084][T16425] do_syscall_64+0xca/0x2b0 [ 234.831114][T16425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.831200][T16425] RIP: 0033:0x7f22367cf749 [ 234.831261][T16425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.831278][T16425] RSP: 002b:00007f2235216038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.831294][T16425] RAX: ffffffffffffffda RBX: 00007f2236a26090 RCX: 00007f22367cf749 [ 234.831304][T16425] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 000000000000000b [ 234.831314][T16425] RBP: 00007f2235216090 R08: 0000000000000000 R09: 0000000000000000 [ 234.831324][T16425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.831336][T16425] R13: 00007f2236a26128 R14: 00007f2236a26090 R15: 00007fff94d8f5e8 [ 234.831383][T16425] [ 235.185498][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 235.185510][ T29] audit: type=1400 audit(1767136546.154:7225): avc: denied { create } for pid=16442 comm="syz.6.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.280221][ T29] audit: type=1400 audit(1767136546.184:7226): avc: denied { write } for pid=16442 comm="syz.6.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.299785][ T29] audit: type=1400 audit(1767136546.224:7227): avc: denied { execute } for pid=16459 comm="syz.8.4926" name="file2" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.322049][ T29] audit: type=1400 audit(1767136546.224:7228): avc: denied { execute_no_trans } for pid=16459 comm="syz.8.4926" path="/85/file2" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.345541][ T29] audit: type=1400 audit(1767136546.224:7229): avc: denied { bind } for pid=16459 comm="syz.8.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.366090][ T29] audit: type=1400 audit(1767136546.224:7230): avc: denied { setopt } for pid=16459 comm="syz.8.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.386758][ T29] audit: type=1400 audit(1767136546.234:7231): avc: denied { allowed } for pid=16466 comm="syz.7.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 235.406370][ T29] audit: type=1400 audit(1767136546.234:7232): avc: denied { create } for pid=16466 comm="syz.7.4929" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 235.427816][ T29] audit: type=1400 audit(1767136546.234:7233): avc: denied { create } for pid=16462 comm="syz.2.4927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 235.459413][ T29] audit: type=1400 audit(1767136546.424:7234): avc: denied { setopt } for pid=16476 comm="syz.8.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 235.496962][T16480] loop2: detected capacity change from 0 to 128 [ 235.541699][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4934'. [ 235.582673][T16485] vlan2: entered allmulticast mode [ 235.589182][T16485] dummy0: entered allmulticast mode [ 235.630866][ T12] bio_check_eod: 2 callbacks suppressed [ 235.630875][ T12] kworker/u8:0: attempt to access beyond end of device [ 235.630875][ T12] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 235.648747][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4938'. [ 235.667652][T16492] syz_tun: entered promiscuous mode [ 235.680857][T16492] macvtap1: entered promiscuous mode [ 235.686212][T16492] macvtap1: entered allmulticast mode [ 235.691626][T16492] syz_tun: entered allmulticast mode [ 235.823485][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4943'. [ 235.865780][T16513] Process accounting resumed [ 235.907844][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4952'. [ 235.933885][T16523] macvtap2: entered promiscuous mode [ 235.939268][T16523] macvtap2: entered allmulticast mode [ 235.952413][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4952'. [ 235.961397][T16523] macvtap2: left promiscuous mode [ 235.966538][T16523] macvtap2: left allmulticast mode [ 236.042823][T16533] lo speed is unknown, defaulting to 1000 [ 236.159843][T16542] Process accounting resumed [ 236.276007][T16535] loop8: detected capacity change from 0 to 32768 [ 236.300908][ T3310] loop8: p1 p3 < > [ 236.308870][T16535] loop8: p1 p3 < > [ 236.405991][T16555] lo speed is unknown, defaulting to 1000 [ 236.841189][ T3502] IPVS: starting estimator thread 0... [ 236.944762][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 236.944866][T16570] IPVS: using max 2640 ests per chain, 132000 per kthread [ 236.968179][ T7536] udevd[7536]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 237.088319][T16587] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 237.099610][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4977'. [ 237.108620][T16589] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4977'. [ 237.119535][T16587] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 237.141775][T16587] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 237.202997][T16600] FAULT_INJECTION: forcing a failure. [ 237.202997][T16600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.216177][T16600] CPU: 0 UID: 0 PID: 16600 Comm: syz.7.4981 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.216292][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.216359][T16600] Call Trace: [ 237.216366][T16600] [ 237.216374][T16600] __dump_stack+0x1d/0x30 [ 237.216413][T16600] dump_stack_lvl+0x95/0xd0 [ 237.216432][T16600] dump_stack+0x15/0x1b [ 237.216450][T16600] should_fail_ex+0x265/0x280 [ 237.216476][T16600] should_fail+0xb/0x20 [ 237.216497][T16600] should_fail_usercopy+0x1a/0x20 [ 237.216545][T16600] _copy_to_iter+0x251/0xe70 [ 237.216568][T16600] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 237.216594][T16600] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 237.216622][T16600] __skb_datagram_iter+0xc6/0x690 [ 237.216660][T16600] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 237.216685][T16600] skb_copy_datagram_iter+0x3d/0x110 [ 237.216710][T16600] netlink_recvmsg+0x1a8/0x550 [ 237.216792][T16600] ? __pfx_netlink_recvmsg+0x10/0x10 [ 237.216821][T16600] sock_recvmsg+0x139/0x170 [ 237.216843][T16600] ____sys_recvmsg+0xf5/0x280 [ 237.216884][T16600] ___sys_recvmsg+0x11f/0x370 [ 237.216967][T16600] do_recvmmsg+0x1ef/0x540 [ 237.216998][T16600] ? get_timespec64+0xc9/0x100 [ 237.217067][T16600] __x64_sys_recvmmsg+0xfb/0x170 [ 237.217103][T16600] x64_sys_call+0x2b75/0x3000 [ 237.217125][T16600] do_syscall_64+0xca/0x2b0 [ 237.217159][T16600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.217176][T16600] RIP: 0033:0x7f22367cf749 [ 237.217192][T16600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.217224][T16600] RSP: 002b:00007f2235237038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 237.217245][T16600] RAX: ffffffffffffffda RBX: 00007f2236a25fa0 RCX: 00007f22367cf749 [ 237.217257][T16600] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 237.217274][T16600] RBP: 00007f2235237090 R08: 0000200000003700 R09: 0000000000000000 [ 237.217284][T16600] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 237.217294][T16600] R13: 00007f2236a26038 R14: 00007f2236a25fa0 R15: 00007fff94d8f5e8 [ 237.217310][T16600] [ 237.480261][ T934] Bluetooth: hci0: Frame reassembly failed (-84) [ 237.493642][T16615] netlink: 'syz.7.4986': attribute type 1 has an invalid length. [ 237.506412][T16615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.594383][T16615] bond1: (slave geneve2): making interface the new active one [ 237.603461][T16615] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 237.620564][T16619] loop5: detected capacity change from 0 to 2048 [ 237.656155][T16619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 237.763367][T16628] netlink: 'syz.8.4988': attribute type 1 has an invalid length. [ 237.779811][T16602] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 237.783652][T16628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.794856][T16602] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1392 with error 28 [ 237.813919][T16602] EXT4-fs (loop5): This should not happen!! Data will be lost [ 237.813919][T16602] [ 237.823720][T16602] EXT4-fs (loop5): Total free blocks count 0 [ 237.829732][T16602] EXT4-fs (loop5): Free/Dirty block details [ 237.835758][T16602] EXT4-fs (loop5): free_blocks=2415919104 [ 237.841540][T16602] EXT4-fs (loop5): dirty_blocks=1392 [ 237.846876][T16602] EXT4-fs (loop5): Block reservation details [ 237.852878][T16602] EXT4-fs (loop5): i_reserved_data_blocks=87 [ 237.883430][T16631] lo speed is unknown, defaulting to 1000 [ 238.053407][T16633] bond2: (slave geneve3): making interface the new active one [ 238.089511][T16633] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 238.354090][ T309] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 406 with error 28 [ 238.369441][T16641] Cannot find del_set index 0 as target [ 238.408195][T16644] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 238.430157][T16644] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 238.447511][T16644] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 238.471995][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4996'. [ 238.480929][T16651] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4996'. [ 238.490349][T16647] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4995'. [ 238.499370][T16647] netlink: 348 bytes leftover after parsing attributes in process `syz.8.4995'. [ 238.508452][T16647] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4995'. [ 238.536985][T16654] FAULT_INJECTION: forcing a failure. [ 238.536985][T16654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.550091][T16654] CPU: 0 UID: 0 PID: 16654 Comm: syz.5.4997 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.550115][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.550131][T16654] Call Trace: [ 238.550138][T16654] [ 238.550147][T16654] __dump_stack+0x1d/0x30 [ 238.550239][T16654] dump_stack_lvl+0x95/0xd0 [ 238.550260][T16654] dump_stack+0x15/0x1b [ 238.550282][T16654] should_fail_ex+0x265/0x280 [ 238.550352][T16654] should_fail+0xb/0x20 [ 238.550373][T16654] should_fail_usercopy+0x1a/0x20 [ 238.550396][T16654] _copy_to_user+0x20/0xa0 [ 238.550499][T16654] simple_read_from_buffer+0xb5/0x130 [ 238.550523][T16654] proc_fail_nth_read+0x10e/0x150 [ 238.550555][T16654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.550635][T16654] vfs_read+0x1a8/0x770 [ 238.550665][T16654] ? __rcu_read_unlock+0x4f/0x70 [ 238.550710][T16654] ? __fget_files+0x184/0x1c0 [ 238.550737][T16654] ? mutex_lock+0x58/0x90 [ 238.550767][T16654] ksys_read+0xda/0x1a0 [ 238.550784][T16654] __x64_sys_read+0x40/0x50 [ 238.550800][T16654] x64_sys_call+0x2889/0x3000 [ 238.550846][T16654] do_syscall_64+0xca/0x2b0 [ 238.550952][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.550977][T16654] RIP: 0033:0x7f7e07e5e15c [ 238.550994][T16654] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.551056][T16654] RSP: 002b:00007f7e0689e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.551076][T16654] RAX: ffffffffffffffda RBX: 00007f7e080b6090 RCX: 00007f7e07e5e15c [ 238.551089][T16654] RDX: 000000000000000f RSI: 00007f7e0689e0a0 RDI: 0000000000000005 [ 238.551102][T16654] RBP: 00007f7e0689e090 R08: 0000000000000000 R09: 0000000000000000 [ 238.551116][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.551129][T16654] R13: 00007f7e080b6128 R14: 00007f7e080b6090 R15: 00007ffcc950dd68 [ 238.551145][T16654] [ 239.079719][T16681] Process accounting resumed [ 239.172884][T16694] loop7: detected capacity change from 0 to 128 [ 239.231714][T14283] kworker/u8:14: attempt to access beyond end of device [ 239.231714][T14283] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 239.305217][T16699] lo speed is unknown, defaulting to 1000 [ 239.490711][ T3899] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.668865][T16704] loop7: detected capacity change from 0 to 256 [ 239.680534][ T3310] ================================================================== [ 239.688631][ T3310] BUG: KCSAN: data-race in _copy_to_iter / fat_set_state [ 239.695683][ T3310] [ 239.698021][ T3310] write to 0xffff88811feb6025 of 1 bytes by task 16704 on cpu 1: [ 239.705752][ T3310] fat_set_state+0x16c/0x1e0 [ 239.710382][ T3310] fat_fill_super+0x19d6/0x1ce0 [ 239.715250][ T3310] vfat_fill_super+0x24/0x30 [ 239.719865][ T3310] get_tree_bdev_flags+0x291/0x300 [ 239.724998][ T3310] get_tree_bdev+0x1f/0x30 [ 239.729438][ T3310] vfat_get_tree+0x1c/0x30 [ 239.733908][ T3310] vfs_get_tree+0x57/0x1d0 [ 239.738345][ T3310] do_new_mount+0x24d/0x6a0 [ 239.742875][ T3310] path_mount+0x4ab/0xb80 [ 239.747233][ T3310] __se_sys_mount+0x28c/0x2e0 [ 239.751923][ T3310] __x64_sys_mount+0x67/0x80 [ 239.756528][ T3310] x64_sys_call+0x2cca/0x3000 [ 239.761224][ T3310] do_syscall_64+0xca/0x2b0 [ 239.765758][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.771676][ T3310] [ 239.774022][ T3310] read to 0xffff88811feb6000 of 1536 bytes by task 3310 on cpu 0: [ 239.781842][ T3310] _copy_to_iter+0x130/0xe70 [ 239.786451][ T3310] copy_page_to_iter+0x18f/0x2d0 [ 239.791411][ T3310] filemap_read+0x407/0xa00 [ 239.795928][ T3310] blkdev_read_iter+0x22d/0x2e0 [ 239.800801][ T3310] vfs_read+0x64c/0x770 [ 239.804967][ T3310] ksys_read+0xda/0x1a0 [ 239.809137][ T3310] __x64_sys_read+0x40/0x50 [ 239.813683][ T3310] x64_sys_call+0x2889/0x3000 [ 239.818381][ T3310] do_syscall_64+0xca/0x2b0 [ 239.822914][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.828830][ T3310] [ 239.831168][ T3310] Reported by Kernel Concurrency Sanitizer on: [ 239.837330][ T3310] CPU: 0 UID: 0 PID: 3310 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.846628][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.856704][ T3310] ==================================================================