last executing test programs: 4.349671949s ago: executing program 0 (id=4000): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x55) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.390704757s ago: executing program 0 (id=4016): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x30, 0x10, 0x1, 0x70bdad, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) 3.317138293s ago: executing program 0 (id=4017): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x1fd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) 2.85989311s ago: executing program 1 (id=4019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) lseek(r1, 0x10001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf250a00000004000680080004000900000004000108000000000000004417621e333c7fd654c7358f36753387690d8e88c1c63c5b3af2cc026f30327aede71a7c53520a18ceaf80e97ab819e5d20585e55266b327f9551c75a505b513"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x802}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) fadvise64(r6, 0x8001, 0xc85b, 0x4) 2.383668918s ago: executing program 3 (id=4028): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000000079100f000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x2710}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000108"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0xfff0, 0x4, 0xf, 0xffffffff}, {0x800, 0x2, 0xf5, 0x6}, {0x2, 0x24, 0xc8, 0x9}, {0x8, 0xdc, 0x6, 0x7}, {0x0, 0x8, 0x0, 0x3}, {0x2a34, 0x7, 0xb}, {0xfff8, 0xd, 0x1, 0x1000}]}, 0x10) 2.248479809s ago: executing program 0 (id=4030): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.149733527s ago: executing program 1 (id=4033): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0) 2.084824492s ago: executing program 4 (id=4035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.9860413s ago: executing program 4 (id=4036): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000140)={0x0, 0x1, 0x5, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 1.946107423s ago: executing program 4 (id=4037): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'team_slave_1\x00', @broadcast}) mlockall(0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) mlockall(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 1.389680828s ago: executing program 3 (id=4038): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file1\x00'}) flistxattr(r0, &(0x7f0000000100)=""/191, 0xbf) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x29e}, &(0x7f00000001c0), &(0x7f00000003c0)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x10, 0x3, 0x1, 0x1, 0x9, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x8, 0x3, 0x7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0xe, 0x7, 0xffff}}]}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ff9}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000240)="94", 0x1) tee(r6, r8, 0x8f5, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r11, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.373146769s ago: executing program 4 (id=4039): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff}, 0x80009}], 0x1, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x64b7, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r3, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x34}}, 0x4) 1.302756355s ago: executing program 3 (id=4040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 1.262130848s ago: executing program 2 (id=4041): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) 1.25017881s ago: executing program 3 (id=4042): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0) 1.198249183s ago: executing program 0 (id=4043): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x1fd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) 1.179975555s ago: executing program 2 (id=4044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "18069c01"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "6eee"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000002040), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r2, &(0x7f0000001300)=[{&(0x7f00000001c0)='4', 0x1}, {0x0}], 0x2) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]}) unshare(0x2040400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4) unshare(0x26000400) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) 1.132858449s ago: executing program 1 (id=4045): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="040000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x11, 0x0, 0x41000, 0x12, '\x00', r5, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x2, 0xffffffffffffffff, 0x4b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) close(0xffffffffffffffff) unshare(0x2a020400) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) close(r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) 1.11824799s ago: executing program 3 (id=4046): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="040000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x11, 0x0, 0x41000, 0x12, '\x00', r5, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x2, 0xffffffffffffffff, 0x4b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) close(0xffffffffffffffff) unshare(0x2a020400) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) close(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) 1.113076901s ago: executing program 2 (id=4047): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000140)={0x0, 0x1, 0x5, 0x5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 1.066806604s ago: executing program 2 (id=4048): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000000079100f000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x2710}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000108"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0xfff0, 0x4, 0xf, 0xffffffff}, {0x800, 0x2, 0xf5, 0x6}, {0x2, 0x24, 0xc8, 0x9}, {0x8, 0xdc, 0x6, 0x7}, {0x0, 0x8, 0x0, 0x3}, {0x2a34, 0x7, 0xb}, {0xfff8, 0xd, 0x1, 0x1000}]}, 0x10) 892.384298ms ago: executing program 1 (id=4049): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) 854.530041ms ago: executing program 4 (id=4050): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x2000ffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r0) 827.780993ms ago: executing program 1 (id=4051): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 822.143854ms ago: executing program 3 (id=4052): openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, &(0x7f0000000400)={&(0x7f0000000680)="5bbf0ae3184dfad29921277905263568ea763505fb3f4654f0bf15d71f1f27e6b7e2d5b3890fe83bf8de826c819529dd5d7af602e673e27f81cea6d9a2ca3556a27e45c6036804f61d5e8ea8a4453828d8d6b8244db4767abc97806f6be4eb437710b5a1eacfe23d8e3243dfe4252a909177892c73ea451314e6d22be9956b50e2a84fc7aa7832b7b8953b350dceeddc31305018771aae63b1bca96d969507a00e6fb473d08b1f229423808843d3250b58d8ef7b6f45f3eb64d53bff5a23192fa8ffd65c7f32d6d2d169f4ecfdc379e2d5b9b9dd42a82a494084a2ceab979071658a064157dca16359fb1a6ac1642f0026dbe3935f160649cdb0cfdc9b9846", 0xff}) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000d00)=""/161, 0xa1}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000200)=0x32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) close(r3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x7, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x8000c}, 0x50) 765.939688ms ago: executing program 1 (id=4053): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 646.928858ms ago: executing program 4 (id=4054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) lseek(r1, 0x10001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf250a00000004000680080004000900000004000108000000000000004417621e333c7fd654c7358f36753387690d8e88c1c63c5b3af2cc026f30327aede71a7c53520a18ceaf80e97ab819e5d20585e55266b327f9551c75a505b513"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x802}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) fadvise64(r6, 0x8001, 0xc85b, 0x4) 95.504242ms ago: executing program 0 (id=4055): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0) 95.073863ms ago: executing program 2 (id=4056): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) mq_getsetattr(0xffffffffffffffff, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0) 0s ago: executing program 2 (id=4057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "18069c01"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "6eee"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000002040), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r2, &(0x7f0000001300)=[{&(0x7f00000001c0)='4', 0x1}, {0x0}], 0x2) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]}) unshare(0x2040400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4) unshare(0x26000400) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) kernel console output (not intermixed with test programs): ound [ 293.896259][T20848] __nla_validate_parse: 13 callbacks suppressed [ 293.896274][T20848] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3110'. [ 293.916302][T20848] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 293.924864][T20848] 1ªî{X¹¦: entered allmulticast mode [ 293.931536][T20848] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 294.003811][T20900] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 294.101981][T20688] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.109294][T20688] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.158121][T20688] bridge_slave_0: entered allmulticast mode [ 294.170324][T20688] bridge_slave_0: entered promiscuous mode [ 294.206451][T20688] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.213607][T20688] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.246502][T20688] bridge_slave_1: entered allmulticast mode [ 294.253484][T20688] bridge_slave_1: entered promiscuous mode [ 294.295505][T20995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3119'. [ 294.308425][T20688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.341833][T20688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.353807][T21005] 1ªî{X¹¦: left allmulticast mode [ 294.379641][T21005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.427558][T20688] team0: Port device team_slave_0 added [ 294.440100][T20688] team0: Port device team_slave_1 added [ 294.515854][T20974] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.553177][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 294.595899][T20688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.603268][T20688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.629932][T20688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.641452][T21069] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3123'. [ 294.643997][T20688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.657728][T20688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.684333][T20688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.701424][T21069] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 294.710885][T21069] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 294.754667][T20974] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.849942][T21076] SELinux: failed to load policy [ 294.892243][T20974] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.004551][T20974] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.076463][T20688] hsr_slave_0: entered promiscuous mode [ 295.091145][T20688] hsr_slave_1: entered promiscuous mode [ 295.102931][T20688] debugfs: 'hsr0' already exists in 'hsr' [ 295.108908][T20688] Cannot create hsr debugfs directory [ 295.130166][ T5327] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.196088][ T5359] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.216816][ T5359] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.225284][ T5359] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.760128][T20688] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 295.795358][T20688] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 295.816478][T20688] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 295.837689][T20688] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 295.939424][T20688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.009388][T20688] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.039262][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.046476][ T5350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.117764][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.125514][ T5350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.309616][T20688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.419922][T21269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3145'. [ 296.512156][T21269] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3145'. [ 296.538251][T21269] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 296.556772][T21269] 1ªî{X¹¦: entered allmulticast mode [ 296.615412][T21269] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 296.682142][T20688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.814565][T21328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3149'. [ 296.851601][T21319] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.895373][T21332] netlink: 'syz.2.3151': attribute type 27 has an invalid length. [ 296.909296][T21329] siw: device registration error -23 [ 296.922886][T21332] 1ªî{X¹¦: left allmulticast mode [ 296.963609][T19496] lo speed is unknown, defaulting to 1000 [ 296.969871][T19496] syz0: Port: 1 Link DOWN [ 296.978307][T21319] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.032605][T21338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.048948][T21338] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.073636][T21338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.093103][T19496] lo speed is unknown, defaulting to 1000 [ 297.098967][T19496] syz0: Port: 1 Link ACTIVE [ 297.115897][T21319] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.183453][T21319] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.210356][ T29] kauditd_printk_skb: 1169 callbacks suppressed [ 297.210371][ T29] audit: type=1400 audit(1755719293.496:67509): avc: denied { map_create } for pid=21351 comm="syz.2.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.238480][ T29] audit: type=1400 audit(1755719293.496:67510): avc: denied { prog_load } for pid=21351 comm="syz.2.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.254271][T21352] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3153'. [ 297.260379][ T29] audit: type=1400 audit(1755719293.496:67511): avc: denied { bpf } for pid=21351 comm="syz.2.3153" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 297.290522][ T29] audit: type=1400 audit(1755719293.496:67512): avc: denied { perfmon } for pid=21351 comm="syz.2.3153" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 297.312244][ T29] audit: type=1400 audit(1755719293.496:67513): avc: denied { prog_load } for pid=21351 comm="syz.2.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.332334][ T29] audit: type=1400 audit(1755719293.496:67514): avc: denied { map_create } for pid=21351 comm="syz.2.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.352399][ T29] audit: type=1400 audit(1755719293.496:67515): avc: denied { map_read map_write } for pid=21351 comm="syz.2.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.372463][ T29] audit: type=1400 audit(1755719293.496:67516): avc: denied { create } for pid=21351 comm="syz.2.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.393705][ T29] audit: type=1400 audit(1755719293.496:67517): avc: denied { write } for pid=21351 comm="syz.2.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.414848][ T29] audit: type=1400 audit(1755719293.496:67518): avc: denied { nlmsg_write } for pid=21351 comm="syz.2.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.439764][T21352] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 297.450516][T21352] 0ªî{X¹¦: entered allmulticast mode [ 297.460152][T21352] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 297.529371][T20688] veth0_vlan: entered promiscuous mode [ 297.551121][T20688] veth1_vlan: entered promiscuous mode [ 297.566568][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3155'. [ 297.607299][T20688] veth0_macvtap: entered promiscuous mode [ 297.640808][T20688] veth1_macvtap: entered promiscuous mode [ 297.683821][T20688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.727068][T21370] siw: device registration error -23 [ 297.737233][T20688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.778767][ T5359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.803386][ T5354] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.824442][ T5354] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.850899][ T5354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.008576][T21385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'. [ 298.034517][T21385] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 298.069394][T21385] 0ªî{X¹¦: entered allmulticast mode [ 298.080967][T21385] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 298.531524][T21392] lo speed is unknown, defaulting to 1000 [ 298.738518][T21392] chnl_net:caif_netlink_parms(): no params data found [ 298.750255][T21470] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 298.759218][T21470] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 298.854672][ T3308] syz_tun (unregistering): left allmulticast mode [ 298.934227][T21392] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.941498][T21392] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.954255][T21392] bridge_slave_0: entered allmulticast mode [ 298.961206][T21392] bridge_slave_0: entered promiscuous mode [ 298.971534][T21392] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.978902][T21392] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.987683][T21392] bridge_slave_1: entered allmulticast mode [ 298.996086][T21392] bridge_slave_1: entered promiscuous mode [ 299.064838][T21392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.095904][T21392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.135994][T21392] team0: Port device team_slave_0 added [ 299.149942][T21392] team0: Port device team_slave_1 added [ 299.153274][T21635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21635 comm=syz.4.3169 [ 299.190265][T21635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21635 comm=syz.4.3169 [ 299.206728][T21392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.213895][T21392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.240649][T21392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.256326][T21392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.263451][T21392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.290037][T21392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.305416][T21660] 0ªî{X¹¦: left allmulticast mode [ 299.326254][T21660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.457025][T21392] hsr_slave_0: entered promiscuous mode [ 299.474822][T21392] hsr_slave_1: entered promiscuous mode [ 299.481017][T21392] debugfs: 'hsr0' already exists in 'hsr' [ 299.487242][T21392] Cannot create hsr debugfs directory [ 299.597737][T21718] siw: device registration error -23 [ 299.808799][ T5354] bridge_slave_1: left allmulticast mode [ 299.814801][ T5354] bridge_slave_1: left promiscuous mode [ 299.820553][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.863875][ T5354] bridge_slave_0: left allmulticast mode [ 299.869785][ T5354] bridge_slave_0: left promiscuous mode [ 299.875747][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.245111][ T5354] smc: removing net device bond0 with user defined pnetid SYZ2 [ 300.260173][ T5354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.277800][ T5354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.294227][ T5354] bond0 (unregistering): Released all slaves [ 300.358857][ T5354] bond1 (unregistering): Released all slaves [ 300.368126][ T5354] bond2 (unregistering): Released all slaves [ 300.380048][ T5354] bond3 (unregistering): Released all slaves [ 300.389460][ T5354] bond4 (unregistering): Released all slaves [ 300.409600][ T5354] bond5 (unregistering): Released all slaves [ 300.421298][ T5354] bond6 (unregistering): Released all slaves [ 300.430460][ T5354] bond7 (unregistering): Released all slaves [ 300.440906][ T5354] bond8 (unregistering): Released all slaves [ 300.529882][ T5327] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.540846][ T5354] hsr_slave_0: left promiscuous mode [ 300.553751][ T5354] hsr_slave_1: left promiscuous mode [ 300.619768][ T5354] team0 (unregistering): Port device team_slave_1 removed [ 300.643123][ T5354] team0 (unregistering): Port device team_slave_0 removed [ 300.728713][ T5327] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.738272][ T3397] lo speed is unknown, defaulting to 1000 [ 300.744400][T21817] __nla_validate_parse: 2 callbacks suppressed [ 300.744420][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3179'. [ 300.750807][ T3397] infiniband syz0: ib_query_port failed (-19) [ 300.808784][ T5327] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.833220][ T5327] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.911276][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'. [ 300.953688][T21871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21871 comm=syz.3.3183 [ 300.973822][T21871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21871 comm=syz.3.3183 [ 301.016702][T21392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.037119][T21392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.077675][T21392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.110160][T21833] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3182'. [ 301.127911][T21392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.166521][T21833] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 301.191144][T21833] 0ªî{X¹¦: entered allmulticast mode [ 301.224112][T21833] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 301.359018][T21908] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 301.407289][T21392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.457528][T21913] SELinux: failed to load policy [ 301.478911][T21392] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.490633][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.497981][ T5327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.535283][ T5325] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.542561][ T5325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.966756][T21392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.017072][T21942] program syz.4.3192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.035323][T21942] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 302.276472][T21975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3196'. [ 302.307903][T21392] veth0_vlan: entered promiscuous mode [ 302.352478][T21978] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3198'. [ 302.364309][T21392] veth1_vlan: entered promiscuous mode [ 302.375413][T21978] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 302.389784][T21978] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 302.428703][T21392] veth0_macvtap: entered promiscuous mode [ 302.451350][T21392] veth1_macvtap: entered promiscuous mode [ 302.495936][T21392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.564765][T21392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.643321][ T29] kauditd_printk_skb: 1093 callbacks suppressed [ 302.643350][ T29] audit: type=1400 audit(1755719298.507:68612): avc: denied { write } for pid=21986 comm="syz.0.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.678306][ T5359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.684241][T21994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3204'. [ 302.699160][ T29] audit: type=1400 audit(1755719298.554:68613): avc: denied { write } for pid=21980 comm="syz.1.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 302.705131][ T5359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.747284][T21985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.762105][ T29] audit: type=1400 audit(1755719298.618:68614): avc: denied { create } for pid=21980 comm="syz.1.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.803910][ T29] audit: type=1400 audit(1755719298.637:68615): avc: denied { create } for pid=21996 comm="syz.0.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.824094][ T29] audit: type=1326 audit(1755719298.637:68616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21995 comm="syz.3.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aac4ebe9 code=0x7ffc0000 [ 302.848249][ T29] audit: type=1400 audit(1755719298.646:68617): avc: denied { prog_load } for pid=21996 comm="syz.0.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 302.867978][ T29] audit: type=1400 audit(1755719298.646:68618): avc: denied { bpf } for pid=21996 comm="syz.0.3206" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 302.889212][ T29] audit: type=1400 audit(1755719298.646:68619): avc: denied { perfmon } for pid=21996 comm="syz.0.3206" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 302.910775][ T29] audit: type=1326 audit(1755719298.646:68620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21995 comm="syz.3.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aac4ebe9 code=0x7ffc0000 [ 302.935013][ T29] audit: type=1326 audit(1755719298.646:68621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21995 comm="syz.3.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f19aac4ebe9 code=0x7ffc0000 [ 302.962054][ T5359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.972592][ T5359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.986323][T22003] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3207'. [ 302.997417][T21985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.010630][T22003] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 303.020924][T22003] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 303.053141][T21985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.112356][T21985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.165142][ T5327] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.199049][ T5359] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.228099][ T5359] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.238094][ T5359] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.408020][T22043] netlink: 'syz.1.3213': attribute type 1 has an invalid length. [ 303.443445][T22060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3216'. [ 303.456538][T22043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.477384][T22060] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3216'. [ 303.477972][T22083] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 303.501216][T22060] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 303.513759][T22060] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 303.567340][T22089] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3218'. [ 303.591048][T22089] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 303.604462][T22089] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 303.686378][T22099] syzkaller1: entered promiscuous mode [ 303.692204][T22099] syzkaller1: entered allmulticast mode [ 303.762833][T22103] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 303.777928][T22103] 0ªî{X¹¦: entered allmulticast mode [ 303.784171][T22103] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 303.890947][T22117] usb usb1: check_ctrlrecip: process 22117 (+}[@) requesting ep 01 but needs 81 [ 303.900456][T22117] vhci_hcd: default hub control req: 0230 v0004 i0001 l0 [ 303.999025][T22124] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 304.010198][T22124] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 304.267704][T22121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.310282][T22180] FAULT_INJECTION: forcing a failure. [ 304.310282][T22180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.323649][T22180] CPU: 1 UID: 0 PID: 22180 Comm: syz.0.3238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 304.323679][T22180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.323695][T22180] Call Trace: [ 304.323703][T22180] [ 304.323735][T22180] __dump_stack+0x1d/0x30 [ 304.323763][T22180] dump_stack_lvl+0xe8/0x140 [ 304.323790][T22180] dump_stack+0x15/0x1b [ 304.323825][T22180] should_fail_ex+0x265/0x280 [ 304.323853][T22180] should_fail+0xb/0x20 [ 304.323875][T22180] should_fail_usercopy+0x1a/0x20 [ 304.323972][T22180] _copy_from_user+0x1c/0xb0 [ 304.324010][T22180] memdup_user+0x5e/0xd0 [ 304.324043][T22180] strndup_user+0x68/0xb0 [ 304.324083][T22180] __se_sys_mount+0x4d/0x2e0 [ 304.324138][T22180] ? fput+0x8f/0xc0 [ 304.324170][T22180] ? ksys_write+0x192/0x1a0 [ 304.324206][T22180] __x64_sys_mount+0x67/0x80 [ 304.324236][T22180] x64_sys_call+0x2b4d/0x2ff0 [ 304.324296][T22180] do_syscall_64+0xd2/0x200 [ 304.324363][T22180] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 304.324396][T22180] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 304.324439][T22180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.324468][T22180] RIP: 0033:0x7f9102b7ebe9 [ 304.324487][T22180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.324559][T22180] RSP: 002b:00007f91015e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.324580][T22180] RAX: ffffffffffffffda RBX: 00007f9102da5fa0 RCX: 00007f9102b7ebe9 [ 304.324595][T22180] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 304.324618][T22180] RBP: 00007f91015e7090 R08: 0000200000000240 R09: 0000000000000000 [ 304.324634][T22180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.324649][T22180] R13: 00007f9102da6038 R14: 00007f9102da5fa0 R15: 00007fff9f318788 [ 304.324675][T22180] [ 304.973545][T22223] 0ªî{X¹¦: left allmulticast mode [ 304.997361][T22223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.892791][T22284] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 305.901558][T22284] 1ªî{X¹¦: entered allmulticast mode [ 305.907680][T22284] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 306.094082][T22121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.188776][T22121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.267118][T22121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.358511][ T5359] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.398649][ T5359] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.422759][ T5359] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.442962][ T5359] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.463506][T22364] syzkaller1: entered promiscuous mode [ 306.469026][T22364] syzkaller1: entered allmulticast mode [ 306.545270][T22368] __nla_validate_parse: 11 callbacks suppressed [ 306.545287][T22368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3285'. [ 307.145862][T22409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22409 comm=syz.2.3297 [ 307.161976][T22409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22409 comm=syz.2.3297 [ 307.384711][T22407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.581534][T22407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.741035][T22407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.871857][T22407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.958824][T22449] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22449 comm=syz.1.3308 [ 307.997727][T22449] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22449 comm=syz.1.3308 [ 308.052661][ T5354] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.065697][ T29] kauditd_printk_skb: 1928 callbacks suppressed [ 308.065713][ T29] audit: type=1400 audit(1755719303.510:70550): avc: denied { create } for pid=22457 comm="syz.4.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 308.107109][ T5354] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.128226][ T5354] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.152267][ T29] audit: type=1400 audit(1755719303.538:70551): avc: denied { prog_load } for pid=22459 comm="syz.0.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 308.170523][ T5354] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.171839][ T29] audit: type=1400 audit(1755719303.538:70552): avc: denied { bpf } for pid=22459 comm="syz.0.3309" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.204756][ T29] audit: type=1400 audit(1755719303.538:70553): avc: denied { perfmon } for pid=22459 comm="syz.0.3309" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.227643][ T29] audit: type=1400 audit(1755719303.547:70554): avc: denied { prog_load } for pid=22459 comm="syz.0.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 308.249554][ T29] audit: type=1400 audit(1755719303.547:70555): avc: denied { bpf } for pid=22459 comm="syz.0.3309" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.272404][ T29] audit: type=1400 audit(1755719303.547:70556): avc: denied { perfmon } for pid=22459 comm="syz.0.3309" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.294304][ T29] audit: type=1400 audit(1755719303.556:70557): avc: denied { map_create } for pid=22465 comm="syz.2.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 308.314812][ T29] audit: type=1400 audit(1755719303.556:70558): avc: denied { perfmon } for pid=22465 comm="syz.2.3311" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.337215][ T29] audit: type=1400 audit(1755719303.556:70559): avc: denied { map_read map_write } for pid=22465 comm="syz.2.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 308.343033][T22468] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3311'. [ 308.383493][T22468] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 308.432667][T22480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3314'. [ 308.446961][T22468] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 308.512341][T22483] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3315'. [ 308.552874][T22483] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 308.593727][T22488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22488 comm=syz.0.3317 [ 308.616915][T22483] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 308.651940][T22488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22488 comm=syz.0.3317 [ 308.687853][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'. [ 308.740321][T22491] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3318'. [ 308.773558][T22491] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 308.806282][T22491] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 309.010763][T22512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3325'. [ 309.096993][T22516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.164662][T22515] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3327'. [ 309.227790][T22506] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.276406][T22515] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 309.287009][T22515] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 309.324602][T22506] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.390883][T22541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3330'. [ 309.409000][T22506] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.438875][T22541] 0ªî{X¹¦: left allmulticast mode [ 309.452066][T22541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.520002][T22506] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.899205][T22569] syz.0.3338: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 309.914922][T22569] CPU: 0 UID: 0 PID: 22569 Comm: syz.0.3338 Not tainted syzkaller #0 PREEMPT(voluntary) [ 309.915007][T22569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.915020][T22569] Call Trace: [ 309.915027][T22569] [ 309.915034][T22569] __dump_stack+0x1d/0x30 [ 309.915066][T22569] dump_stack_lvl+0xe8/0x140 [ 309.915139][T22569] dump_stack+0x15/0x1b [ 309.915156][T22569] warn_alloc+0x12b/0x1a0 [ 309.915198][T22569] ? audit_log_end+0x1d7/0x1f0 [ 309.915240][T22569] ? audit_log_end+0x1d7/0x1f0 [ 309.915280][T22569] __vmalloc_node_range_noprof+0x9c/0xe00 [ 309.915321][T22569] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 309.915399][T22569] ? slow_avc_audit+0x104/0x140 [ 309.915431][T22569] ? should_fail_ex+0x30/0x280 [ 309.915457][T22569] ? xskq_create+0x36/0xe0 [ 309.915505][T22569] vmalloc_user_noprof+0x7d/0xb0 [ 309.915565][T22569] ? xskq_create+0x80/0xe0 [ 309.915612][T22569] xskq_create+0x80/0xe0 [ 309.915683][T22569] xsk_init_queue+0x95/0xf0 [ 309.915733][T22569] xsk_setsockopt+0x477/0x640 [ 309.915788][T22569] ? __pfx_xsk_setsockopt+0x10/0x10 [ 309.915826][T22569] __sys_setsockopt+0x181/0x200 [ 309.915849][T22569] ? __secure_computing+0x82/0x150 [ 309.915903][T22569] __x64_sys_setsockopt+0x64/0x80 [ 309.915929][T22569] x64_sys_call+0x20ec/0x2ff0 [ 309.915956][T22569] do_syscall_64+0xd2/0x200 [ 309.916032][T22569] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 309.916121][T22569] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 309.916149][T22569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.916225][T22569] RIP: 0033:0x7f9102b7ebe9 [ 309.916244][T22569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.916265][T22569] RSP: 002b:00007f91015e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.916285][T22569] RAX: ffffffffffffffda RBX: 00007f9102da5fa0 RCX: 00007f9102b7ebe9 [ 309.916299][T22569] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 309.916314][T22569] RBP: 00007f9102c01e19 R08: 0000000000000004 R09: 0000000000000000 [ 309.916383][T22569] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 309.916436][T22569] R13: 00007f9102da6038 R14: 00007f9102da5fa0 R15: 00007fff9f318788 [ 309.916458][T22569] [ 309.916477][T22569] Mem-Info: [ 310.112466][T22575] program syz.1.3339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.112783][T22575] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 310.120970][T22569] active_anon:5094 inactive_anon:1 isolated_anon:0 [ 310.120970][T22569] active_file:10282 inactive_file:19801 isolated_file:0 [ 310.120970][T22569] unevictable:0 dirty:318 writeback:0 [ 310.120970][T22569] slab_reclaimable:3259 slab_unreclaimable:14372 [ 310.120970][T22569] mapped:30198 shmem:147 pagetables:1084 [ 310.120970][T22569] sec_pagetables:0 bounce:0 [ 310.120970][T22569] kernel_misc_reclaimable:0 [ 310.120970][T22569] free:1870694 free_pcp:9957 free_cma:0 [ 310.225377][T22569] Node 0 active_anon:20432kB inactive_anon:4kB active_file:41128kB inactive_file:79164kB unevictable:64kB isolated(anon):0kB isolated(file):0kB mapped:120952kB dirty:1280kB writeback:0kB shmem:588kB kernel_stack:3744kB pagetables:4436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 310.254918][T22569] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.285523][T22569] lowmem_reserve[]: 0 2883 7862 7862 [ 310.291288][T22569] Node 0 DMA32 free:2949208kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952840kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 310.323396][T22569] lowmem_reserve[]: 0 0 4978 4978 [ 310.328630][T22569] Node 0 Normal free:4517868kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20432kB inactive_anon:4kB active_file:41128kB inactive_file:79164kB unevictable:64kB writepending:1280kB present:5242880kB managed:5098240kB mlocked:64kB bounce:0kB free_pcp:47220kB local_pcp:23176kB free_cma:0kB [ 310.362985][T22569] lowmem_reserve[]: 0 0 0 0 [ 310.367721][T22569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 310.380537][T22569] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949208kB [ 310.384863][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3341'. [ 310.397893][T22569] Node 0 Normal: 1972*4kB (UME) 1574*8kB (UME) 1160*16kB (ME) 739*32kB (ME) 481*64kB (ME) 171*128kB (UME) 67*256kB (ME) 37*512kB (UME) 66*1024kB (UME) 37*2048kB (UME) 1031*4096kB (UM) = 4517792kB [ 310.427560][T22569] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 310.437316][T22569] 30210 total pagecache pages [ 310.442156][T22569] 1 pages in swap cache [ 310.446596][T22569] Free swap = 124992kB [ 310.450982][T22569] Total swap = 124996kB [ 310.455427][T22569] 2097051 pages RAM [ 310.459466][T22569] 0 pages HighMem/MovableOnly [ 310.464767][T22569] 80441 pages reserved [ 310.902515][T22613] siw: device registration error -23 [ 311.474673][T22650] 9pnet_fd: Insufficient options for proto=fd [ 311.616535][T22665] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22665 comm=syz.1.3367 [ 311.632911][T22665] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22665 comm=syz.1.3367 [ 311.985015][T22689] __nla_validate_parse: 5 callbacks suppressed [ 311.985029][T22689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3376'. [ 312.047756][T22689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.155138][T22697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22697 comm=syz.1.3379 [ 312.201459][T22697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22697 comm=syz.1.3379 [ 312.415150][ T5327] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.453262][ T5327] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.465290][ T5327] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.481544][ T5327] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.741801][T22749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3390'. [ 312.762347][T22749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.891246][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'. [ 313.314834][T22782] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3403'. [ 313.333661][T22782] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 313.357148][T22782] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 313.373940][T22780] tipc: Enabling of bearer rejected, failed to enable media [ 313.499452][ T29] kauditd_printk_skb: 1740 callbacks suppressed [ 313.499467][ T29] audit: type=1326 audit(1755719308.575:72300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 313.575516][ T29] audit: type=1326 audit(1755719308.621:72301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 313.600027][ T29] audit: type=1326 audit(1755719308.621:72302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 313.624326][ T29] audit: type=1326 audit(1755719308.621:72303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 313.648896][ T29] audit: type=1326 audit(1755719308.621:72304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 313.672892][ T29] audit: type=1326 audit(1755719308.621:72305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 313.697393][ T29] audit: type=1326 audit(1755719308.621:72306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 313.721454][ T29] audit: type=1326 audit(1755719308.621:72307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 313.728180][T22814] FAULT_INJECTION: forcing a failure. [ 313.728180][T22814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.745731][ T29] audit: type=1326 audit(1755719308.621:72308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 313.759554][T22814] CPU: 1 UID: 0 PID: 22814 Comm: syz.0.3409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 313.759645][T22814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.759665][T22814] Call Trace: [ 313.759675][T22814] [ 313.759688][T22814] __dump_stack+0x1d/0x30 [ 313.759715][T22814] dump_stack_lvl+0xe8/0x140 [ 313.759812][T22814] dump_stack+0x15/0x1b [ 313.759834][T22814] should_fail_ex+0x265/0x280 [ 313.759863][T22814] should_fail+0xb/0x20 [ 313.759886][T22814] should_fail_usercopy+0x1a/0x20 [ 313.759953][T22814] _copy_from_user+0x1c/0xb0 [ 313.759991][T22814] kstrtouint_from_user+0x69/0xf0 [ 313.760021][T22814] ? 0xffffffff81000000 [ 313.760045][T22814] ? selinux_file_permission+0x1e4/0x320 [ 313.760146][T22814] proc_fail_nth_write+0x50/0x160 [ 313.760185][T22814] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.760286][T22814] vfs_write+0x269/0x960 [ 313.760315][T22814] ? vfs_read+0x4e6/0x770 [ 313.760340][T22814] ? __rcu_read_unlock+0x4f/0x70 [ 313.760360][T22814] ? __fget_files+0x184/0x1c0 [ 313.760424][T22814] ksys_write+0xda/0x1a0 [ 313.760516][T22814] __x64_sys_write+0x40/0x50 [ 313.760546][T22814] x64_sys_call+0x27fe/0x2ff0 [ 313.760576][T22814] do_syscall_64+0xd2/0x200 [ 313.760613][T22814] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.760686][T22814] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 313.760720][T22814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.760750][T22814] RIP: 0033:0x7f9102b7d69f [ 313.760770][T22814] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 313.760866][T22814] RSP: 002b:00007f91015c6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 313.760891][T22814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9102b7d69f [ 313.760908][T22814] RDX: 0000000000000001 RSI: 00007f91015c60a0 RDI: 0000000000000003 [ 313.760925][T22814] RBP: 00007f91015c6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.761010][T22814] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 313.761025][T22814] R13: 00007f9102da6128 R14: 00007f9102da6090 R15: 00007fff9f318788 [ 313.761050][T22814] [ 314.006715][ T29] audit: type=1326 audit(1755719308.621:72309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22785 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd58debe9 code=0x7ffc0000 [ 314.615515][T22839] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3416'. [ 314.627470][T22839] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 314.635748][T22839] 1ªî{X¹¦: entered allmulticast mode [ 314.642137][T22839] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 314.725943][T22846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3417'. [ 314.738812][T22846] 1ªî{X¹¦: left allmulticast mode [ 314.765900][T22846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.383980][T22875] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3427'. [ 315.393776][T22875] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 315.404730][T22875] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 316.211946][T22895] program syz.1.3433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.223286][T22895] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 316.639281][T22941] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3439'. [ 316.682318][T22941] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 316.710785][T22941] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 316.988762][T22970] syzkaller1: entered promiscuous mode [ 316.994523][T22970] syzkaller1: entered allmulticast mode [ 317.190250][T22978] block device autoloading is deprecated and will be removed. [ 317.473125][T22997] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3452'. [ 317.520193][T22997] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 317.566739][T22997] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 317.690397][T23009] netlink: 'syz.1.3456': attribute type 20 has an invalid length. [ 317.698736][T23009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3456'. [ 317.713212][T23010] siw: device registration error -23 [ 317.852953][T23022] syzkaller1: entered promiscuous mode [ 317.858718][T23022] syzkaller1: entered allmulticast mode [ 317.914164][T23026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 317.987775][T23026] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3461'. [ 318.003813][T23026] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 318.020260][T23026] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 318.116260][T23069] netlink: 'syz.1.3462': attribute type 1 has an invalid length. [ 318.154689][T23069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.287603][T23111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3464'. [ 318.347377][T23114] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3465'. [ 318.363435][T23114] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 318.391785][T23114] 0ªî{X¹¦: entered allmulticast mode [ 318.399082][T23114] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 318.430215][T23111] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3464'. [ 318.439915][T23111] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 318.460777][T23111] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 318.480387][T23155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3466'. [ 318.491372][T23154] siw: device registration error -23 [ 318.586853][T23167] syzkaller1: entered promiscuous mode [ 318.592678][T23167] syzkaller1: entered allmulticast mode [ 318.661576][T23175] netlink: 'syz.1.3475': attribute type 1 has an invalid length. [ 318.691633][T23175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.841372][T23224] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3481'. [ 318.852171][T23224] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 318.863003][T23224] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 318.953381][T23228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3482'. [ 318.966649][ T29] kauditd_printk_skb: 1520 callbacks suppressed [ 318.966665][ T29] audit: type=1400 audit(1755719313.689:73812): avc: denied { prog_load } for pid=23222 comm="syz.3.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 318.993470][ T29] audit: type=1400 audit(1755719313.689:73813): avc: denied { bpf } for pid=23222 comm="syz.3.3480" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.057666][T23231] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 319.069167][T23231] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 319.100180][ T29] audit: type=1400 audit(1755719313.735:73814): avc: denied { map_create } for pid=23229 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.121718][ T29] audit: type=1400 audit(1755719313.735:73815): avc: denied { perfmon } for pid=23229 comm="syz.0.3483" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.143566][ T29] audit: type=1400 audit(1755719313.735:73816): avc: denied { map_read map_write } for pid=23229 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.164300][ T29] audit: type=1400 audit(1755719313.735:73817): avc: denied { prog_load } for pid=23229 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.176164][T23271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23271 comm=syz.1.3484 [ 319.185491][ T29] audit: type=1400 audit(1755719313.735:73818): avc: denied { bpf } for pid=23229 comm="syz.0.3483" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.220435][ T29] audit: type=1400 audit(1755719313.735:73819): avc: denied { create } for pid=23229 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 319.242898][ T29] audit: type=1400 audit(1755719313.754:73820): avc: denied { write } for pid=23229 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 319.263173][T23272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23272 comm=syz.1.3484 [ 319.264385][ T29] audit: type=1400 audit(1755719313.754:73821): avc: denied { nlmsg_write } for pid=23229 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 319.435876][T23278] FAULT_INJECTION: forcing a failure. [ 319.435876][T23278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.449636][T23278] CPU: 0 UID: 0 PID: 23278 Comm: syz.0.3488 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.449720][T23278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.449736][T23278] Call Trace: [ 319.449746][T23278] [ 319.449812][T23278] __dump_stack+0x1d/0x30 [ 319.449834][T23278] dump_stack_lvl+0xe8/0x140 [ 319.449858][T23278] dump_stack+0x15/0x1b [ 319.449910][T23278] should_fail_ex+0x265/0x280 [ 319.449936][T23278] should_fail+0xb/0x20 [ 319.449955][T23278] should_fail_usercopy+0x1a/0x20 [ 319.449976][T23278] _copy_from_iter+0xcf/0xe40 [ 319.450062][T23278] ? __build_skb_around+0x1a0/0x200 [ 319.450110][T23278] ? __alloc_skb+0x223/0x320 [ 319.450226][T23278] netlink_sendmsg+0x471/0x6b0 [ 319.450253][T23278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.450293][T23278] __sock_sendmsg+0x142/0x180 [ 319.450328][T23278] ____sys_sendmsg+0x31e/0x4e0 [ 319.450403][T23278] ___sys_sendmsg+0x17b/0x1d0 [ 319.450442][T23278] __x64_sys_sendmsg+0xd4/0x160 [ 319.450523][T23278] x64_sys_call+0x191e/0x2ff0 [ 319.450544][T23278] do_syscall_64+0xd2/0x200 [ 319.450651][T23278] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 319.450697][T23278] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 319.450752][T23278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.450774][T23278] RIP: 0033:0x7f9102b7ebe9 [ 319.450789][T23278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.450894][T23278] RSP: 002b:00007f91015e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.450918][T23278] RAX: ffffffffffffffda RBX: 00007f9102da5fa0 RCX: 00007f9102b7ebe9 [ 319.450931][T23278] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 319.450942][T23278] RBP: 00007f91015e7090 R08: 0000000000000000 R09: 0000000000000000 [ 319.450955][T23278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.450967][T23278] R13: 00007f9102da6038 R14: 00007f9102da5fa0 R15: 00007fff9f318788 [ 319.451022][T23278] [ 319.683569][T23282] syzkaller1: entered promiscuous mode [ 319.689542][T23282] syzkaller1: entered allmulticast mode [ 319.807203][T23300] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 319.909874][T23311] FAULT_INJECTION: forcing a failure. [ 319.909874][T23311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.923333][T23311] CPU: 0 UID: 0 PID: 23311 Comm: syz.1.3496 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.923367][T23311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.923383][T23311] Call Trace: [ 319.923392][T23311] [ 319.923402][T23311] __dump_stack+0x1d/0x30 [ 319.923483][T23311] dump_stack_lvl+0xe8/0x140 [ 319.923503][T23311] dump_stack+0x15/0x1b [ 319.923523][T23311] should_fail_ex+0x265/0x280 [ 319.923565][T23311] should_fail+0xb/0x20 [ 319.923581][T23311] should_fail_usercopy+0x1a/0x20 [ 319.923602][T23311] _copy_from_user+0x1c/0xb0 [ 319.923630][T23311] memdup_user+0x5e/0xd0 [ 319.923688][T23311] strndup_user+0x68/0xb0 [ 319.923712][T23311] __se_sys_mount+0x4d/0x2e0 [ 319.923767][T23311] ? fput+0x8f/0xc0 [ 319.923802][T23311] ? ksys_write+0x192/0x1a0 [ 319.923829][T23311] __x64_sys_mount+0x67/0x80 [ 319.923858][T23311] x64_sys_call+0x2b4d/0x2ff0 [ 319.923946][T23311] do_syscall_64+0xd2/0x200 [ 319.923979][T23311] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 319.924010][T23311] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 319.924069][T23311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.924095][T23311] RIP: 0033:0x7f7cd58debe9 [ 319.924110][T23311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.924129][T23311] RSP: 002b:00007f7cd4347038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.924152][T23311] RAX: ffffffffffffffda RBX: 00007f7cd5b05fa0 RCX: 00007f7cd58debe9 [ 319.924167][T23311] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 319.924253][T23311] RBP: 00007f7cd4347090 R08: 0000200000000240 R09: 0000000000000000 [ 319.924267][T23311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.924283][T23311] R13: 00007f7cd5b06038 R14: 00007f7cd5b05fa0 R15: 00007ffda4df5f08 [ 319.924307][T23311] [ 320.162596][T23315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23315 comm=syz.1.3500 [ 320.196448][T23315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23315 comm=syz.1.3500 [ 320.215632][T23313] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 320.232509][T23313] net_ratelimit: 1 callbacks suppressed [ 320.232529][T23313] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 320.266260][T23352] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23352 comm=syz.4.3502 [ 320.281266][T23350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23350 comm=syz.0.3501 [ 320.307700][T23352] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23352 comm=syz.4.3502 [ 320.340709][T23350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23350 comm=syz.0.3501 [ 320.525205][T23375] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23375 comm=syz.3.3513 [ 320.551965][T23375] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23375 comm=syz.3.3513 [ 320.605316][T23377] openvswitch: netlink: Message has 6 unknown bytes. [ 320.611082][T23379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.634558][T23379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.680238][T19088] printk: udevd: 17 output lines suppressed due to ratelimiting [ 320.695898][T23382] siw: device registration error -23 [ 320.729894][T23388] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 320.740076][T23388] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 321.129417][T23463] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 321.138968][T23463] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 321.461190][T23534] syz_tun: entered allmulticast mode [ 321.666448][T23542] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 321.674583][T23542] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 322.214620][T23622] siw: device registration error -23 [ 322.606115][T23682] block device autoloading is deprecated and will be removed. [ 322.757793][T23682] FAULT_INJECTION: forcing a failure. [ 322.757793][T23682] name failslab, interval 1, probability 0, space 0, times 0 [ 322.770968][T23682] CPU: 0 UID: 0 PID: 23682 Comm: syz.2.3569 Not tainted syzkaller #0 PREEMPT(voluntary) [ 322.771015][T23682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.771028][T23682] Call Trace: [ 322.771034][T23682] [ 322.771041][T23682] __dump_stack+0x1d/0x30 [ 322.771067][T23682] dump_stack_lvl+0xe8/0x140 [ 322.771092][T23682] dump_stack+0x15/0x1b [ 322.771112][T23682] should_fail_ex+0x265/0x280 [ 322.771250][T23682] should_failslab+0x8c/0xb0 [ 322.771323][T23682] kmem_cache_alloc_noprof+0x50/0x310 [ 322.771357][T23682] ? getname_flags+0x80/0x3b0 [ 322.771394][T23682] getname_flags+0x80/0x3b0 [ 322.771488][T23682] do_sys_openat2+0x60/0x110 [ 322.771530][T23682] __x64_sys_openat+0xf2/0x120 [ 322.771572][T23682] x64_sys_call+0x2e9c/0x2ff0 [ 322.771602][T23682] do_syscall_64+0xd2/0x200 [ 322.771634][T23682] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.771666][T23682] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 322.771697][T23682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.771719][T23682] RIP: 0033:0x7f699675ebe9 [ 322.771733][T23682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.771754][T23682] RSP: 002b:00007f69951bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 322.771795][T23682] RAX: ffffffffffffffda RBX: 00007f6996985fa0 RCX: 00007f699675ebe9 [ 322.771807][T23682] RDX: 0000000000000441 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 322.771822][T23682] RBP: 00007f69951bf090 R08: 0000000000000000 R09: 0000000000000000 [ 322.771838][T23682] R10: 000000000000014a R11: 0000000000000246 R12: 0000000000000001 [ 322.771853][T23682] R13: 00007f6996986038 R14: 00007f6996985fa0 R15: 00007ffc7f28b488 [ 322.771874][T23682] [ 322.996088][T23703] netlink: 'syz.0.3572': attribute type 1 has an invalid length. [ 323.021731][T23703] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.136931][T23745] __nla_validate_parse: 23 callbacks suppressed [ 323.136952][T23745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3574'. [ 323.204259][T23745] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3574'. [ 323.301329][T23745] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 323.310743][T23745] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 323.435284][T23792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3577'. [ 323.455780][T23795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.463421][T23795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.471776][T23795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.479317][T23795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.127352][T23859] FAULT_INJECTION: forcing a failure. [ 324.127352][T23859] name failslab, interval 1, probability 0, space 0, times 0 [ 324.140437][T23859] CPU: 0 UID: 0 PID: 23859 Comm: syz.3.3597 Not tainted syzkaller #0 PREEMPT(voluntary) [ 324.140470][T23859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.140502][T23859] Call Trace: [ 324.140509][T23859] [ 324.140517][T23859] __dump_stack+0x1d/0x30 [ 324.140541][T23859] dump_stack_lvl+0xe8/0x140 [ 324.140561][T23859] dump_stack+0x15/0x1b [ 324.140589][T23859] should_fail_ex+0x265/0x280 [ 324.140614][T23859] ? __se_sys_mount+0xef/0x2e0 [ 324.140641][T23859] should_failslab+0x8c/0xb0 [ 324.140711][T23859] __kmalloc_cache_noprof+0x4c/0x320 [ 324.140741][T23859] ? memdup_user+0x99/0xd0 [ 324.140789][T23859] __se_sys_mount+0xef/0x2e0 [ 324.140814][T23859] ? fput+0x8f/0xc0 [ 324.140848][T23859] ? ksys_write+0x192/0x1a0 [ 324.140871][T23859] __x64_sys_mount+0x67/0x80 [ 324.140900][T23859] x64_sys_call+0x2b4d/0x2ff0 [ 324.140993][T23859] do_syscall_64+0xd2/0x200 [ 324.141024][T23859] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 324.141055][T23859] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 324.141096][T23859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.141141][T23859] RIP: 0033:0x7f19aac4ebe9 [ 324.141156][T23859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.141212][T23859] RSP: 002b:00007f19a96b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.141235][T23859] RAX: ffffffffffffffda RBX: 00007f19aae75fa0 RCX: 00007f19aac4ebe9 [ 324.141251][T23859] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 324.141266][T23859] RBP: 00007f19a96b7090 R08: 0000200000000300 R09: 0000000000000000 [ 324.141280][T23859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.141295][T23859] R13: 00007f19aae76038 R14: 00007f19aae75fa0 R15: 00007fff0cb5a968 [ 324.141319][T23859] [ 324.404601][ T29] kauditd_printk_skb: 2101 callbacks suppressed [ 324.404619][ T29] audit: type=1326 audit(1755719318.710:75923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.3.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aac4ebe9 code=0x7ffc0000 [ 324.435421][ T29] audit: type=1326 audit(1755719318.710:75924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.3.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aac4ebe9 code=0x7ffc0000 [ 324.460058][ T29] audit: type=1326 audit(1755719318.710:75925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.3.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19aac4ebe9 code=0x7ffc0000 [ 324.484539][ T29] audit: type=1400 audit(1755719318.710:75926): avc: denied { map_create } for pid=23867 comm="syz.3.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 324.504406][ T29] audit: type=1400 audit(1755719318.710:75927): avc: denied { perfmon } for pid=23867 comm="syz.3.3600" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.526459][ T29] audit: type=1400 audit(1755719318.710:75928): avc: denied { map_read map_write } for pid=23867 comm="syz.3.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 324.531791][T23872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3602'. [ 324.546988][ T29] audit: type=1326 audit(1755719318.710:75929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.3.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aac4ebe9 code=0x7ffc0000 [ 324.580247][ T29] audit: type=1326 audit(1755719318.710:75930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23867 comm="syz.3.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19aac4ebe9 code=0x7ffc0000 [ 324.604630][ T29] audit: type=1400 audit(1755719318.710:75931): avc: denied { prog_load } for pid=23867 comm="syz.3.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 324.624340][ T29] audit: type=1400 audit(1755719318.710:75932): avc: denied { bpf } for pid=23867 comm="syz.3.3600" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.809083][T23915] selinux_netlink_send: 6 callbacks suppressed [ 324.809103][T23915] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23915 comm=syz.1.3608 [ 324.834684][T23915] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23915 comm=syz.1.3608 [ 324.914280][T23921] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 325.027730][T23934] loop4: detected capacity change from 0 to 512 [ 325.036746][T23933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3612'. [ 325.059681][T23933] 0ªî{X¹¦: left allmulticast mode [ 325.069994][T23934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.096240][T23933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.325841][T23955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23955 comm=syz.2.3620 [ 325.348584][T23955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23955 comm=syz.2.3620 [ 325.448215][T23962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3622'. [ 325.482323][T23962] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3622'. [ 325.492376][T23962] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 325.503911][T23962] 1ªî{X¹¦: entered allmulticast mode [ 325.510016][T23962] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 325.619281][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.982120][T24016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'. [ 325.997351][T24016] 0ªî{X¹¦: left allmulticast mode [ 326.020988][T24016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.185535][T24022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24022 comm=syz.0.3632 [ 326.215305][T24025] syz_tun: entered allmulticast mode [ 326.241526][T24026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24026 comm=syz.0.3632 [ 326.415661][T24039] FAULT_INJECTION: forcing a failure. [ 326.415661][T24039] name failslab, interval 1, probability 0, space 0, times 0 [ 326.428911][T24039] CPU: 1 UID: 0 PID: 24039 Comm: syz.4.3640 Not tainted syzkaller #0 PREEMPT(voluntary) [ 326.429013][T24039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.429030][T24039] Call Trace: [ 326.429038][T24039] [ 326.429068][T24039] __dump_stack+0x1d/0x30 [ 326.429093][T24039] dump_stack_lvl+0xe8/0x140 [ 326.429182][T24039] dump_stack+0x15/0x1b [ 326.429199][T24039] should_fail_ex+0x265/0x280 [ 326.429220][T24039] should_failslab+0x8c/0xb0 [ 326.429256][T24039] kmem_cache_alloc_noprof+0x50/0x310 [ 326.429407][T24039] ? __anon_vma_prepare+0xcd/0x2f0 [ 326.429431][T24039] __anon_vma_prepare+0xcd/0x2f0 [ 326.429450][T24039] handle_mm_fault+0x1d58/0x2c20 [ 326.429474][T24039] ? __rcu_read_unlock+0x4f/0x70 [ 326.429508][T24039] do_user_addr_fault+0x3fe/0x1090 [ 326.429594][T24039] ? __rcu_read_unlock+0x4f/0x70 [ 326.429619][T24039] exc_page_fault+0x62/0xa0 [ 326.429658][T24039] asm_exc_page_fault+0x26/0x30 [ 326.429684][T24039] RIP: 0010:__put_user_4+0xd/0x20 [ 326.429716][T24039] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 326.429737][T24039] RSP: 0018:ffffc900016dfe78 EFLAGS: 00050206 [ 326.429814][T24039] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00002000000001c0 [ 326.429830][T24039] RDX: ffff888101c74200 RSI: 0000000000000005 RDI: 0000000000000000 [ 326.429844][T24039] RBP: 0000000000000004 R08: 0001ffff86847f7f R09: 0000000000000000 [ 326.429859][T24039] R10: 0001888105b461a0 R11: 0001888105b461a7 R12: 00002000000001c0 [ 326.429946][T24039] R13: 0000000000000003 R14: 000000000000000f R15: 0000000000000000 [ 326.429967][T24039] __sys_socketpair+0xa6/0x430 [ 326.430057][T24039] ? ksys_write+0x192/0x1a0 [ 326.430120][T24039] __x64_sys_socketpair+0x52/0x60 [ 326.430177][T24039] x64_sys_call+0x2bf2/0x2ff0 [ 326.430203][T24039] do_syscall_64+0xd2/0x200 [ 326.430233][T24039] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 326.430312][T24039] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 326.430349][T24039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.430384][T24039] RIP: 0033:0x7f8c42deebe9 [ 326.430398][T24039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.430421][T24039] RSP: 002b:00007f8c4184f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 326.430443][T24039] RAX: ffffffffffffffda RBX: 00007f8c43015fa0 RCX: 00007f8c42deebe9 [ 326.430459][T24039] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 326.430474][T24039] RBP: 00007f8c4184f090 R08: 0000000000000000 R09: 0000000000000000 [ 326.430550][T24039] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 326.430563][T24039] R13: 00007f8c43016038 R14: 00007f8c43015fa0 R15: 00007ffcb11df0d8 [ 326.430582][T24039] [ 326.806132][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3644'. [ 326.828047][T24048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.101520][T24063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24063 comm=syz.3.3649 [ 327.134919][T24063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24063 comm=syz.3.3649 [ 327.162008][T24062] loop4: detected capacity change from 0 to 1024 [ 327.195086][T24062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 327.219849][T24062] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.375202][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'. [ 327.486622][T24074] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 327.528570][T24074] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 328.072526][ T5354] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:31: lblock 0 mapped to illegal pblock 0 (length 6) [ 328.087559][ T5354] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 328.100233][ T5354] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.100233][ T5354] [ 328.114040][ T5354] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:31: lblock 8 mapped to illegal pblock 8 (length 8) [ 328.165938][ T5354] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 328.178962][ T5354] EXT4-fs (loop4): This should not happen!! Data will be lost [ 328.178962][ T5354] [ 328.381697][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 328.480552][T24156] macvtap1: entered promiscuous mode [ 328.486011][T24156] bond0: entered promiscuous mode [ 328.491197][T24156] bond_slave_0: entered promiscuous mode [ 328.497037][T24156] bond_slave_1: entered promiscuous mode [ 328.503096][T24156] geneve2: entered promiscuous mode [ 328.508957][T24156] macvtap1: entered allmulticast mode [ 328.514799][T24156] bond0: entered allmulticast mode [ 328.520204][T24156] bond_slave_0: entered allmulticast mode [ 328.526242][T24156] bond_slave_1: entered allmulticast mode [ 328.532265][T24156] geneve2: entered allmulticast mode [ 328.563117][T24156] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 328.652828][T24161] bond0: left allmulticast mode [ 328.657799][T24161] bond_slave_0: left allmulticast mode [ 328.663543][T24161] bond_slave_1: left allmulticast mode [ 328.669287][T24161] geneve2: left allmulticast mode [ 328.674691][T24161] bond0: left promiscuous mode [ 328.679603][T24161] bond_slave_0: left promiscuous mode [ 328.685767][T24161] bond_slave_1: left promiscuous mode [ 328.691741][T24161] geneve2: left promiscuous mode [ 329.125944][T24190] __nla_validate_parse: 2 callbacks suppressed [ 329.125958][T24190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3674'. [ 329.236738][T24198] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24198 comm=syz.4.3677 [ 329.260501][T24190] infiniband syz2: set active [ 329.265680][T24190] infiniband syz2: added bond0 [ 329.280903][T24198] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24198 comm=syz.4.3677 [ 329.294262][T24190] RDS/IB: syz2: added [ 329.298284][T24190] smc: adding ib device syz2 with port count 1 [ 329.315592][T24190] smc: ib device syz2 port 1 has pnetid [ 329.627927][T24231] loop4: detected capacity change from 0 to 128 [ 329.646824][T24231] vfat: Unknown parameter '00000000000000000000' [ 329.702022][T24231] loop4: detected capacity change from 0 to 2048 [ 329.743460][T24231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 329.784782][T24231] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.3683: inline data xattr refers to an external xattr inode [ 329.831251][ T29] kauditd_printk_skb: 2123 callbacks suppressed [ 329.831269][ T29] audit: type=1400 audit(1755719323.704:78056): avc: denied { unmount } for pid=18978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 329.859983][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 329.915859][T24255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3685'. [ 329.933025][ T29] audit: type=1400 audit(1755719323.759:78057): avc: denied { create } for pid=24252 comm="syz.3.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 329.953656][ T29] audit: type=1400 audit(1755719323.768:78058): avc: denied { prog_load } for pid=24252 comm="syz.3.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 329.973474][ T29] audit: type=1400 audit(1755719323.768:78059): avc: denied { bpf } for pid=24252 comm="syz.3.3686" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.994939][ T29] audit: type=1400 audit(1755719323.768:78060): avc: denied { perfmon } for pid=24252 comm="syz.3.3686" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 330.016941][ T29] audit: type=1400 audit(1755719323.768:78061): avc: denied { map_create } for pid=24254 comm="syz.2.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.037012][ T29] audit: type=1400 audit(1755719323.768:78062): avc: denied { perfmon } for pid=24254 comm="syz.2.3685" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 330.058600][ T29] audit: type=1400 audit(1755719323.768:78063): avc: denied { map_read map_write } for pid=24254 comm="syz.2.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.079474][ T29] audit: type=1400 audit(1755719323.777:78064): avc: denied { read write } for pid=24252 comm="syz.3.3686" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 330.104237][ T29] audit: type=1400 audit(1755719323.777:78065): avc: denied { open } for pid=24252 comm="syz.3.3686" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 330.154908][T24260] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3685'. [ 330.165063][T24260] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 330.173917][T24260] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 330.282296][T24300] syzkaller1: entered promiscuous mode [ 330.284597][ T23] Process accounting resumed [ 330.287943][T24300] syzkaller1: entered allmulticast mode [ 330.607669][T24336] program syz.2.3698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.885017][T24351] loop4: detected capacity change from 0 to 1024 [ 330.935799][T24351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 330.961337][T24354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3702'. [ 330.961345][T24351] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.150453][T24363] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 331.189120][T24363] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 52 with error 28 [ 331.202422][T24363] EXT4-fs (loop4): This should not happen!! Data will be lost [ 331.202422][T24363] [ 331.212576][T24363] EXT4-fs (loop4): Total free blocks count 0 [ 331.218717][T24363] EXT4-fs (loop4): Free/Dirty block details [ 331.224855][T24363] EXT4-fs (loop4): free_blocks=4293918720 [ 331.231206][T24363] EXT4-fs (loop4): dirty_blocks=1584 [ 331.236947][T24363] EXT4-fs (loop4): Block reservation details [ 331.243246][T24363] EXT4-fs (loop4): i_reserved_data_blocks=99 [ 331.785991][ T5359] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:32: lblock 0 mapped to illegal pblock 0 (length 6) [ 331.809843][ T5359] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 331.918966][ T5359] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:32: lblock 8 mapped to illegal pblock 8 (length 8) [ 332.072742][T24409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24409 comm=syz.0.3713 [ 332.098698][T24409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24409 comm=syz.0.3713 [ 332.489452][T24446] FAULT_INJECTION: forcing a failure. [ 332.489452][T24446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.503202][T24446] CPU: 1 UID: 0 PID: 24446 Comm: syz.0.3722 Not tainted syzkaller #0 PREEMPT(voluntary) [ 332.503309][T24446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.503327][T24446] Call Trace: [ 332.503337][T24446] [ 332.503348][T24446] __dump_stack+0x1d/0x30 [ 332.503426][T24446] dump_stack_lvl+0xe8/0x140 [ 332.503482][T24446] dump_stack+0x15/0x1b [ 332.503505][T24446] should_fail_ex+0x265/0x280 [ 332.503534][T24446] should_fail+0xb/0x20 [ 332.503558][T24446] should_fail_usercopy+0x1a/0x20 [ 332.503615][T24446] _copy_from_user+0x1c/0xb0 [ 332.503662][T24446] ___sys_sendmsg+0xc1/0x1d0 [ 332.503710][T24446] __sys_sendmmsg+0x178/0x300 [ 332.503754][T24446] __x64_sys_sendmmsg+0x57/0x70 [ 332.503822][T24446] x64_sys_call+0x1c4a/0x2ff0 [ 332.503851][T24446] do_syscall_64+0xd2/0x200 [ 332.503885][T24446] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.503954][T24446] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.503988][T24446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.504067][T24446] RIP: 0033:0x7f9102b7ebe9 [ 332.504087][T24446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.504113][T24446] RSP: 002b:00007f91015e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 332.504152][T24446] RAX: ffffffffffffffda RBX: 00007f9102da5fa0 RCX: 00007f9102b7ebe9 [ 332.504202][T24446] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 332.504266][T24446] RBP: 00007f91015e7090 R08: 0000000000000000 R09: 0000000000000000 [ 332.504282][T24446] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 332.504299][T24446] R13: 00007f9102da6038 R14: 00007f9102da5fa0 R15: 00007fff9f318788 [ 332.504324][T24446] [ 332.811281][T24447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3721'. [ 332.839317][T24455] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3721'. [ 332.856116][T24455] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 332.889478][T24455] 1ªî{X¹¦: entered allmulticast mode [ 332.906455][T24455] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 333.010308][T24497] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24497 comm=syz.0.3728 [ 333.038017][T24497] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24497 comm=syz.0.3728 [ 333.481436][T24547] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3737'. [ 333.498468][T24547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3737'. [ 333.749170][T24561] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24561 comm=syz.0.3741 [ 333.773516][T24561] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24561 comm=syz.0.3741 [ 333.931784][T24580] program syz.0.3747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.346488][T24610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24610 comm=syz.4.3755 [ 334.372911][T24610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24610 comm=syz.4.3755 [ 334.495746][T24617] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3757'. [ 334.506030][T24617] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 334.514085][T24617] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 334.607834][T24644] loop4: detected capacity change from 0 to 512 [ 334.626010][T24644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.700889][T24650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3762'. [ 334.757914][T24650] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3762'. [ 334.768286][T24650] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 334.781401][T24650] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 334.895814][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.975572][T24697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24697 comm=syz.4.3767 [ 334.979841][T24698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3766'. [ 335.054650][T24701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24701 comm=syz.4.3767 [ 335.325560][ T29] kauditd_printk_skb: 2071 callbacks suppressed [ 335.325580][ T29] audit: type=1400 audit(1755719328.789:80137): avc: denied { read write } for pid=24702 comm="syz.1.3769" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.356565][ T29] audit: type=1400 audit(1755719328.789:80138): avc: denied { open } for pid=24702 comm="syz.1.3769" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.380941][ T29] audit: type=1400 audit(1755719328.789:80139): avc: denied { ioctl } for pid=24702 comm="syz.1.3769" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.381112][T24703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.416097][T24703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.416571][T24705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.431520][ T29] audit: type=1400 audit(1755719328.799:80140): avc: denied { map_create } for pid=24719 comm="syz.3.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.453426][ T29] audit: type=1400 audit(1755719328.799:80141): avc: denied { bpf } for pid=24719 comm="syz.3.3773" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 335.454453][T24705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.474537][ T29] audit: type=1400 audit(1755719328.872:80142): avc: denied { read write } for pid=24699 comm="syz.0.3768" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.506905][ T29] audit: type=1400 audit(1755719328.872:80143): avc: denied { open } for pid=24699 comm="syz.0.3768" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.531364][ T29] audit: type=1400 audit(1755719328.872:80144): avc: denied { ioctl } for pid=24699 comm="syz.0.3768" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.558712][ T29] audit: type=1400 audit(1755719328.955:80145): avc: denied { ioctl } for pid=24702 comm="syz.1.3769" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.647662][ T29] audit: type=1400 audit(1755719329.075:80146): avc: denied { prog_load } for pid=24702 comm="syz.1.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.798788][T24737] program syz.2.3774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.907956][T24739] netlink: 'syz.2.3775': attribute type 27 has an invalid length. [ 335.927539][T24739] 1ªî{X¹¦: left allmulticast mode [ 335.953738][T24739] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.961343][T24739] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.010510][T24739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.026176][T24739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.042229][T24741] program syz.3.3776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.076732][ T5350] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.085971][ T5350] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.114277][ T5350] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.143627][ T5350] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.165544][T24748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3779'. [ 336.421029][T24770] netlink: 'syz.3.3787': attribute type 27 has an invalid length. [ 336.445787][T24768] loop4: detected capacity change from 0 to 1024 [ 336.477482][T24770] 1ªî{X¹¦: left allmulticast mode [ 336.487997][T24768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 336.503259][T24768] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.518020][T24770] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.525579][T24770] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.584797][T24770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.596315][T24770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.667113][ T5325] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.676951][ T5325] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.685506][T24781] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 336.701876][ T5325] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.710987][T24781] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 52 with error 28 [ 336.724380][T24781] EXT4-fs (loop4): This should not happen!! Data will be lost [ 336.724380][T24781] [ 336.734966][T24781] EXT4-fs (loop4): Total free blocks count 0 [ 336.741458][T24781] EXT4-fs (loop4): Free/Dirty block details [ 336.747510][T24781] EXT4-fs (loop4): free_blocks=4293918720 [ 336.753636][T24781] EXT4-fs (loop4): dirty_blocks=3168 [ 336.759199][T24781] EXT4-fs (loop4): Block reservation details [ 336.766191][T24781] EXT4-fs (loop4): i_reserved_data_blocks=198 [ 336.874353][ T5325] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.912857][T24785] program syz.3.3788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.239125][ T5350] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:28: lblock 0 mapped to illegal pblock 0 (length 6) [ 337.268497][ T5350] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 337.290239][ T5350] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:28: lblock 8 mapped to illegal pblock 8 (length 8) [ 337.314839][T24797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3792'. [ 337.627709][T24847] program syz.4.3799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.861952][T24857] loop4: detected capacity change from 0 to 1024 [ 337.968442][T24857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 337.981358][T24857] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.074593][T24879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3803'. [ 338.203622][T24869] capability: warning: `syz.1.3802' uses 32-bit capabilities (legacy support in use) [ 338.431731][T24897] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 338.457648][T24899] selinux_netlink_send: 4 callbacks suppressed [ 338.457669][T24899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24899 comm=syz.0.3805 [ 338.489472][T24897] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 52 with error 28 [ 338.502377][T24897] EXT4-fs (loop4): This should not happen!! Data will be lost [ 338.502377][T24897] [ 338.512783][T24897] EXT4-fs (loop4): Total free blocks count 0 [ 338.518830][T24897] EXT4-fs (loop4): Free/Dirty block details [ 338.525299][T24897] EXT4-fs (loop4): free_blocks=4293918720 [ 338.531601][T24897] EXT4-fs (loop4): dirty_blocks=1280 [ 338.536996][T24897] EXT4-fs (loop4): Block reservation details [ 338.543123][T24897] EXT4-fs (loop4): i_reserved_data_blocks=80 [ 338.556935][T24899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24899 comm=syz.0.3805 [ 338.828837][ T5327] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:21: lblock 0 mapped to illegal pblock 0 (length 6) [ 338.849797][ T5327] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 338.873666][ T5359] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:32: lblock 8 mapped to illegal pblock 8 (length 8) [ 338.956225][T24940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 339.030477][T24940] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3811'. [ 339.040148][T24940] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 339.048866][T24940] 0ªî{X¹¦: entered allmulticast mode [ 339.061606][T24940] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 339.236744][T24991] loop4: detected capacity change from 0 to 512 [ 339.245438][T24994] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24994 comm=syz.0.3817 [ 339.281068][T24994] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24994 comm=syz.0.3817 [ 339.303222][T24991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.350097][T24991] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.426037][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.761462][T25039] FAULT_INJECTION: forcing a failure. [ 339.761462][T25039] name failslab, interval 1, probability 0, space 0, times 0 [ 339.775023][T25039] CPU: 0 UID: 0 PID: 25039 Comm: }\)\ Not tainted syzkaller #0 PREEMPT(voluntary) [ 339.775054][T25039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.775125][T25039] Call Trace: [ 339.775131][T25039] [ 339.775139][T25039] __dump_stack+0x1d/0x30 [ 339.775166][T25039] dump_stack_lvl+0xe8/0x140 [ 339.775190][T25039] dump_stack+0x15/0x1b [ 339.775213][T25039] should_fail_ex+0x265/0x280 [ 339.775292][T25039] should_failslab+0x8c/0xb0 [ 339.775324][T25039] kmem_cache_alloc_noprof+0x50/0x310 [ 339.775408][T25039] ? skb_clone+0x151/0x1f0 [ 339.775438][T25039] skb_clone+0x151/0x1f0 [ 339.775465][T25039] __netlink_deliver_tap+0x2c9/0x500 [ 339.775498][T25039] netlink_unicast+0x66b/0x690 [ 339.775593][T25039] netlink_sendmsg+0x58b/0x6b0 [ 339.775624][T25039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.775651][T25039] __sock_sendmsg+0x142/0x180 [ 339.775686][T25039] ____sys_sendmsg+0x31e/0x4e0 [ 339.775781][T25039] ___sys_sendmsg+0x17b/0x1d0 [ 339.775825][T25039] __x64_sys_sendmsg+0xd4/0x160 [ 339.775858][T25039] x64_sys_call+0x191e/0x2ff0 [ 339.775883][T25039] do_syscall_64+0xd2/0x200 [ 339.775941][T25039] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 339.775994][T25039] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 339.776030][T25039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.776107][T25039] RIP: 0033:0x7f9102b7ebe9 [ 339.776121][T25039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.776179][T25039] RSP: 002b:00007f91015e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.776203][T25039] RAX: ffffffffffffffda RBX: 00007f9102da5fa0 RCX: 00007f9102b7ebe9 [ 339.776283][T25039] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 339.776297][T25039] RBP: 00007f91015e7090 R08: 0000000000000000 R09: 0000000000000000 [ 339.776310][T25039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.776325][T25039] R13: 00007f9102da6038 R14: 00007f9102da5fa0 R15: 00007fff9f318788 [ 339.776348][T25039] [ 340.090464][T25047] netlink: 'syz.0.3829': attribute type 27 has an invalid length. [ 340.251905][T25047] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.259186][T25047] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.311563][T25055] loop4: detected capacity change from 0 to 512 [ 340.350661][ T5354] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.384703][ T5354] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.405187][ T5354] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.414763][ T5354] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.425158][T25055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.439214][T25055] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.493886][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.573600][T25075] program syz.2.3839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.717210][T25082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3842'. [ 340.764894][ T29] kauditd_printk_skb: 1758 callbacks suppressed [ 340.764909][ T29] audit: type=1400 audit(1755719333.810:81905): avc: denied { map_create } for pid=25084 comm="syz.3.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.839370][ T29] audit: type=1400 audit(1755719333.810:81906): avc: denied { write } for pid=25081 comm="syz.2.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 340.860317][ T29] audit: type=1400 audit(1755719333.829:81907): avc: denied { map_read map_write } for pid=25084 comm="syz.3.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.880758][ T29] audit: type=1400 audit(1755719333.838:81908): avc: denied { prog_load } for pid=25084 comm="syz.3.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.900841][ T29] audit: type=1400 audit(1755719333.838:81909): avc: denied { bpf } for pid=25084 comm="syz.3.3843" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.921878][ T29] audit: type=1400 audit(1755719333.838:81910): avc: denied { perfmon } for pid=25084 comm="syz.3.3843" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.928735][T25088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3844'. [ 340.943267][ T29] audit: type=1400 audit(1755719333.838:81911): avc: denied { bpf } for pid=25084 comm="syz.3.3843" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.967079][T25090] netlink: 'syz.4.3845': attribute type 27 has an invalid length. [ 340.973896][ T29] audit: type=1400 audit(1755719333.838:81912): avc: denied { prog_run } for pid=25084 comm="syz.3.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.973938][ T29] audit: type=1400 audit(1755719333.838:81913): avc: denied { prog_load } for pid=25084 comm="syz.3.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 341.019507][T25091] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3844'. [ 341.021374][ T29] audit: type=1326 audit(1755719333.847:81914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25084 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aac4ebe9 code=0x7ffc0000 [ 341.059192][T25090] 0ªî{X¹¦: left allmulticast mode [ 341.085733][T25090] macvtap1: left promiscuous mode [ 341.090945][T25090] macvtap1: left allmulticast mode [ 341.105654][T25091] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 341.127715][T25091] 0ªî{X¹¦: entered allmulticast mode [ 341.138189][T25091] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 341.244211][T25133] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25133 comm=syz.4.3848 [ 341.247411][T25132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3849'. [ 341.270148][T25133] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25133 comm=syz.4.3848 [ 341.319174][T25132] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3849'. [ 341.328252][T25169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25169 comm=syz.1.3850 [ 341.329866][T25132] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 341.344711][T25169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25169 comm=syz.1.3850 [ 341.365916][T25132] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 341.436109][T25170] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3847'. [ 341.477650][T25170] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 341.508745][T25170] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 341.687089][T25192] netlink: 'syz.3.3857': attribute type 27 has an invalid length. [ 341.710790][T25192] 1ªî{X¹¦: left allmulticast mode [ 341.805658][T25197] loop4: detected capacity change from 0 to 1024 [ 341.830605][T25197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 341.844357][T25197] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.273310][ T5325] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:19: lblock 0 mapped to illegal pblock 0 (length 6) [ 342.287352][ T5325] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 342.300545][ T5325] EXT4-fs (loop4): This should not happen!! Data will be lost [ 342.300545][ T5325] [ 342.314927][ T5325] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:19: lblock 8 mapped to illegal pblock 8 (length 8) [ 342.331003][ T5325] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 342.343696][ T5325] EXT4-fs (loop4): This should not happen!! Data will be lost [ 342.343696][ T5325] [ 342.439933][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 342.765980][T25236] loop4: detected capacity change from 0 to 512 [ 342.806443][T25236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.843259][T25236] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.905421][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.002381][T25251] loop4: detected capacity change from 0 to 512 [ 343.050125][T25251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.068260][T25255] netlink: 'syz.3.3871': attribute type 27 has an invalid length. [ 343.079024][T25255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3871'. [ 343.365590][T25260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25260 comm=syz.3.3873 [ 343.422138][T25262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25262 comm=syz.3.3873 [ 343.487976][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.547208][T25268] netlink: 'syz.4.3874': attribute type 1 has an invalid length. [ 343.668962][T25276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3877'. [ 343.802805][T25287] netlink: 'syz.4.3882': attribute type 27 has an invalid length. [ 343.821792][T25287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3882'. [ 344.042018][T25298] geneve3: entered promiscuous mode [ 344.047572][T25298] geneve3: entered allmulticast mode [ 344.103056][T25304] bio_check_eod: 101 callbacks suppressed [ 344.103084][T25304] syz.4.3888: attempt to access beyond end of device [ 344.103084][T25304] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 344.122954][T25304] FAT-fs (loop9): unable to read boot sector [ 344.189990][T25305] FAULT_INJECTION: forcing a failure. [ 344.189990][T25305] name failslab, interval 1, probability 0, space 0, times 0 [ 344.203047][T25305] CPU: 0 UID: 0 PID: 25305 Comm: syz.2.3887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 344.203134][T25305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.203150][T25305] Call Trace: [ 344.203170][T25305] [ 344.203180][T25305] __dump_stack+0x1d/0x30 [ 344.203202][T25305] dump_stack_lvl+0xe8/0x140 [ 344.203225][T25305] dump_stack+0x15/0x1b [ 344.203241][T25305] should_fail_ex+0x265/0x280 [ 344.203267][T25305] should_failslab+0x8c/0xb0 [ 344.203299][T25305] __kmalloc_noprof+0xa5/0x3e0 [ 344.203398][T25305] ? __register_sysctl_table+0x54/0xc00 [ 344.203436][T25305] __register_sysctl_table+0x54/0xc00 [ 344.203466][T25305] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 344.203501][T25305] register_pidns_sysctls+0xe0/0x140 [ 344.203549][T25305] copy_pid_ns+0x351/0x550 [ 344.203574][T25305] ? kmem_cache_alloc_noprof+0x220/0x310 [ 344.203600][T25305] ? create_new_namespaces+0x3c/0x3d0 [ 344.203681][T25305] create_new_namespaces+0x176/0x3d0 [ 344.203728][T25305] unshare_nsproxy_namespaces+0xe8/0x120 [ 344.203769][T25305] ksys_unshare+0x3d0/0x6d0 [ 344.203815][T25305] ? ksys_write+0x192/0x1a0 [ 344.203846][T25305] __x64_sys_unshare+0x1f/0x30 [ 344.203907][T25305] x64_sys_call+0x2911/0x2ff0 [ 344.203930][T25305] do_syscall_64+0xd2/0x200 [ 344.203965][T25305] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 344.203995][T25305] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 344.204025][T25305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.204051][T25305] RIP: 0033:0x7f699675ebe9 [ 344.204108][T25305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.204132][T25305] RSP: 002b:00007f699517d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 344.204208][T25305] RAX: ffffffffffffffda RBX: 00007f6996986180 RCX: 00007f699675ebe9 [ 344.204224][T25305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 344.204240][T25305] RBP: 00007f699517d090 R08: 0000000000000000 R09: 0000000000000000 [ 344.204256][T25305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.204271][T25305] R13: 00007f6996986218 R14: 00007f6996986180 R15: 00007ffc7f28b488 [ 344.204296][T25305] [ 344.807145][T25320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3894'. [ 345.013412][T25334] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 345.027848][T25334] 1ªî{X¹¦: entered allmulticast mode [ 345.047197][T25334] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 345.118757][T25353] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 345.130126][T25353] 0ªî{X¹¦: entered allmulticast mode [ 345.136406][T25353] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 345.225769][T25378] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 345.240112][T25380] loop4: detected capacity change from 0 to 512 [ 345.251181][T25378] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 345.279277][T25380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.299979][T25380] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.335555][T25387] netlink: 'syz.1.3904': attribute type 4 has an invalid length. [ 345.358361][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.665321][T25416] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 345.684275][T25416] 1ªî{X¹¦: entered allmulticast mode [ 345.701330][T25416] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 345.742080][T25451] siw: device registration error -23 [ 345.817749][T25464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25464 comm=syz.2.3918 [ 345.845255][T25464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25464 comm=syz.2.3918 [ 345.876795][T25467] loop4: detected capacity change from 0 to 512 [ 345.901053][T25467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.129008][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.195814][ T29] kauditd_printk_skb: 1933 callbacks suppressed [ 346.195832][ T29] audit: type=1326 audit(1755719338.813:83846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25491 comm="syz.4.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c42deebe9 code=0x7ffc0000 [ 346.226695][ T29] audit: type=1326 audit(1755719338.813:83847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25491 comm="syz.4.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8c42deebe9 code=0x7ffc0000 [ 346.251430][ T29] audit: type=1400 audit(1755719338.813:83848): avc: denied { open } for pid=25491 comm="syz.4.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 346.271425][ T29] audit: type=1400 audit(1755719338.813:83849): avc: denied { perfmon } for pid=25491 comm="syz.4.3926" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.288113][T25498] netlink: 'syz.4.3927': attribute type 1 has an invalid length. [ 346.293287][ T29] audit: type=1400 audit(1755719338.813:83850): avc: denied { kernel } for pid=25491 comm="syz.4.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 346.321540][ T29] audit: type=1326 audit(1755719338.813:83851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25491 comm="syz.4.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c42deebe9 code=0x7ffc0000 [ 346.345537][ T29] audit: type=1326 audit(1755719338.813:83852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25491 comm="syz.4.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c42deebe9 code=0x7ffc0000 [ 346.370207][ T29] audit: type=1400 audit(1755719338.813:83853): avc: denied { map_create } for pid=25491 comm="syz.4.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.390453][ T29] audit: type=1400 audit(1755719338.813:83854): avc: denied { map_read map_write } for pid=25491 comm="syz.4.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.411402][ T29] audit: type=1326 audit(1755719338.813:83855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25491 comm="syz.4.3926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c42deebe9 code=0x7ffc0000 [ 346.466076][T25498] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.477733][T25512] __nla_validate_parse: 7 callbacks suppressed [ 346.477752][T25512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3928'. [ 346.602374][T25512] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3928'. [ 346.626777][T25512] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 346.660121][T25512] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 346.691357][T25575] openvswitch: netlink: Message has 6 unknown bytes. [ 347.604391][T25629] siw: device registration error -23 [ 348.199785][T25667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3957'. [ 348.573022][T25695] openvswitch: netlink: Message has 6 unknown bytes. [ 348.646777][T25697] loop4: detected capacity change from 0 to 1024 [ 348.669126][T25697] EXT4-fs: Ignoring removed orlov option [ 348.682473][T25697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.108349][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.179632][T25740] openvswitch: netlink: Message has 6 unknown bytes. [ 349.616602][T25774] syzkaller1: entered promiscuous mode [ 349.622166][T25774] syzkaller1: entered allmulticast mode [ 349.945262][T25797] siw: device registration error -23 [ 350.005924][T25803] openvswitch: netlink: Message has 6 unknown bytes. [ 350.088037][T25807] loop4: detected capacity change from 0 to 1024 [ 350.106069][T25807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 350.141487][T25807] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.294045][T25817] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 350.310129][T25817] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 52 with error 28 [ 350.323367][T25817] EXT4-fs (loop4): This should not happen!! Data will be lost [ 350.323367][T25817] [ 350.333425][T25817] EXT4-fs (loop4): Total free blocks count 0 [ 350.339465][T25817] EXT4-fs (loop4): Free/Dirty block details [ 350.345638][T25817] EXT4-fs (loop4): free_blocks=4293918720 [ 350.351523][T25817] EXT4-fs (loop4): dirty_blocks=2512 [ 350.356908][T25817] EXT4-fs (loop4): Block reservation details [ 350.362975][T25817] EXT4-fs (loop4): i_reserved_data_blocks=157 [ 350.677539][T25837] siw: device registration error -23 [ 350.837112][T25847] openvswitch: netlink: Message has 6 unknown bytes. [ 350.897569][ T5354] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:31: lblock 0 mapped to illegal pblock 0 (length 6) [ 350.921283][ T5354] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 350.956991][ T5354] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:31: lblock 8 mapped to illegal pblock 8 (length 8) [ 351.168755][T25868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4014'. [ 351.266989][T25870] loop4: detected capacity change from 0 to 2048 [ 351.321498][T25870] loop4: p2 p3 p7 [ 351.395730][T25879] netlink: 'syz.0.4016': attribute type 27 has an invalid length. [ 351.411282][T25879] 1ªî{X¹¦: left allmulticast mode [ 351.700071][ T29] kauditd_printk_skb: 2562 callbacks suppressed [ 351.700089][ T29] audit: type=1400 audit(1755719343.899:86418): avc: denied { open } for pid=25883 comm="syz.1.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 351.726605][ T29] audit: type=1400 audit(1755719343.899:86419): avc: denied { perfmon } for pid=25883 comm="syz.1.4018" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.749940][ T29] audit: type=1400 audit(1755719343.899:86420): avc: denied { kernel } for pid=25883 comm="syz.1.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 351.806988][ T29] audit: type=1400 audit(1755719343.963:86421): avc: denied { perfmon } for pid=25883 comm="syz.1.4018" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.913192][ T29] audit: type=1400 audit(1755719344.093:86422): avc: denied { create } for pid=25886 comm="syz.1.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.944413][ T29] audit: type=1400 audit(1755719344.120:86423): avc: denied { map_create } for pid=25886 comm="syz.1.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.965588][ T29] audit: type=1400 audit(1755719344.120:86424): avc: denied { map_read map_write } for pid=25886 comm="syz.1.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.986746][ T29] audit: type=1400 audit(1755719344.120:86425): avc: denied { prog_load } for pid=25886 comm="syz.1.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.006799][ T29] audit: type=1400 audit(1755719344.120:86426): avc: denied { bpf } for pid=25886 comm="syz.1.4019" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.027985][ T29] audit: type=1400 audit(1755719344.120:86427): avc: denied { perfmon } for pid=25886 comm="syz.1.4019" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.257320][T25905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4025'. [ 352.373260][T25915] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25915 comm=syz.2.4027 [ 352.489909][T25915] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25915 comm=syz.2.4027 [ 353.460992][T25960] loop4: detected capacity change from 0 to 512 [ 353.527605][T25960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.536168][T25965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4041'. [ 353.719890][T25982] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4045'. [ 353.736270][T25977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4046'. [ 353.756172][T25982] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 353.797278][T25982] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 353.820463][T25977] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4046'. [ 353.835762][T25977] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 353.866785][T25977] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 353.902831][T18978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.158268][T26038] loop4: detected capacity change from 0 to 1024 [ 354.178761][T26038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 354.192987][T26038] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.291545][T26042] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 354.314738][T26042] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 52 with error 28 [ 354.327479][T26042] EXT4-fs (loop4): This should not happen!! Data will be lost [ 354.327479][T26042] [ 354.337580][T26042] EXT4-fs (loop4): Total free blocks count 0 [ 354.343883][T26042] EXT4-fs (loop4): Free/Dirty block details [ 354.350133][T26042] EXT4-fs (loop4): free_blocks=4293918720 [ 354.356066][T26042] EXT4-fs (loop4): dirty_blocks=3584 [ 354.361759][T26042] EXT4-fs (loop4): Block reservation details [ 354.367937][T26042] EXT4-fs (loop4): i_reserved_data_blocks=233 [ 354.760938][T26032] ================================================================== [ 354.769355][T26032] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 354.778134][T26032] [ 354.780491][T26032] write to 0xffff88810a6fa0ec of 4 bytes by task 26035 on cpu 0: [ 354.788417][T26032] inode_update_timestamps+0x147/0x270 [ 354.793944][T26032] file_update_time+0x20e/0x2b0 [ 354.799024][T26032] shmem_file_write_iter+0x9c/0xf0 [ 354.804171][T26032] iter_file_splice_write+0x663/0xa60 [ 354.809850][T26032] direct_splice_actor+0x153/0x2a0 [ 354.815023][T26032] splice_direct_to_actor+0x30f/0x680 [ 354.820768][T26032] do_splice_direct+0xda/0x150 [ 354.825821][T26032] do_sendfile+0x380/0x650 [ 354.830442][T26032] __x64_sys_sendfile64+0x105/0x150 [ 354.835845][T26032] x64_sys_call+0x2bb0/0x2ff0 [ 354.840554][T26032] do_syscall_64+0xd2/0x200 [ 354.845169][T26032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.851298][T26032] [ 354.853679][T26032] read to 0xffff88810a6fa0ec of 4 bytes by task 26032 on cpu 1: [ 354.861332][T26032] atime_needs_update+0x2a8/0x3e0 [ 354.866487][T26032] touch_atime+0x4a/0x340 [ 354.871019][T26032] shmem_file_read_iter+0x477/0x540 [ 354.876518][T26032] copy_splice_read+0x442/0x660 [ 354.881563][T26032] splice_direct_to_actor+0x290/0x680 [ 354.887130][T26032] do_splice_direct+0xda/0x150 [ 354.891995][T26032] do_sendfile+0x380/0x650 [ 354.896608][T26032] __x64_sys_sendfile64+0x105/0x150 [ 354.902011][T26032] x64_sys_call+0x2bb0/0x2ff0 [ 354.906907][T26032] do_syscall_64+0xd2/0x200 [ 354.911622][T26032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.917541][T26032] [ 354.919870][T26032] value changed: 0x2a960c84 -> 0x2b22e334 [ 354.925712][T26032] [ 354.928103][T26032] Reported by Kernel Concurrency Sanitizer on: [ 354.934348][T26032] CPU: 1 UID: 0 PID: 26032 Comm: syz.1.4053 Not tainted syzkaller #0 PREEMPT(voluntary) [ 354.944615][T26032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.954860][T26032] ================================================================== [ 355.034661][ T5325] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:19: lblock 0 mapped to illegal pblock 0 (length 6) [ 355.049502][ T5325] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 355.064604][ T5354] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:31: lblock 8 mapped to illegal pblock 8 (length 8)