last executing test programs: 1m30.708340771s ago: executing program 0 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='freezer.state\x00', 0x275a, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x1fc, r3}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x21, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x7b73c62714574adf, 0x1, 0x0, r0}, @generic={0x2, 0x0, 0xa, 0xdbc3, 0x100}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x61, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000080)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0x9, 0x6c1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r4, r5, r0, r6, r0, r0], &(0x7f00000004c0)=[{0x3, 0x5, 0x8, 0x5}, {0x4, 0x4, 0x4, 0xa}, {0x1, 0x4, 0xe, 0x8}, {0x3, 0x4, 0x4, 0x2}, {0x0, 0x4, 0x4, 0x8}, {0x0, 0x5, 0x3, 0x8}, {0x0, 0x4, 0x2, 0x9}, {0x1, 0x3, 0xe, 0xa}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r9, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) 1m29.861017506s ago: executing program 0 (id=414): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="baddf775345a4d9781671c8d960a2f01011f0f501b6a9a73429747d59647f88575bcafbd012a6819eec3c206d9cfb0b2c7", @ANYRESHEX=0x0, @ANYBLOB="705ae81076098cb9d8c5394a9746bcc3e072eab1bf892d0fe23bd1ec16d62a3b81c9f41306914c6f73404b9e19d1bba2e01a38024f2910a95eeec77b2cc67205fe059a2633f21524fe56600ca1a1b0ab56762dd4d685ceba8c3034e575ba60179c556cb0d90acfcc84f0a1d4873e531594c9bedfd3ed11b328795d2f1ca3ccae24d7490ee7f3eb662dbb7c077122557faf64aeb367ab80bd239b465fa25be8b9a4a7d279dd0de480b1e4136b1ad0ef6403eaf108b8b27bf19c", @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) 1m29.842192627s ago: executing program 0 (id=415): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8e9e6f9a657331000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009140000001100010000000000000000000000000a"], 0x64}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) utimes(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)) 1m29.809035767s ago: executing program 0 (id=416): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8e9e6f9a657331000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009140000001100010000000000000000000000000a"], 0x64}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) utimes(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)) 1m29.755320827s ago: executing program 0 (id=420): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r1, 0x8, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) (async) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) 1m29.644556268s ago: executing program 0 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.628305362s ago: executing program 32 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.919182287s ago: executing program 5 (id=2630): socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write(r2, &(0x7f00000002c0)="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", 0xfc) 1.846222777s ago: executing program 5 (id=2633): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11) r3 = socket$inet(0x2, 0x3, 0xd) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) close(r4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x200000000000000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rddno', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r8 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x105a41) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r8, 0x4c07) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x10) r10 = socket(0x10, 0x2, 0x0) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x70bd25, 0x800, {}, [{0x4}]}, 0x22}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000880) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000280)=r9, 0x1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r12, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r11) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r13, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r0, @ANYBLOB="240003"], 0x10e0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.138543452s ago: executing program 5 (id=2662): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000021) read(r0, 0x0, 0x20) close(r0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000380)=ANY=[@ANYBLOB="025258756b4c8d81ddab6258ec42b7905fcec8db7399"], 0x9, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1663], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x10, 0x2, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x18) eventfd2(0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 739.593555ms ago: executing program 4 (id=2671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") 691.477535ms ago: executing program 4 (id=2674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x4, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 665.777895ms ago: executing program 4 (id=2675): socket$netlink(0x10, 0x3, 0x5) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB='.'], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0xdffc, 0xfb, 0x89, 0x0, @remote, @private=0xa010102}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x543142, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) fsetxattr$security_capability(r8, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0xffffff80, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000a6a6ef55c023307dd03040c0d480d23ca8f05fb806d82803811a7c4cae7c937cec2ab433a37713e922892f5a7e0b92c183ed4434a5c7d6d0e6a06594ed79afd13a6fd5b9a52d4ee7e4caba1aa46e4960565ad70125f4e2661a35b7e0c7851038b701c1369abba2852131927e4e2b1d14e2a2a800"/132, @ANYBLOB="a631a5b2d5911e20bdc69981e7fc3996225a2e212cb2c94e3209bc345e39aedd216ac1e14c8ad81526539bee654cc7c1854b8c52fa6535aee21abc54d5e8ad79817b9e2172406faa2eb5d609bb2bcf15f17c28b892b496698ccf8dd82550bd7f9d68946202895e99bf6493c992f6a01facffe9326e0c5a581894ba01e306c9800a2245be34e3336123952baf601f026a6a3b44806e0a2342", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000400000085100000010000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xfffffff9, 0xd3, &(0x7f00000003c0)=""/211, 0x40f00, 0x41, '\x00', r6, 0x25, r11, 0x8, &(0x7f00000004c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x2, 0x7f, 0x80000000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a00)=[0xffffffffffffffff, r9, r11, r0, r9, r11, r9], &(0x7f0000000580)=[{0x719e, 0x5, 0xf}, {0x2, 0x3, 0x4, 0x1}, {0x2, 0x2, 0xe, 0x2}, {0x3, 0x1, 0x0, 0x6}, {0x1, 0x3, 0x107, 0x6}, {0x4, 0x1, 0xc, 0x9}, {0x2, 0x3, 0xd, 0x4}], 0x10, 0xa6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mq_timedsend(r11, &(0x7f0000000880)="7dd06ea1e87ae3762d4978756d140502d11c776c098ab99b999665fd4577c2326c", 0x21, 0x7, &(0x7f0000000980)={0x77359400}) socket$can_bcm(0x1d, 0x2, 0x2) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="d56e69a3dd14a9be9dc8d163ccb3bd4efa102502f7cfebf3e44645635bb276636d387818c5f2c44a51ce871dd9c7fb09bad77897b541328004", @ANYRESOCT=r2, @ANYRESHEX=r9, @ANYRESOCT=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 555.594836ms ago: executing program 4 (id=2680): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x40004) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 530.941946ms ago: executing program 1 (id=2682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) r1 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x3, 0x0, 0xff, 0x6, 0xff, "033a920887e8d23426f19de0270e00", 0x5, 0xb67}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00000000000000000000000000000000e100"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000080)=0x1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r7, @ANYBLOB="00042cbd7000fedbdf250e00000008000600b50000000800060004000000180001800c000700200000000e000000080009003700000008000600040000000800060000ffffff440002800800090009000000080003000400000006000b000a000000060002004e22000006000f008504000006000b00020000000800070007000000080005000100010014000180080009003300000008000b0073697000ee703d83fed634cd701795d112090455947c817d02b5d2988e95c6f8b5e8aefbb78d"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r10, 0x0, 0x29, 0x0, 0x1c) 503.192667ms ago: executing program 4 (id=2683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 501.987316ms ago: executing program 2 (id=2685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") 443.567307ms ago: executing program 2 (id=2686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x4, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 443.337297ms ago: executing program 4 (id=2687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x13, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x4, 0xfffffffc}, 0x10}, 0xffffffffffffff5c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0x87, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000b80)="969e3bcee4207d24f3e3a1591abd02ae6f82f503523adf537c7382377e20ba07001e03b660d6f7cfc50899eaaa38e4c34f4191b932af5282ca64abfa1eb9599a2c99f93050405ce256b1bb81093131acbd148aeb39d9438b19e448415d3dca", &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000cb4000/0x2000)=nil, &(0x7f0000bf0000/0x1000)=nil, &(0x7f00000003c0)="48e9a270cee3b40e1cf62e736519b90039054795f5065c288c2e09eacedce9885ac2a267c6f66870d36121ac7778edaf0f379ddbc729ee169d462bebc9ca2b6f9e17c83c7142aebb23c8e20d5386", 0x4e, r2}, 0x68) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x389b0d52417bb201) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x8000000) syz_io_uring_setup(0x5c3, 0x0, 0x0, &(0x7f0000000180)) 443.034807ms ago: executing program 1 (id=2697): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000019300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000100) 397.979707ms ago: executing program 1 (id=2689): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x18) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a000100000000000000000081"], 0x38}}, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f0000000140)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@minixdf}]}, 0x1, 0x46f, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1af141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 397.591377ms ago: executing program 2 (id=2691): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 353.314848ms ago: executing program 2 (id=2692): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) 324.787648ms ago: executing program 2 (id=2693): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 246.653868ms ago: executing program 2 (id=2695): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x240004c0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0x9, 0x100000000000000, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x200000000622c, 0x0) 235.013739ms ago: executing program 3 (id=2696): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 160.213909ms ago: executing program 1 (id=2698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 159.676579ms ago: executing program 3 (id=2699): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") 113.727989ms ago: executing program 3 (id=2700): socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000580), 0x4}, 0x0, 0x0, 0x7ffffd, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x2, 0xffffffffffffffff, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000bb000100000000000000000000ff00"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000600), 0x800) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000200000000000000000000008500000011000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x108012, 0x0, 0x800, 0x4, 0x3fe, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) 98.857529ms ago: executing program 5 (id=2701): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000019300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000100) 95.451809ms ago: executing program 1 (id=2702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0x1000000000000}, 0x18) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0xffff, @private1}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20040044) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[], 0x8) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x20, 0x40000}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) fcntl$lock(r5, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) r7 = socket(0x22, 0x2, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x0, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 78.074829ms ago: executing program 5 (id=2703): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 45.20572ms ago: executing program 1 (id=2704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$unix(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2, 0x0, 0x5}, 0x18) mlock(&(0x7f0000005000/0x2000)=nil, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x40, 0xff, 0x1, 0x2}, {0x6, 0x58, 0x0, 0x8}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sys_enter\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 44.83842ms ago: executing program 3 (id=2705): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) 32.80615ms ago: executing program 5 (id=2706): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x39, 0x31, 0x33, 0x38, 0x66, 0x36, 0x5c, 0x33, 0x30, 0x61, 0x65, 0x31]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, r0, 0x0, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r5 = epoll_create1(0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r7, 0x0, r6, &(0x7f0000000140)=0x8008, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000000000)={0xa0000001}) epoll_wait(r10, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0xffd5) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r12, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYRESHEX=r9], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010285842895000080ae0000020000200900020073797a310000000008000440000000000900010073797a30000000000800035a0000000a1400000011000100"/100], 0x64}}, 0x0) 18.60014ms ago: executing program 3 (id=2707): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 0s ago: executing program 3 (id=2708): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) clock_gettime(0x0, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/19, 0x13}, {0x0}], 0x2) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) 0s ago: executing program 1 (id=2710): syz_emit_ethernet(0x5a, &(0x7f0000000300)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@broadcast, 0xffffaa7e}, {@local, 0x8001}]}, @generic={0x7, 0x10, "09904b30ad2bb75f7e1e5dec742f"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x3e8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) (async) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) r7 = syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') readlinkat(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x3, 0x7e7b, 0x3, 0x0, r0, 0xf52, '\x00', r1, r7, 0x0, 0x0, 0x4}, 0x50) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r8, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x303, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x85) kernel console output (not intermixed with test programs): sive=1 [ 111.981583][ T29] audit: type=1400 audit(2000000005.580:24472): avc: denied { map } for pid=8384 comm="syz.3.1829" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.006318][ T29] audit: type=1400 audit(2000000005.580:24473): avc: denied { execute } for pid=8384 comm="syz.3.1829" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.030642][ T29] audit: type=1400 audit(2000000005.600:24474): avc: denied { read write } for pid=8384 comm="syz.3.1829" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.055051][ T29] audit: type=1400 audit(2000000005.600:24475): avc: denied { open } for pid=8384 comm="syz.3.1829" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.079299][ T29] audit: type=1400 audit(2000000005.600:24476): avc: denied { ioctl } for pid=8384 comm="syz.3.1829" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.104275][ T29] audit: type=1400 audit(2000000005.600:24477): avc: denied { setattr } for pid=8384 comm="syz.3.1829" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.129457][ T29] audit: type=1326 audit(2000000005.600:24478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e11d5f6c9 code=0x7ffc0000 [ 112.152995][ T29] audit: type=1326 audit(2000000005.600:24479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e11d5f6c9 code=0x7ffc0000 [ 112.177171][ T29] audit: type=1326 audit(2000000005.600:24480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e11d5f6c9 code=0x7ffc0000 [ 112.285820][ T8399] sd 0:0:1:0: device reset [ 112.349616][ T8401] lo speed is unknown, defaulting to 1000 [ 112.445164][ T8413] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 112.445164][ T8413] program syz.5.1840 not setting count and/or reply_len properly [ 112.477805][ T8403] loop1: detected capacity change from 0 to 164 [ 112.499304][ T8403] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 112.522391][ T8403] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 112.596429][ T8428] sd 0:0:1:0: device reset [ 112.624205][ T8433] loop1: detected capacity change from 0 to 256 [ 112.647626][ T8433] FAT-fs (loop1): bogus number of FAT sectors [ 112.649492][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.653730][ T8433] FAT-fs (loop1): Can't find a valid FAT filesystem [ 112.679800][ T8437] loop4: detected capacity change from 0 to 128 [ 112.695598][ T8437] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.730294][ T8437] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.761509][ T8443] FAULT_INJECTION: forcing a failure. [ 112.761509][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 112.774152][ T8443] CPU: 0 UID: 0 PID: 8443 Comm: syz.3.1850 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.774189][ T8443] Tainted: [W]=WARN [ 112.774197][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.774211][ T8443] Call Trace: [ 112.774218][ T8443] [ 112.774226][ T8443] __dump_stack+0x1d/0x30 [ 112.774303][ T8443] dump_stack_lvl+0xe8/0x140 [ 112.774327][ T8443] dump_stack+0x15/0x1b [ 112.774414][ T8443] should_fail_ex+0x265/0x280 [ 112.774452][ T8443] ? nft_trans_table_add+0x36/0x190 [ 112.774474][ T8443] should_failslab+0x8c/0xb0 [ 112.774500][ T8443] __kmalloc_cache_noprof+0x4c/0x4a0 [ 112.774539][ T8443] nft_trans_table_add+0x36/0x190 [ 112.774625][ T8443] nf_tables_newtable+0x955/0xea0 [ 112.774668][ T8443] nfnetlink_rcv+0xbc9/0x16c0 [ 112.774703][ T8443] ? kmem_cache_free+0xe4/0x3d0 [ 112.774763][ T8443] netlink_unicast+0x5c0/0x690 [ 112.774857][ T8443] netlink_sendmsg+0x58b/0x6b0 [ 112.774882][ T8443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.774904][ T8443] __sock_sendmsg+0x145/0x180 [ 112.774935][ T8443] ____sys_sendmsg+0x31e/0x4e0 [ 112.775051][ T8443] ___sys_sendmsg+0x17b/0x1d0 [ 112.775090][ T8443] __x64_sys_sendmsg+0xd4/0x160 [ 112.775113][ T8443] x64_sys_call+0x191e/0x3000 [ 112.775184][ T8443] do_syscall_64+0xd2/0x200 [ 112.775210][ T8443] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.775244][ T8443] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 112.775280][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.775355][ T8443] RIP: 0033:0x7f81da6df6c9 [ 112.775371][ T8443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.775393][ T8443] RSP: 002b:00007f81d9147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.775414][ T8443] RAX: ffffffffffffffda RBX: 00007f81da935fa0 RCX: 00007f81da6df6c9 [ 112.775426][ T8443] RDX: 0000000020000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 112.775441][ T8443] RBP: 00007f81d9147090 R08: 0000000000000000 R09: 0000000000000000 [ 112.775455][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.775499][ T8443] R13: 00007f81da936038 R14: 00007f81da935fa0 R15: 00007ffd44d98838 [ 112.775522][ T8443] [ 113.019707][ T8447] lo speed is unknown, defaulting to 1000 [ 113.060374][ T8449] batadv_slave_1: entered promiscuous mode [ 113.115510][ T8447] syzkaller1: entered promiscuous mode [ 113.121051][ T8447] syzkaller1: entered allmulticast mode [ 113.144147][ T8449] loop5: detected capacity change from 0 to 2048 [ 113.254114][ T8461] loop3: detected capacity change from 0 to 128 [ 113.264864][ T8467] netlink: 'syz.2.1862': attribute type 8 has an invalid length. [ 113.273103][ T8467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8467 comm=syz.2.1862 [ 113.404493][ T8423] batadv_slave_1: left promiscuous mode [ 113.949317][ T8488] sd 0:0:1:0: device reset [ 114.001023][ T8492] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 114.001023][ T8492] program syz.4.1871 not setting count and/or reply_len properly [ 114.190538][ T8506] loop3: detected capacity change from 0 to 512 [ 114.202025][ T8509] loop1: detected capacity change from 0 to 1024 [ 114.209752][ T8506] EXT4-fs: dax option not supported [ 114.227465][ T8509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.260478][ T8509] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1878: Allocating blocks 449-513 which overlap fs metadata [ 114.285995][ T8507] EXT4-fs (loop1): pa ffff888107292770: logic 48, phys. 177, len 21 [ 114.293980][ T8507] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 114.334079][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.416182][ T8535] loop1: detected capacity change from 0 to 128 [ 114.427102][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.427102][ T8535] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 114.441897][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.441897][ T8535] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 114.456435][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.456435][ T8535] loop1: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 114.459311][ T8537] __nla_validate_parse: 6 callbacks suppressed [ 114.459330][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 114.469875][ T8535] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 114.470264][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.470264][ T8535] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 114.470291][ T8535] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 114.470526][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.470526][ T8535] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 114.470997][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.470997][ T8535] loop1: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 114.476868][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1890'. [ 114.485915][ T8535] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 114.494340][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 114.494847][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1890'. [ 114.509672][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.509672][ T8535] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 114.517097][ T8537] netlink: 'syz.2.1890': attribute type 6 has an invalid length. [ 114.530509][ T8535] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 114.612206][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.612206][ T8535] loop1: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 114.626539][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.626539][ T8535] loop1: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 114.640040][ T8535] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 114.649640][ T8535] syz.1.1889: attempt to access beyond end of device [ 114.649640][ T8535] loop1: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 114.663165][ T8535] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 114.674517][ T8535] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 114.683702][ T8535] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 114.693083][ T8535] Buffer I/O error on dev loop1, logical block 119, lost async page write [ 114.701720][ T8535] Buffer I/O error on dev loop1, logical block 120, lost async page write [ 115.104914][ T8596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5130 sclass=netlink_tcpdiag_socket pid=8596 comm=syz.4.1913 [ 115.236925][ T8612] sctp: [Deprecated]: syz.1.1920 (pid 8612) Use of int in max_burst socket option. [ 115.236925][ T8612] Use struct sctp_assoc_value instead [ 115.336386][ T8623] loop1: detected capacity change from 0 to 128 [ 115.393307][ T8638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1930'. [ 115.394058][ T8631] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.402428][ T8638] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1930'. [ 115.426818][ T8640] loop1: detected capacity change from 0 to 512 [ 115.434096][ T8640] EXT4-fs: Ignoring removed nobh option [ 115.439792][ T8640] ext4: Unknown parameter 'fowner>00000000000000000000' [ 115.468462][ T8641] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1928'. [ 115.484294][ T8631] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.526566][ T8631] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.576629][ T8631] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.601695][ T8651] loop4: detected capacity change from 0 to 128 [ 115.668277][ T8669] loop4: detected capacity change from 0 to 512 [ 115.685911][ T8669] EXT4-fs: Ignoring removed nobh option [ 115.691544][ T8669] ext4: Unknown parameter 'fowner>00000000000000000000' [ 115.730421][ T8675] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1942'. [ 115.740273][ T8675] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8675 comm=syz.1.1942 [ 115.767063][ T8678] netlink: 'syz.2.1943': attribute type 39 has an invalid length. [ 115.780777][ T8675] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8675 comm=syz.1.1942 [ 115.819713][ T8684] loop1: detected capacity change from 0 to 1024 [ 115.827228][ T8684] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.840790][ T8684] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1945: Invalid block bitmap block 0 in block_group 0 [ 115.855990][ T8684] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1945: Failed to acquire dquot type 0 [ 115.868390][ T8684] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.1945: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.882080][ T8684] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1945: Invalid inode bitmap blk 0 in block_group 0 [ 115.894880][ T152] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 115.901377][ T8686] loop4: detected capacity change from 0 to 1024 [ 115.914892][ T8684] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 115.923595][ T8686] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.934458][ T8686] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 115.944232][ T8684] EXT4-fs (loop1): 1 orphan inode deleted [ 115.950437][ T8684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.955919][ T152] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.973053][ T8686] JBD2: no valid journal superblock found [ 115.978847][ T8686] EXT4-fs (loop4): Could not load journal inode [ 115.985255][ T152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.002625][ T8684] syz.1.1945 (8684) used greatest stack depth: 9160 bytes left [ 116.011732][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.018394][ T8686] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 116.028479][ T152] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.039259][ T152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.086730][ T8693] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 116.086730][ T8693] program syz.3.1949 not setting count and/or reply_len properly [ 116.141585][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1952'. [ 116.156886][ T8699] netlink: 'syz.4.1952': attribute type 3 has an invalid length. [ 116.164709][ T8699] netlink: 'syz.4.1952': attribute type 3 has an invalid length. [ 116.173848][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1952'. [ 116.218339][ T8711] sd 0:0:1:0: device reset [ 116.282456][ T8721] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 116.282456][ T8721] program syz.3.1962 not setting count and/or reply_len properly [ 116.356297][ T8731] loop1: detected capacity change from 0 to 1024 [ 116.363132][ T8731] EXT4-fs: Ignoring removed orlov option [ 116.372240][ T8731] EXT4-fs error (device loop1): ext4_quota_enable:7136: inode #3: comm syz.1.1967: iget: special inode unallocated [ 116.385772][ T8731] EXT4-fs error (device loop1): ext4_quota_enable:7139: comm syz.1.1967: Bad quota inode: 3, type: 0 [ 116.397206][ T8731] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 116.412330][ T8731] EXT4-fs (loop1): mount failed [ 116.488932][ T8743] loop4: detected capacity change from 0 to 128 [ 116.628891][ T8763] loop1: detected capacity change from 0 to 512 [ 116.642757][ T8761] loop4: detected capacity change from 0 to 512 [ 116.649814][ T8764] loop3: detected capacity change from 0 to 2048 [ 116.650514][ T8761] EXT4-fs: dax option not supported [ 116.660363][ T8763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.676905][ T8763] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.706852][ T8764] Alternate GPT is invalid, using primary GPT. [ 116.713089][ T8764] loop3: p1 p2 p3 [ 116.713058][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.716847][ T8764] loop3: partition table partially beyond EOD, truncated [ 116.744189][ T8768] netlink: 'syz.1.1980': attribute type 28 has an invalid length. [ 116.752793][ T8768] netlink: 'syz.1.1980': attribute type 3 has an invalid length. [ 116.779833][ T8772] futex_wake_op: syz.3.1982 tries to shift op by 144; fix this program [ 116.794288][ T8774] .`: (slave team0): Releasing backup interface [ 116.820127][ T8774] dummy0: left allmulticast mode [ 116.826336][ T8774] bridge0: port 3(dummy0) entered disabled state [ 116.837257][ T8774] bridge_slave_0: left allmulticast mode [ 116.843003][ T8774] bridge_slave_0: left promiscuous mode [ 116.848807][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.858332][ T8774] bridge_slave_1: left allmulticast mode [ 116.864008][ T8774] bridge_slave_1: left promiscuous mode [ 116.869697][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.877190][ T8783] netlink: 'syz.1.1983': attribute type 10 has an invalid length. [ 116.886351][ T8774] .`: (slave bond_slave_0): Releasing backup interface [ 116.894958][ T8774] .`: (slave bond_slave_1): Releasing backup interface [ 116.913201][ T8774] team0: Port device team_slave_0 removed [ 116.921331][ T8774] team0: Port device team_slave_1 removed [ 116.929359][ T8774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.938007][ T8774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.953186][ T8774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.975855][ T29] kauditd_printk_skb: 995 callbacks suppressed [ 116.975887][ T29] audit: type=1400 audit(2000000010.600:25471): avc: denied { block_suspend } for pid=8781 comm="syz.4.1987" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.977087][ T8783] 8021q: adding VLAN 0 to HW filter on device .` [ 117.025461][ T29] audit: type=1400 audit(2000000010.640:25472): avc: denied { kexec_image_load } for pid=8795 comm="syz.2.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 117.053949][ T8783] team0: Port device .` added [ 117.116966][ T29] audit: type=1400 audit(2000000010.740:25473): avc: denied { cpu } for pid=8793 comm="syz.3.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.200254][ T29] audit: type=1400 audit(2000000010.780:25474): avc: denied { module_request } for pid=8793 comm="syz.3.1991" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 117.222324][ T29] audit: type=1400 audit(2000000010.810:25475): avc: denied { sys_module } for pid=8793 comm="syz.3.1991" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 117.344056][ T29] audit: type=1326 audit(2000000010.820:25476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebf1af6c9 code=0x7ffc0000 [ 117.368431][ T29] audit: type=1326 audit(2000000010.820:25477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ebf1af6c9 code=0x7ffc0000 [ 117.384123][ T8809] sd 0:0:1:0: device reset [ 117.392034][ T29] audit: type=1326 audit(2000000010.820:25478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebf1af6c9 code=0x7ffc0000 [ 117.420766][ T29] audit: type=1326 audit(2000000010.820:25479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ebf1af6c9 code=0x7ffc0000 [ 117.444994][ T29] audit: type=1326 audit(2000000010.820:25480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8803 comm="syz.5.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ebf1af6c9 code=0x7ffc0000 [ 117.517653][ T8811] loop5: detected capacity change from 0 to 128 [ 117.546566][ T8811] vfat: Unknown parameter '017777777777777777777770000000000000000000000018446744073709551615ÿÿ' [ 117.644964][ T8811] loop5: detected capacity change from 0 to 1024 [ 117.669099][ T8811] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 117.695099][ T8811] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.720013][ T8811] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 117.755153][ T8811] EXT4-fs (loop5): orphan cleanup on readonly fs [ 117.763113][ T8811] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.1996: Inode bitmap for bg 0 marked uninitialized [ 117.827421][ T8811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.918628][ T8811] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 117.964673][ T5596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.042851][ T8799] syz.4.1987 (8799) used greatest stack depth: 6376 bytes left [ 118.117109][ T8832] futex_wake_op: syz.2.2005 tries to shift op by 144; fix this program [ 118.337818][ T8840] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 118.337818][ T8840] program syz.4.2007 not setting count and/or reply_len properly [ 118.382626][ T8844] sd 0:0:1:0: device reset [ 118.494730][ T8859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=8859 comm=syz.2.2017 [ 118.559421][ T8862] lo speed is unknown, defaulting to 1000 [ 118.570702][ T8868] loop4: detected capacity change from 0 to 512 [ 118.581218][ T8868] EXT4-fs: dax option not supported [ 118.620223][ T8872] sg_read: process 1123 (syz.4.2022) changed security contexts after opening file descriptor, this is not allowed. [ 118.653773][ T8878] sd 0:0:1:0: device reset [ 118.663983][ T8877] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 118.696945][ T8882] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 118.713172][ T8882] dummy0: entered promiscuous mode [ 118.722577][ T8882] $Hÿ: (slave dummy0): Releasing backup interface [ 118.737060][ T8882] dummy0: left allmulticast mode [ 118.743698][ T8882] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 118.744733][ T8884] loop1: detected capacity change from 0 to 1024 [ 118.802316][ T8884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.852410][ T8884] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 118.876593][ T8884] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 118.888828][ T8884] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.888828][ T8884] [ 118.898511][ T8884] EXT4-fs (loop1): Total free blocks count 0 [ 118.904507][ T8884] EXT4-fs (loop1): Free/Dirty block details [ 118.911099][ T8884] EXT4-fs (loop1): free_blocks=68451041280 [ 118.917115][ T8884] EXT4-fs (loop1): dirty_blocks=80 [ 118.922305][ T8884] EXT4-fs (loop1): Block reservation details [ 118.928313][ T8884] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 118.965777][ T152] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 118.990121][ T8909] loop5: detected capacity change from 0 to 512 [ 118.996880][ T8909] ext4: Unknown parameter 'obj_type' [ 119.048291][ T8914] random: crng reseeded on system resumption [ 119.080790][ T8914] Restarting kernel threads ... [ 119.096954][ T8922] sd 0:0:1:0: device reset [ 119.105931][ T8914] Done restarting kernel threads. [ 119.118559][ T8914] loop1: detected capacity change from 0 to 128 [ 119.141429][ T8914] msdos: Unknown parameter '000000000000000000030x0000000000000000' [ 119.202067][ T8929] netlink: 'syz.2.2043': attribute type 5 has an invalid length. [ 119.424151][ T8951] sd 0:0:1:0: device reset [ 119.524511][ T8956] lo speed is unknown, defaulting to 1000 [ 119.556523][ T8958] loop4: detected capacity change from 0 to 512 [ 119.576315][ T8955] lo speed is unknown, defaulting to 1000 [ 119.599491][ T8958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.691964][ T8965] __nla_validate_parse: 11 callbacks suppressed [ 119.691982][ T8965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2054'. [ 119.707411][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2054'. [ 119.717047][ T8965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2054'. [ 119.730422][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2054'. [ 119.739411][ T8965] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2054'. [ 119.908045][ T8974] loop5: detected capacity change from 0 to 256 [ 119.941910][ T8978] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 119.941910][ T8978] program syz.3.2060 not setting count and/or reply_len properly [ 120.272094][ T9001] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.287838][ T9001] tipc: Started in network mode [ 120.292939][ T9001] tipc: Node identity ac14140f, cluster identity 4711 [ 120.315109][ T9001] tipc: New replicast peer: 255.255.255.255 [ 120.321283][ T9001] tipc: Enabled bearer , priority 10 [ 120.429733][ T9007] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2073'. [ 120.621171][ T9014] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 120.711423][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'. [ 120.721222][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.769541][ T9021] loop4: detected capacity change from 0 to 512 [ 120.788219][ T9021] EXT4-fs: dax option not supported [ 120.866764][ T9035] sd 0:0:1:0: device reset [ 120.878269][ T9032] loop3: detected capacity change from 0 to 2048 [ 120.883455][ T9025] loop5: detected capacity change from 0 to 8192 [ 120.897220][ T9025] vfat: Unknown parameter '01777777777777777777777' [ 120.913913][ T9038] netlink: 'syz.4.2087': attribute type 1 has an invalid length. [ 120.921755][ T9038] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2087'. [ 120.936512][ T9032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.954022][ T9016] FAULT_INJECTION: forcing a failure. [ 120.954022][ T9016] name failslab, interval 1, probability 0, space 0, times 0 [ 120.966772][ T9016] CPU: 0 UID: 0 PID: 9016 Comm: syz.3.2077 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 120.966806][ T9016] Tainted: [W]=WARN [ 120.966814][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.966831][ T9016] Call Trace: [ 120.966837][ T9016] [ 120.966866][ T9016] __dump_stack+0x1d/0x30 [ 120.966963][ T9016] dump_stack_lvl+0xe8/0x140 [ 120.966987][ T9016] dump_stack+0x15/0x1b [ 120.967008][ T9016] should_fail_ex+0x265/0x280 [ 120.967030][ T9016] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 120.967066][ T9016] should_failslab+0x8c/0xb0 [ 120.967163][ T9016] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 120.967244][ T9016] ? ext4_alloc_inode+0x38/0x310 [ 120.967274][ T9016] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 120.967297][ T9016] ext4_alloc_inode+0x38/0x310 [ 120.967329][ T9016] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 120.967363][ T9016] alloc_inode+0x40/0x170 [ 120.967466][ T9016] iget_locked+0xf9/0x5d0 [ 120.967548][ T9016] __ext4_iget+0x152/0x22d0 [ 120.967627][ T9016] ? may_create+0x26e/0x2b0 [ 120.967661][ T9016] ext4_lookup+0x161/0x390 [ 120.967687][ T9016] ? __pfx_ext4_lookup+0x10/0x10 [ 120.967733][ T9016] path_openat+0xcf3/0x2170 [ 120.967772][ T9016] do_filp_open+0x109/0x230 [ 120.967810][ T9016] do_sys_openat2+0xa6/0x110 [ 120.967836][ T9016] __x64_sys_creat+0x65/0x90 [ 120.967879][ T9016] x64_sys_call+0x2da3/0x3000 [ 120.967908][ T9016] do_syscall_64+0xd2/0x200 [ 120.967932][ T9016] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.967968][ T9016] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.968089][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.968115][ T9016] RIP: 0033:0x7f81da6df6c9 [ 120.968138][ T9016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.968161][ T9016] RSP: 002b:00007f81d9147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 120.968233][ T9016] RAX: ffffffffffffffda RBX: 00007f81da935fa0 RCX: 00007f81da6df6c9 [ 120.968248][ T9016] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000002c0 [ 120.968263][ T9016] RBP: 00007f81d9147090 R08: 0000000000000000 R09: 0000000000000000 [ 120.968278][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.968293][ T9016] R13: 00007f81da936038 R14: 00007f81da935fa0 R15: 00007ffd44d98838 [ 120.968318][ T9016] [ 121.251980][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.273421][ T9058] loop4: detected capacity change from 0 to 512 [ 121.287238][ T9058] EXT4-fs: dax option not supported [ 121.317191][ T9068] sd 0:0:1:0: device reset [ 121.345082][ T3425] tipc: Node number set to 2886997007 [ 121.401039][ T9079] loop3: detected capacity change from 0 to 2048 [ 121.417686][ T9079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.430113][ T9079] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.503866][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.710980][ T9090] loop1: detected capacity change from 0 to 1024 [ 121.718516][ T9090] EXT4-fs: Ignoring removed bh option [ 121.727130][ T9090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.757184][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.786344][ T9094] 9pnet_fd: Insufficient options for proto=fd [ 121.844488][ T9099] loop5: detected capacity change from 0 to 10063 [ 121.859758][ T9099] loop5: detected capacity change from 10063 to 13103 [ 122.036586][ T29] kauditd_printk_skb: 486 callbacks suppressed [ 122.036613][ T29] audit: type=1326 audit(2000000015.660:25967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.067600][ T29] audit: type=1326 audit(2000000015.660:25968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.091110][ T29] audit: type=1326 audit(2000000015.660:25969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.115446][ T29] audit: type=1326 audit(2000000015.660:25970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.139279][ T29] audit: type=1326 audit(2000000015.660:25971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.163382][ T29] audit: type=1326 audit(2000000015.660:25972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.187531][ T29] audit: type=1326 audit(2000000015.660:25973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.211041][ T29] audit: type=1326 audit(2000000015.660:25974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.235401][ T29] audit: type=1326 audit(2000000015.660:25975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.259012][ T29] audit: type=1326 audit(2000000015.660:25976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 122.324908][ T9116] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 122.324908][ T9116] program syz.1.2115 not setting count and/or reply_len properly [ 122.401180][ T9129] loop4: detected capacity change from 0 to 256 [ 122.413759][ T9129] FAT-fs (loop4): Directory bread(block 64) failed [ 122.420343][ T9129] FAT-fs (loop4): Directory bread(block 65) failed [ 122.427498][ T9129] FAT-fs (loop4): Directory bread(block 66) failed [ 122.449270][ T9129] FAT-fs (loop4): Directory bread(block 67) failed [ 122.457431][ T9129] FAT-fs (loop4): Directory bread(block 68) failed [ 122.464939][ T9129] FAT-fs (loop4): Directory bread(block 69) failed [ 122.471978][ T9129] FAT-fs (loop4): Directory bread(block 70) failed [ 122.488574][ T9129] FAT-fs (loop4): Directory bread(block 71) failed [ 122.495430][ T9129] FAT-fs (loop4): Directory bread(block 72) failed [ 122.502085][ T9129] FAT-fs (loop4): Directory bread(block 73) failed [ 122.521239][ T9136] loop1: detected capacity change from 0 to 1024 [ 122.538319][ T9136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.589427][ T9149] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 122.589427][ T9149] program syz.4.2129 not setting count and/or reply_len properly [ 122.625591][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2128'. [ 122.634553][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2128'. [ 122.791459][ T9163] lo speed is unknown, defaulting to 1000 [ 122.968686][ T9173] sd 0:0:1:0: device reset [ 122.997033][ T9176] FAULT_INJECTION: forcing a failure. [ 122.997033][ T9176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.010150][ T9176] CPU: 0 UID: 0 PID: 9176 Comm: syz.3.2140 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.010218][ T9176] Tainted: [W]=WARN [ 123.010224][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.010235][ T9176] Call Trace: [ 123.010241][ T9176] [ 123.010248][ T9176] __dump_stack+0x1d/0x30 [ 123.010269][ T9176] dump_stack_lvl+0xe8/0x140 [ 123.010288][ T9176] dump_stack+0x15/0x1b [ 123.010315][ T9176] should_fail_ex+0x265/0x280 [ 123.010384][ T9176] should_fail+0xb/0x20 [ 123.010400][ T9176] should_fail_usercopy+0x1a/0x20 [ 123.010420][ T9176] _copy_from_iter+0xd2/0xe80 [ 123.010445][ T9176] ? alloc_pages_mpol+0x217/0x260 [ 123.010504][ T9176] ? __rcu_read_unlock+0x4f/0x70 [ 123.010532][ T9176] copy_page_from_iter+0x178/0x2a0 [ 123.010556][ T9176] tun_get_user+0x679/0x26e0 [ 123.010621][ T9176] ? ref_tracker_alloc+0x1f2/0x2f0 [ 123.010660][ T9176] tun_chr_write_iter+0x15e/0x210 [ 123.010688][ T9176] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 123.010765][ T9176] vfs_write+0x52a/0x960 [ 123.010796][ T9176] ksys_write+0xda/0x1a0 [ 123.010869][ T9176] __x64_sys_write+0x40/0x50 [ 123.010957][ T9176] x64_sys_call+0x2802/0x3000 [ 123.010979][ T9176] do_syscall_64+0xd2/0x200 [ 123.010999][ T9176] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.011026][ T9176] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 123.011112][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.011132][ T9176] RIP: 0033:0x7f81da6de17f [ 123.011146][ T9176] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 123.011164][ T9176] RSP: 002b:00007f81d9147000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 123.011225][ T9176] RAX: ffffffffffffffda RBX: 00007f81da935fa0 RCX: 00007f81da6de17f [ 123.011238][ T9176] RDX: 000000000000003a RSI: 0000200000000440 RDI: 00000000000000c8 [ 123.011249][ T9176] RBP: 00007f81d9147090 R08: 0000000000000000 R09: 0000000000000000 [ 123.011261][ T9176] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 123.011290][ T9176] R13: 00007f81da936038 R14: 00007f81da935fa0 R15: 00007ffd44d98838 [ 123.011309][ T9176] [ 123.275469][ T9177] lo speed is unknown, defaulting to 1000 [ 123.290104][ T9183] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 123.290104][ T9183] program syz.3.2143 not setting count and/or reply_len properly [ 123.362053][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.427488][ T9196] loop3: detected capacity change from 0 to 256 [ 123.446228][ T9200] loop4: detected capacity change from 0 to 1024 [ 123.453069][ T9200] EXT4-fs: Ignoring removed orlov option [ 123.463495][ T9200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.490991][ T9205] sit0: entered promiscuous mode [ 123.496034][ T9205] sit0: left allmulticast mode [ 123.509041][ T9205] netlink: 'syz.3.2152': attribute type 1 has an invalid length. [ 123.509639][ T9206] netlink: 'syz.3.2152': attribute type 1 has an invalid length. [ 123.526081][ T9204] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 123.569983][ T9204] bond2 (unregistering): Released all slaves [ 123.585373][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.620348][ T9218] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 123.620348][ T9218] program syz.4.2155 not setting count and/or reply_len properly [ 123.747363][ T9235] netlink: 'syz.2.2164': attribute type 3 has an invalid length. [ 123.747418][ T9235] netlink: 'syz.2.2164': attribute type 3 has an invalid length. [ 123.764478][ T9233] ------------[ cut here ]------------ [ 123.764486][ T9233] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 123.764725][ T9233] WARNING: CPU: 1 PID: 9233 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 123.764763][ T9233] Modules linked in: [ 123.764781][ T9233] CPU: 1 UID: 0 PID: 9233 Comm: syz.3.2163 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 123.764846][ T9233] Tainted: [W]=WARN [ 123.764854][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.764869][ T9233] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 123.764901][ T9233] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 b2 f6 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 123.764924][ T9233] RSP: 0018:ffffc90000ee3408 EFLAGS: 00010282 [ 123.764949][ T9233] RAX: 59df039964f82600 RBX: ffff88811a110270 RCX: ffff88810981b180 [ 123.764961][ T9233] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 123.764972][ T9233] RBP: 00000000ffffdfcc R08: 0001ffff8684810f R09: 0000000000000000 [ 123.764984][ T9233] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88811a110230 [ 123.764995][ T9233] R13: ffff88813dfc0000 R14: ffff88813dfc0000 R15: ffff88811a110268 [ 123.765039][ T9233] FS: 00007f81d91476c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 123.765060][ T9233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.765092][ T9233] CR2: 00007f3e107bef98 CR3: 00000001371c8000 CR4: 00000000003506f0 [ 123.765111][ T9233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.765121][ T9233] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 123.765135][ T9233] Call Trace: [ 123.765143][ T9233] [ 123.765160][ T9233] reg_set_min_max+0x1c1/0x260 [ 123.765193][ T9233] check_cond_jmp_op+0x1370/0x19e0 [ 123.765260][ T9233] do_check+0x3363/0x8460 [ 123.765297][ T9233] ? do_check_common+0x198/0x12b0 [ 123.765316][ T9233] do_check_common+0xc5e/0x12b0 [ 123.765386][ T9233] bpf_check+0xaaae/0xd9d0 [ 123.765422][ T9233] ? trace_reschedule_exit+0xd/0xc0 [ 123.765507][ T9233] ? sysvec_reschedule_ipi+0x4f/0x70 [ 123.765611][ T9233] ? trace_reschedule_exit+0xd/0xc0 [ 123.765645][ T9233] ? bpf_send_signal_common+0x2ce/0x300 [ 123.765684][ T9233] ? bpf_send_signal_common+0x2ce/0x300 [ 123.765715][ T9233] ? __rcu_read_unlock+0x4f/0x70 [ 123.765758][ T9233] ? bpf_send_signal_common+0x2ce/0x300 [ 123.765789][ T9233] ? __rcu_read_unlock+0x4f/0x70 [ 123.765815][ T9233] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 123.765925][ T9233] ? __rcu_read_unlock+0x4f/0x70 [ 123.765949][ T9233] ? perf_cgroup_switch+0x10c/0x480 [ 123.765991][ T9233] ? bpf_trace_run4+0x134/0x1d0 [ 123.766039][ T9233] ? finish_task_switch+0xad/0x2b0 [ 123.766110][ T9233] ? __schedule+0x6b9/0xb30 [ 123.766195][ T9233] ? should_fail_ex+0x30/0x280 [ 123.766212][ T9233] ? should_failslab+0x8c/0xb0 [ 123.766328][ T9233] ? __kmalloc_noprof+0x2a2/0x570 [ 123.766364][ T9233] ? security_bpf_prog_load+0x60/0x140 [ 123.766400][ T9233] ? selinux_bpf_prog_load+0xad/0xd0 [ 123.766508][ T9233] ? security_bpf_prog_load+0x9e/0x140 [ 123.766553][ T9233] bpf_prog_load+0xf6e/0x1100 [ 123.766580][ T9233] ? security_bpf+0x2b/0x90 [ 123.766684][ T9233] __sys_bpf+0x469/0x7c0 [ 123.766716][ T9233] __x64_sys_bpf+0x41/0x50 [ 123.766755][ T9233] x64_sys_call+0x2aee/0x3000 [ 123.766783][ T9233] do_syscall_64+0xd2/0x200 [ 123.766843][ T9233] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.766917][ T9233] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 123.766972][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.766996][ T9233] RIP: 0033:0x7f81da6df6c9 [ 123.767009][ T9233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.767026][ T9233] RSP: 002b:00007f81d9147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.767077][ T9233] RAX: ffffffffffffffda RBX: 00007f81da935fa0 RCX: 00007f81da6df6c9 [ 123.767088][ T9233] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 123.767100][ T9233] RBP: 00007f81da761f91 R08: 0000000000000000 R09: 0000000000000000 [ 123.767115][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.767125][ T9233] R13: 00007f81da936038 R14: 00007f81da935fa0 R15: 00007ffd44d98838 [ 123.767143][ T9233] [ 123.767149][ T9233] ---[ end trace 0000000000000000 ]--- [ 123.830015][ T9235] netlink: 'syz.2.2164': attribute type 3 has an invalid length. [ 124.051601][ T9244] loop5: detected capacity change from 0 to 128 [ 124.052849][ T9244] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 124.060936][ T9244] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 124.060955][ T9244] FAT-fs (loop5): Filesystem has been set read-only [ 124.061067][ T9244] bio_check_eod: 27 callbacks suppressed [ 124.061077][ T9244] syz.5.2166: attempt to access beyond end of device [ 124.061077][ T9244] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 124.061118][ T9244] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 124.061216][ T9244] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 124.209066][ T9253] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 124.209066][ T9253] program syz.3.2170 not setting count and/or reply_len properly [ 124.220834][ T9252] sctp: [Deprecated]: syz.5.2167 (pid 9252) Use of int in max_burst socket option. [ 124.220834][ T9252] Use struct sctp_assoc_value instead [ 124.694903][ T9280] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 124.694903][ T9280] program syz.5.2181 not setting count and/or reply_len properly [ 124.747387][ T9285] vlan2: entered allmulticast mode [ 124.752608][ T9285] bridge_slave_0: entered allmulticast mode [ 125.024099][ T9312] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 125.024099][ T9312] program syz.4.2192 not setting count and/or reply_len properly [ 125.059715][ T9314] sd 0:0:1:0: device reset [ 125.085179][ T9316] __nla_validate_parse: 5 callbacks suppressed [ 125.085192][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2194'. [ 125.100370][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2194'. [ 125.150803][ T9320] loop4: detected capacity change from 0 to 512 [ 125.158319][ T9320] EXT4-fs: dax option not supported [ 125.181387][ T9322] loop3: detected capacity change from 0 to 128 [ 125.329002][ T9327] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 125.427869][ T9334] loop4: detected capacity change from 0 to 512 [ 125.450898][ T9332] loop9: detected capacity change from 0 to 7 [ 125.468860][ T9332] buffer_io_error: 14 callbacks suppressed [ 125.468877][ T9332] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.483149][ T9332] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.491185][ T9332] loop9: unable to read partition table [ 125.498279][ T9332] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 125.498279][ T9332] ) failed (rc=-5) [ 125.654509][ T9338] loop3: detected capacity change from 0 to 512 [ 125.686796][ T9334] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2198: bad orphan inode 13 [ 125.697445][ T9334] ext4_test_bit(bit=12, block=4) = 1 [ 125.702936][ T9334] is_bad_inode(inode)=0 [ 125.707204][ T9334] NEXT_ORPHAN(inode)=0 [ 125.711280][ T9334] max_ino=32 [ 125.714473][ T9334] i_nlink=1 [ 125.718624][ T9334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.736681][ T9325] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2198: Unrecognised inode hash code 20 [ 125.748130][ T9325] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2198: Corrupt directory, running e2fsck is recommended [ 125.761871][ T9325] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2198: Unrecognised inode hash code 20 [ 125.773381][ T9325] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2198: Corrupt directory, running e2fsck is recommended [ 125.774495][ T9338] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2202: inode has both inline data and extents flags [ 125.822476][ T9338] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2202: couldn't read orphan inode 15 (err -117) [ 125.837345][ T9338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.853658][ T9346] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 125.853658][ T9346] program syz.5.2204 not setting count and/or reply_len properly [ 125.911598][ T9352] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 125.944959][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.008574][ T9363] loop5: detected capacity change from 0 to 512 [ 126.028567][ T9362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2211'. [ 126.033199][ T9363] EXT4-fs: dax option not supported [ 126.040517][ T9362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2211'. [ 126.101409][ T9373] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 126.101409][ T9373] program syz.3.2217 not setting count and/or reply_len properly [ 126.154205][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.160845][ T9383] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2223'. [ 126.262594][ T9398] loop1: detected capacity change from 0 to 128 [ 126.272942][ T9398] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 126.307622][ T31] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 126.332060][ T9406] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 126.332060][ T9406] program syz.1.2231 not setting count and/or reply_len properly [ 126.365959][ T9407] netlink: 'syz.5.2232': attribute type 13 has an invalid length. [ 126.374899][ T9407] FAULT_INJECTION: forcing a failure. [ 126.374899][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 126.388198][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.5.2232 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 126.388230][ T9407] Tainted: [W]=WARN [ 126.388238][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.388284][ T9407] Call Trace: [ 126.388291][ T9407] [ 126.388297][ T9407] __dump_stack+0x1d/0x30 [ 126.388321][ T9407] dump_stack_lvl+0xe8/0x140 [ 126.388343][ T9407] dump_stack+0x15/0x1b [ 126.388409][ T9407] should_fail_ex+0x265/0x280 [ 126.388427][ T9407] ? sctp_inet6addr_event+0x1f8/0x3f0 [ 126.388477][ T9407] should_failslab+0x8c/0xb0 [ 126.388510][ T9407] __kmalloc_cache_noprof+0x4c/0x4a0 [ 126.388599][ T9407] ? __pfx_sctp_inet6addr_event+0x10/0x10 [ 126.388628][ T9407] sctp_inet6addr_event+0x1f8/0x3f0 [ 126.388655][ T9407] ? inet6addr_event+0x7b/0xa0 [ 126.388677][ T9407] ? masq_inet6_event+0xb3/0xe0 [ 126.388714][ T9407] ? __pfx_sctp_inet6addr_event+0x10/0x10 [ 126.388737][ T9407] atomic_notifier_call_chain+0x76/0x1c0 [ 126.388801][ T9407] ? inet6addr_notifier_call_chain+0x12/0x30 [ 126.388828][ T9407] inet6addr_notifier_call_chain+0x24/0x30 [ 126.388861][ T9407] ipv6_add_addr+0x7fd/0x830 [ 126.388902][ T9407] add_addr+0x89/0x1e0 [ 126.388930][ T9407] addrconf_init_auto_addrs+0x189/0x690 [ 126.388956][ T9407] ? __pfx_taprio_dev_notifier+0x10/0x10 [ 126.388992][ T9407] ? taprio_dev_notifier+0xed/0x740 [ 126.389069][ T9407] ? __pfx_tbf_reset+0x10/0x10 [ 126.389099][ T9407] ? qdisc_reset+0x214/0x2f0 [ 126.389132][ T9407] ? tun_device_event+0x49/0x9a0 [ 126.389161][ T9407] ? _raw_spin_unlock+0x26/0x50 [ 126.389253][ T9407] ? cbs_dev_notifier+0xf7/0x210 [ 126.389335][ T9407] ? addrconf_link_ready+0xc4/0xf0 [ 126.389431][ T9407] addrconf_notify+0x72c/0x930 [ 126.389466][ T9407] ? __pfx_addrconf_notify+0x10/0x10 [ 126.389501][ T9407] raw_notifier_call_chain+0x6f/0x1b0 [ 126.389591][ T9407] ? call_netdevice_notifiers_info+0x9c/0x100 [ 126.389621][ T9407] call_netdevice_notifiers_info+0xae/0x100 [ 126.389649][ T9407] netif_state_change+0x16d/0x1f0 [ 126.389684][ T9407] do_setlink+0x60e/0x2810 [ 126.389773][ T9407] ? save_fpregs_to_fpstate+0x100/0x160 [ 126.389811][ T9407] ? _raw_spin_unlock+0x26/0x50 [ 126.389855][ T9407] ? finish_task_switch+0xad/0x2b0 [ 126.389894][ T9407] ? __schedule+0x6b9/0xb30 [ 126.389958][ T9407] rtnl_newlink+0xd8b/0x12d0 [ 126.389997][ T9407] ? prandom_u32_state+0xa7/0xd0 [ 126.390025][ T9407] ? __rcu_read_unlock+0x34/0x70 [ 126.390049][ T9407] ? bpf_trace_run3+0x12c/0x1d0 [ 126.390093][ T9407] ? __memcg_slab_free_hook+0x135/0x230 [ 126.390116][ T9407] ? __rcu_read_unlock+0x4f/0x70 [ 126.390149][ T9407] ? avc_has_perm_noaudit+0x1b1/0x200 [ 126.390181][ T9407] ? cred_has_capability+0x210/0x280 [ 126.390212][ T9407] ? selinux_capable+0x31/0x40 [ 126.390232][ T9407] ? security_capable+0x83/0x90 [ 126.390273][ T9407] ? ns_capable+0x7d/0xb0 [ 126.390295][ T9407] ? __pfx_rtnl_newlink+0x10/0x10 [ 126.390372][ T9407] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 126.390471][ T9407] netlink_rcv_skb+0x123/0x220 [ 126.390551][ T9407] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.390578][ T9407] rtnetlink_rcv+0x1c/0x30 [ 126.390596][ T9407] netlink_unicast+0x5c0/0x690 [ 126.390658][ T9407] netlink_sendmsg+0x58b/0x6b0 [ 126.390677][ T9407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.390785][ T9407] __sock_sendmsg+0x145/0x180 [ 126.390808][ T9407] ____sys_sendmsg+0x31e/0x4e0 [ 126.390883][ T9407] ___sys_sendmsg+0x17b/0x1d0 [ 126.390912][ T9407] __x64_sys_sendmsg+0xd4/0x160 [ 126.390933][ T9407] x64_sys_call+0x191e/0x3000 [ 126.390953][ T9407] do_syscall_64+0xd2/0x200 [ 126.391049][ T9407] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 126.391075][ T9407] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 126.391105][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.391123][ T9407] RIP: 0033:0x7f0ebf1af6c9 [ 126.391137][ T9407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.391189][ T9407] RSP: 002b:00007f0ebdc0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.391206][ T9407] RAX: ffffffffffffffda RBX: 00007f0ebf405fa0 RCX: 00007f0ebf1af6c9 [ 126.391235][ T9407] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000006 [ 126.391246][ T9407] RBP: 00007f0ebdc0f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.391257][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.391332][ T9407] R13: 00007f0ebf406038 R14: 00007f0ebf405fa0 R15: 00007ffe47874328 [ 126.391349][ T9407] [ 126.964205][ T9429] cgroup: Unexpected value for 'nofavordynmods' [ 126.967261][ T9430] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2242'. [ 127.038463][ T9438] loop4: detected capacity change from 0 to 512 [ 127.053489][ T9438] EXT4-fs: dax option not supported [ 127.127054][ T29] kauditd_printk_skb: 1673 callbacks suppressed [ 127.127069][ T29] audit: type=1400 audit(2000000020.750:27650): avc: denied { mount } for pid=9450 comm="syz.4.2250" name="/" dev="configfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 127.193627][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2251'. [ 127.212007][ T31] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.212018][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2251'. [ 127.229680][ T31] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.239180][ T9460] netlink: 706 bytes leftover after parsing attributes in process `syz.1.2251'. [ 127.251880][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2251'. [ 127.260976][ T29] audit: type=1400 audit(2000000020.870:27651): avc: denied { write } for pid=9453 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.281506][ T152] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.290542][ T152] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.324538][ T29] audit: type=1326 audit(2000000020.930:27652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81da6df6c9 code=0x7ffc0000 [ 127.332696][ T9464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.348111][ T29] audit: type=1326 audit(2000000020.930:27653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81da6df6c9 code=0x7ffc0000 [ 127.348144][ T29] audit: type=1400 audit(2000000020.930:27654): avc: denied { ioctl } for pid=9461 comm="syz.2.2254" path="socket:[25113]" dev="sockfs" ino=25113 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.348177][ T29] audit: type=1326 audit(2000000020.930:27655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81da6df6c9 code=0x7ffc0000 [ 127.348276][ T29] audit: type=1326 audit(2000000020.930:27656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81da6df6c9 code=0x7ffc0000 [ 127.348303][ T29] audit: type=1326 audit(2000000020.930:27657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81da6df6c9 code=0x7ffc0000 [ 127.348332][ T29] audit: type=1326 audit(2000000020.930:27658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81da6df6c9 code=0x7ffc0000 [ 127.348366][ T29] audit: type=1326 audit(2000000020.930:27659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.3.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81da6df6c9 code=0x7ffc0000 [ 127.614569][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.625471][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.942784][ T9511] loop3: detected capacity change from 0 to 512 [ 127.950366][ T9511] EXT4-fs: dax option not supported [ 127.983767][ T9513] sd 0:0:1:0: device reset [ 128.161377][ T9534] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 128.161377][ T9534] program syz.3.2282 not setting count and/or reply_len properly [ 128.314721][ T9545] sd 0:0:1:0: device reset [ 128.341488][ T9547] loop3: detected capacity change from 0 to 512 [ 128.347995][ T9547] EXT4-fs: dax option not supported [ 128.438030][ T9559] netlink: 'syz.3.2288': attribute type 10 has an invalid length. [ 128.446163][ T9559] team0: entered promiscuous mode [ 128.451219][ T9559] team_slave_0: entered promiscuous mode [ 128.457059][ T9559] team_slave_1: entered promiscuous mode [ 128.462748][ T9559] $Hÿ: entered promiscuous mode [ 128.467924][ T9559] bond_slave_0: entered promiscuous mode [ 128.473683][ T9559] bond_slave_1: entered promiscuous mode [ 129.238193][ T9572] lo speed is unknown, defaulting to 1000 [ 129.267609][ T9572] netlink: 'syz.3.2296': attribute type 12 has an invalid length. [ 129.736295][ T9582] lo speed is unknown, defaulting to 1000 [ 129.877596][ T9582] chnl_net:caif_netlink_parms(): no params data found [ 129.939203][ T9582] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.946420][ T9582] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.953688][ T9582] bridge_slave_0: entered allmulticast mode [ 129.960271][ T9582] bridge_slave_0: entered promiscuous mode [ 129.969629][ T9582] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.976725][ T9582] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.983929][ T9582] bridge_slave_1: entered allmulticast mode [ 129.990543][ T9582] bridge_slave_1: entered promiscuous mode [ 130.008385][ T9582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.019388][ T9582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.039380][ T9582] team0: Port device team_slave_0 added [ 130.046146][ T9582] team0: Port device team_slave_1 added [ 130.061563][ T9582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.068786][ T9582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.094706][ T9582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.106453][ T9582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.113388][ T9582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.139456][ T9582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.173665][ T9599] loop3: detected capacity change from 0 to 512 [ 130.180873][ T9599] EXT4-fs: dax option not supported [ 130.228529][ T9582] hsr_slave_0: entered promiscuous mode [ 130.239220][ T9582] hsr_slave_1: entered promiscuous mode [ 130.249976][ T9582] debugfs: 'hsr0' already exists in 'hsr' [ 130.255801][ T9582] Cannot create hsr debugfs directory [ 130.264512][ T2133] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.313867][ T9609] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 130.313867][ T9609] program syz.5.2305 not setting count and/or reply_len properly [ 130.347691][ T2133] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.472096][ T2133] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.496438][ T9615] loop1: detected capacity change from 0 to 512 [ 130.523721][ T9615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.538471][ T2133] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.550321][ T9615] EXT4-fs error (device loop1): ext4_get_first_dir_block:3529: inode #12: comm syz.1.2308: Directory block failed checksum [ 130.592894][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.737891][ T9624] ip6gre1: entered promiscuous mode [ 130.743291][ T9624] ip6gre1: entered allmulticast mode [ 130.750292][ T152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.757918][ T152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.785219][ T3422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.794331][ T9624] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.836153][ T3422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.867815][ T9625] netlink: 'syz.4.2310': attribute type 1 has an invalid length. [ 130.988293][ T2133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.003425][ T2133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.013806][ T2133] bond0 (unregistering): Released all slaves [ 131.026426][ T2133] bond1 (unregistering): Released all slaves [ 131.035680][ T2133] bond2 (unregistering): Released all slaves [ 131.044287][ T2133] bond3 (unregistering): Released all slaves [ 131.055321][ T3422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.082843][ T9631] x_tables: duplicate underflow at hook 1 [ 131.120090][ T9640] FAULT_INJECTION: forcing a failure. [ 131.120090][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 131.129381][ T9642] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 131.129381][ T9642] program syz.4.2315 not setting count and/or reply_len properly [ 131.132801][ T9640] CPU: 1 UID: 0 PID: 9640 Comm: syz.3.2314 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 131.132908][ T9640] Tainted: [W]=WARN [ 131.132916][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.132932][ T9640] Call Trace: [ 131.132940][ T9640] [ 131.132949][ T9640] __dump_stack+0x1d/0x30 [ 131.132976][ T9640] dump_stack_lvl+0xe8/0x140 [ 131.133002][ T9640] dump_stack+0x15/0x1b [ 131.133041][ T9640] should_fail_ex+0x265/0x280 [ 131.133065][ T9640] ? alloc_netdev_mqs+0x7da/0xa50 [ 131.133095][ T9640] should_failslab+0x8c/0xb0 [ 131.133132][ T9640] __kmalloc_cache_noprof+0x4c/0x4a0 [ 131.133175][ T9640] alloc_netdev_mqs+0x7da/0xa50 [ 131.133247][ T9640] tun_set_iff+0x42c/0x8a0 [ 131.133286][ T9640] __tun_chr_ioctl+0x5f0/0x14c0 [ 131.133388][ T9640] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 131.133464][ T9640] tun_chr_ioctl+0x27/0x40 [ 131.133496][ T9640] __se_sys_ioctl+0xce/0x140 [ 131.133524][ T9640] __x64_sys_ioctl+0x43/0x50 [ 131.133605][ T9640] x64_sys_call+0x1816/0x3000 [ 131.133633][ T9640] do_syscall_64+0xd2/0x200 [ 131.133658][ T9640] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 131.133694][ T9640] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 131.133786][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.133806][ T9640] RIP: 0033:0x7f81da6df6c9 [ 131.133824][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.133846][ T9640] RSP: 002b:00007f81d9147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.133951][ T9640] RAX: ffffffffffffffda RBX: 00007f81da935fa0 RCX: 00007f81da6df6c9 [ 131.133961][ T9640] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 131.133993][ T9640] RBP: 00007f81d9147090 R08: 0000000000000000 R09: 0000000000000000 [ 131.134008][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.134023][ T9640] R13: 00007f81da936038 R14: 00007f81da935fa0 R15: 00007ffd44d98838 [ 131.134047][ T9640] [ 131.175352][ T9643] loop1: detected capacity change from 0 to 512 [ 131.301614][ T9647] loop4: detected capacity change from 0 to 8192 [ 131.362695][ T9643] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.371885][ T9643] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 131.382100][ T2133] tipc: Left network mode [ 131.385922][ T9643] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 131.394500][ T9643] System zones: 0-2, 18-18, 34-35 [ 131.401592][ T9643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 131.447279][ T2133] hsr_slave_0: left promiscuous mode [ 131.466864][ T2133] hsr_slave_1: left promiscuous mode [ 131.472781][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.480352][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.489704][ T9657] netlink: 'syz.5.2320': attribute type 1 has an invalid length. [ 131.496153][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.497672][ T9657] __nla_validate_parse: 6 callbacks suppressed [ 131.497690][ T9657] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2320'. [ 131.504873][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.520625][ T9655] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 131.537284][ T2133] veth1_macvtap: left promiscuous mode [ 131.542826][ T2133] veth0_macvtap: left promiscuous mode [ 131.548432][ T2133] veth0_vlan: left promiscuous mode [ 131.672773][ T2133] team0 (unregistering): Port device team_slave_1 removed [ 131.682966][ T2133] team0 (unregistering): Port device C removed [ 131.738401][ T2133] team0 (unregistering): Port device dummy0 removed [ 131.811668][ T9669] rdma_op ffff8881037a2d80 conn xmit_rdma 0000000000000000 [ 131.855420][ T9582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 131.871498][ T9582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.883769][ T9582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.894435][ T9582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.950104][ T9582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.970806][ T9582] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.984172][ T9696] loop4: detected capacity change from 0 to 512 [ 131.992400][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.999575][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.003477][ T9696] EXT4-fs: dax option not supported [ 132.015811][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.022872][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.097456][ T9704] loop4: detected capacity change from 0 to 512 [ 132.104964][ T9704] EXT4-fs: Ignoring removed bh option [ 132.121271][ T9704] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 132.126085][ T9582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.144471][ T9704] EXT4-fs (loop4): 1 truncate cleaned up [ 132.147217][ T9709] sd 0:0:1:0: device reset [ 132.151085][ T9704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.169138][ T9704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.217735][ T9715] ALSA: seq fatal error: cannot create timer (-19) [ 132.228260][ T9715] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2334'. [ 132.238835][ T9715] netlink: zone id is out of range [ 132.240903][ T9582] veth0_vlan: entered promiscuous mode [ 132.243980][ T9715] netlink: zone id is out of range [ 132.254060][ T9582] veth1_vlan: entered promiscuous mode [ 132.260316][ T9715] netlink: zone id is out of range [ 132.278493][ T9582] veth0_macvtap: entered promiscuous mode [ 132.281909][ T9715] netlink: zone id is out of range [ 132.286851][ T9582] veth1_macvtap: entered promiscuous mode [ 132.290400][ T9715] netlink: zone id is out of range [ 132.301423][ T9715] netlink: zone id is out of range [ 132.306788][ T9715] netlink: zone id is out of range [ 132.307283][ T9582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.311915][ T9715] netlink: zone id is out of range [ 132.324715][ T9715] netlink: set zone limit has 8 unknown bytes [ 132.330720][ T9582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.343442][ T29] kauditd_printk_skb: 2370 callbacks suppressed [ 132.343457][ T29] audit: type=1400 audit(2000000025.960:30030): avc: denied { name_bind } for pid=9721 comm="syz.4.2335" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 132.345995][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.385203][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2335'. [ 132.387312][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.407133][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.408218][ T29] audit: type=1400 audit(2000000026.030:30031): avc: denied { create } for pid=9721 comm="syz.4.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.437944][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.451234][ T29] audit: type=1400 audit(2000000026.070:30032): avc: denied { mounton } for pid=9582 comm="syz-executor" path="/root/syzkaller.QXLnVS/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 132.476224][ T29] audit: type=1400 audit(2000000026.070:30033): avc: denied { mount } for pid=9582 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 132.498277][ T29] audit: type=1400 audit(2000000026.070:30034): avc: denied { mounton } for pid=9582 comm="syz-executor" path="/root/syzkaller.QXLnVS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 132.525289][ T29] audit: type=1400 audit(2000000026.070:30035): avc: denied { mounton } for pid=9582 comm="syz-executor" path="/root/syzkaller.QXLnVS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 132.554057][ T29] audit: type=1400 audit(2000000026.100:30036): avc: denied { mounton } for pid=9582 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 132.577181][ T29] audit: type=1400 audit(2000000026.100:30037): avc: denied { mount } for pid=9582 comm="syz-executor" name="/" dev="gadgetfs" ino=4653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 132.600076][ T29] audit: type=1326 audit(2000000026.100:30038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa388aff6c9 code=0x7ffc0000 [ 132.623643][ T29] audit: type=1326 audit(2000000026.100:30039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa388aff6c9 code=0x7ffc0000 [ 132.745267][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.768049][ T9739] netlink: 'syz.5.2341': attribute type 12 has an invalid length. [ 132.777872][ T9740] tipc: Invalid UDP bearer configuration [ 132.777882][ T9740] tipc: Enabling of bearer rejected, failed to enable media [ 132.826802][ T9750] sd 0:0:1:0: device reset [ 132.865176][ T3394] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.904621][ T9759] loop3: detected capacity change from 0 to 512 [ 132.911765][ T9759] EXT4-fs: dax option not supported [ 132.917430][ T3168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.967920][ T9762] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2348'. [ 132.977401][ T9763] netlink: 64 bytes leftover after parsing attributes in process `gtp'. [ 133.089939][ T9777] netlink: 'syz.4.2353': attribute type 4 has an invalid length. [ 133.155079][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.155208][ T4316] Bluetooth: hci0: command 0x1003 tx timeout [ 133.202987][ T9780] can0: slcan on ttyS3. [ 133.245217][ T9780] can0 (unregistered): slcan off ttyS3. [ 133.543211][ T9786] sd 0:0:1:0: device reset [ 133.582029][ T9790] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 133.582029][ T9790] program syz.2.2358 not setting count and/or reply_len properly [ 133.683358][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.701427][ T9798] loop2: detected capacity change from 0 to 1024 [ 133.708657][ T9798] EXT4-fs: Ignoring removed bh option [ 133.714314][ T9798] ext4: Unknown parameter 'permit_directio' [ 133.720829][ T3168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.858287][ T9815] sd 0:0:1:0: device reset [ 133.898243][ T9820] loop3: detected capacity change from 0 to 2048 [ 133.918332][ T9820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.945656][ T9828] loop1: detected capacity change from 0 to 512 [ 133.952320][ T9828] EXT4-fs: dax option not supported [ 133.960022][ T9820] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.036665][ T9820] macvtap1: entered promiscuous mode [ 134.042144][ T9820] macvtap1: entered allmulticast mode [ 134.058806][ T9840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2379'. [ 134.077788][ T9820] dummy0: entered allmulticast mode [ 134.088564][ T9820] team0: Device macvtap1 failed to register rx_handler [ 134.109873][ T9820] dummy0: left allmulticast mode [ 134.110497][ T9843] IPVS: set_ctl: invalid protocol: 24576 8.127.0.0:0 [ 134.295228][ T9853] sd 0:0:1:0: device reset [ 134.300993][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.328676][ T9855] loop2: detected capacity change from 0 to 2048 [ 134.347409][ T9855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.361421][ T9855] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.363777][ T9857] loop4: detected capacity change from 0 to 2048 [ 134.394867][ T9860] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2384'. [ 134.412412][ T9857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.457956][ T9868] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2385: bg 0: block 345: padding at end of block bitmap is not set [ 134.476516][ T9868] EXT4-fs (loop2): Remounting filesystem read-only [ 134.483122][ T152] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 134.530005][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.589564][ T9881] loop5: detected capacity change from 0 to 128 [ 134.616458][ T9582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.982389][ T9881] FAT-fs (loop5): Directory bread(block 162) failed [ 134.995525][ T9893] sd 0:0:1:0: device reset [ 135.005257][ T9881] FAT-fs (loop5): Directory bread(block 163) failed [ 135.024394][ T9881] FAT-fs (loop5): Directory bread(block 164) failed [ 135.039400][ T9881] FAT-fs (loop5): Directory bread(block 165) failed [ 135.046757][ T9881] FAT-fs (loop5): Directory bread(block 166) failed [ 135.053477][ T9881] FAT-fs (loop5): Directory bread(block 167) failed [ 135.060148][ T9881] FAT-fs (loop5): Directory bread(block 168) failed [ 135.078353][ T9881] FAT-fs (loop5): Directory bread(block 169) failed [ 135.092974][ T9904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2399'. [ 135.163952][ T9908] xt_hashlimit: max too large, truncated to 1048576 [ 135.259059][ T9910] loop5: detected capacity change from 0 to 2048 [ 135.321088][ T9910] loop5: p2 p3 p7 [ 135.391496][ T9916] __vm_enough_memory: pid: 9916, comm: syz.5.2403, bytes: 21200301760512 not enough memory for the allocation [ 135.492963][ T9918] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 135.492963][ T9918] program syz.5.2404 not setting count and/or reply_len properly [ 135.957080][ T9933] loop1: detected capacity change from 0 to 512 [ 135.963651][ T9933] EXT4-fs: dax option not supported [ 135.991734][ T9935] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 135.991734][ T9935] program syz.1.2411 not setting count and/or reply_len properly [ 136.030785][ T9938] lo speed is unknown, defaulting to 1000 [ 136.037285][ T9938] lo speed is unknown, defaulting to 1000 [ 136.043442][ T9938] lo speed is unknown, defaulting to 1000 [ 136.050844][ T9938] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.061762][ T9938] lo speed is unknown, defaulting to 1000 [ 136.068500][ T9938] lo speed is unknown, defaulting to 1000 [ 136.074649][ T9938] lo speed is unknown, defaulting to 1000 [ 136.081342][ T9938] lo speed is unknown, defaulting to 1000 [ 136.087520][ T9938] lo speed is unknown, defaulting to 1000 [ 136.122958][ T9944] netlink: 'syz.1.2415': attribute type 13 has an invalid length. [ 136.133543][ T9944] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.144052][ T9944] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 136.151786][ T9944] gretap1: entered promiscuous mode [ 136.157081][ T9944] gretap1: entered allmulticast mode [ 136.166989][ T9950] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 136.166989][ T9950] program syz.2.2417 not setting count and/or reply_len properly [ 136.187642][ T9952] loop1: detected capacity change from 0 to 512 [ 136.219373][ T9952] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec118, mo2=0002] [ 136.227767][ T9952] System zones: 0-2, 18-18, 34-35 [ 136.233919][ T9952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.246644][ T9952] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.259060][ T9952] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.2418: corrupted xattr block 33: invalid header [ 136.272701][ T9952] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 136.281916][ T9952] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.2418: corrupted xattr block 33: invalid header [ 136.295837][ T9952] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 136.305178][ T9952] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.2418: corrupted xattr block 33: invalid header [ 136.319009][ T9952] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 136.330524][ T9963] loop2: detected capacity change from 0 to 512 [ 136.337484][ T9963] EXT4-fs: dax option not supported [ 136.354938][ T3314] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 136.369164][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.383134][ T3314] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 136.403239][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.417058][ T3314] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 136.435701][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.445135][ T3314] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 136.459719][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.469640][ T3314] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 136.483473][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.493240][ T3314] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 136.507036][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.516448][ T3314] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 136.533971][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.543712][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.553054][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.562332][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.571615][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.581649][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.591076][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.601135][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.610291][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.619574][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.629032][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.638363][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 136.648034][ T3314] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 136.657591][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 136.666850][ T3314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 136.680005][ T3314] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 136.706059][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.797221][ T9980] lo speed is unknown, defaulting to 1000 [ 136.958516][ T9991] netlink: 'syz.1.2431': attribute type 10 has an invalid length. [ 136.967413][ T9991] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.002658][ T9994] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 137.002658][ T9994] program syz.4.2432 not setting count and/or reply_len properly [ 137.066936][T10002] loop4: detected capacity change from 0 to 512 [ 137.073623][T10002] EXT4-fs: dax option not supported [ 137.116033][T10007] loop4: detected capacity change from 0 to 128 [ 137.140933][T10013] sd 0:0:1:0: device reset [ 137.376914][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.385481][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.516767][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 137.516781][ T29] audit: type=1400 audit(2000000031.140:30385): avc: denied { read } for pid=10020 comm="syz.5.2442" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 137.675872][T10025] hub 6-0:1.0: USB hub found [ 137.713005][ T29] audit: type=1400 audit(2000000031.260:30386): avc: denied { write } for pid=10024 comm="syz.2.2443" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 137.742915][T10025] hub 6-0:1.0: 8 ports detected [ 137.761820][T10029] loop2: detected capacity change from 0 to 128 [ 137.905745][T10033] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2447'. [ 137.920943][ T29] audit: type=1400 audit(2000000031.500:30387): avc: denied { write } for pid=10032 comm="syz.5.2447" name="file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.943715][ T29] audit: type=1400 audit(2000000031.500:30388): avc: denied { open } for pid=10032 comm="syz.5.2447" path="/307/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.257846][T10047] loop1: detected capacity change from 0 to 764 [ 138.266204][T10036] loop5: detected capacity change from 0 to 8192 [ 138.277460][T10053] loop3: detected capacity change from 0 to 512 [ 138.283858][ T29] audit: type=1326 audit(2000000031.690:30389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10037 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 138.306905][ T29] audit: type=1326 audit(2000000031.690:30390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10037 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 138.329927][ T29] audit: type=1326 audit(2000000031.690:30391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10037 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 138.352905][ T29] audit: type=1326 audit(2000000031.690:30392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10037 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 138.375868][ T29] audit: type=1400 audit(2000000031.730:30393): avc: denied { setopt } for pid=10040 comm="syz.3.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.447917][ T29] audit: type=1400 audit(2000000032.030:30394): avc: denied { mounton } for pid=10032 comm="syz.5.2447" path="/307/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.701320][T10053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.758196][T10053] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.862712][T10072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2457'. [ 138.878234][T10053] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.151318][T10082] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 139.151318][T10082] program syz.1.2461 not setting count and/or reply_len properly [ 139.204112][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.352661][T10092] loop3: detected capacity change from 0 to 512 [ 139.435138][T10092] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2464: couldn't read orphan inode 26 (err -116) [ 139.449234][T10092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.461959][T10092] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.500813][T10092] lo speed is unknown, defaulting to 1000 [ 139.723824][T10097] loop1: detected capacity change from 0 to 512 [ 139.731193][T10097] EXT4-fs: dax option not supported [ 139.765971][T10099] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 139.781067][T10101] serio: Serial port ttyS3 [ 139.890159][T10099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.900076][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 139.949952][T10099] x_tables: duplicate underflow at hook 2 [ 140.001325][T10084] Set syz1 is full, maxelem 65536 reached [ 140.011320][T10103] bond1 (unregistering): Released all slaves [ 140.018348][T10101] serio: Serial port ttyS3 [ 140.049142][T10106] loop5: detected capacity change from 0 to 2048 [ 140.066622][T10106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.081407][T10106] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.121944][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.197814][T10114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.243643][T10122] FAULT_INJECTION: forcing a failure. [ 140.243643][T10122] name failslab, interval 1, probability 0, space 0, times 0 [ 140.256399][T10122] CPU: 0 UID: 0 PID: 10122 Comm: syz.3.2474 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 140.256438][T10122] Tainted: [W]=WARN [ 140.256447][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.256464][T10122] Call Trace: [ 140.256472][T10122] [ 140.256482][T10122] __dump_stack+0x1d/0x30 [ 140.256506][T10122] dump_stack_lvl+0xe8/0x140 [ 140.256593][T10122] dump_stack+0x15/0x1b [ 140.256617][T10122] should_fail_ex+0x265/0x280 [ 140.256641][T10122] should_failslab+0x8c/0xb0 [ 140.256731][T10122] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 140.256762][T10122] ? __alloc_skb+0x101/0x320 [ 140.256800][T10122] __alloc_skb+0x101/0x320 [ 140.256909][T10122] pfkey_sendmsg+0xd7/0x900 [ 140.256950][T10122] ? avc_has_perm+0xf7/0x180 [ 140.256986][T10122] ? selinux_socket_sendmsg+0x175/0x1b0 [ 140.257032][T10122] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 140.257113][T10122] __sock_sendmsg+0x145/0x180 [ 140.257208][T10122] ____sys_sendmsg+0x31e/0x4e0 [ 140.257240][T10122] ___sys_sendmsg+0x17b/0x1d0 [ 140.257323][T10122] __x64_sys_sendmsg+0xd4/0x160 [ 140.257343][T10122] x64_sys_call+0x191e/0x3000 [ 140.257362][T10122] do_syscall_64+0xd2/0x200 [ 140.257380][T10122] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 140.257430][T10122] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 140.257463][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.257480][T10122] RIP: 0033:0x7f81da6df6c9 [ 140.257560][T10122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.257582][T10122] RSP: 002b:00007f81d9147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.257603][T10122] RAX: ffffffffffffffda RBX: 00007f81da935fa0 RCX: 00007f81da6df6c9 [ 140.257616][T10122] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 140.257631][T10122] RBP: 00007f81d9147090 R08: 0000000000000000 R09: 0000000000000000 [ 140.257690][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.257747][T10122] R13: 00007f81da936038 R14: 00007f81da935fa0 R15: 00007ffd44d98838 [ 140.257769][T10122] [ 140.260607][T10123] loop1: detected capacity change from 0 to 128 [ 140.478705][ T3408] lo speed is unknown, defaulting to 1000 [ 140.550325][T10137] loop4: detected capacity change from 0 to 512 [ 140.568596][T10137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.594430][T10137] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.667166][T10144] vhci_hcd: invalid port number 65 [ 140.685203][T10137] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2480'. [ 140.738249][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.762634][T10150] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 140.762634][T10150] program syz.2.2483 not setting count and/or reply_len properly [ 140.858917][T10164] loop4: detected capacity change from 0 to 512 [ 140.865817][T10164] EXT4-fs: Ignoring removed bh option [ 140.872025][T10164] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.881096][T10164] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 140.891389][T10164] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 140.900990][T10164] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 140.909573][T10164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.924339][T10164] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 140.935636][ T5596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.965332][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.041036][T10174] loop4: detected capacity change from 0 to 8192 [ 141.052148][T10174] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1044) [ 141.060507][T10174] FAT-fs (loop4): Filesystem has been set read-only [ 141.120065][T10183] loop4: detected capacity change from 0 to 2048 [ 141.139121][T10184] netlink: 83 bytes leftover after parsing attributes in process `syz.5.2495'. [ 141.155842][T10183] loop4: p2 < > p4 [ 141.165183][T10183] loop4: p4 size 262144 extends beyond EOD, truncated [ 141.178135][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 141.190864][T10186] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 141.190864][T10186] program syz.3.2497 not setting count and/or reply_len properly [ 141.230483][T10189] FAULT_INJECTION: forcing a failure. [ 141.230483][T10189] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.243767][T10189] CPU: 1 UID: 0 PID: 10189 Comm: syz.3.2499 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 141.243860][T10189] Tainted: [W]=WARN [ 141.243866][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.243912][T10189] Call Trace: [ 141.243919][T10189] [ 141.243926][T10189] __dump_stack+0x1d/0x30 [ 141.243948][T10189] dump_stack_lvl+0xe8/0x140 [ 141.243965][T10189] dump_stack+0x15/0x1b [ 141.243983][T10189] should_fail_ex+0x265/0x280 [ 141.244078][T10189] should_fail_alloc_page+0xf2/0x100 [ 141.244130][T10189] __alloc_frozen_pages_noprof+0xff/0x360 [ 141.244157][T10189] alloc_pages_mpol+0xb3/0x260 [ 141.244177][T10189] folio_alloc_mpol_noprof+0x39/0x80 [ 141.244268][T10189] shmem_get_folio_gfp+0x3cf/0xd60 [ 141.244318][T10189] shmem_write_begin+0xa8/0x190 [ 141.244420][T10189] generic_perform_write+0x184/0x490 [ 141.244485][T10189] shmem_file_write_iter+0xc5/0xf0 [ 141.244516][T10189] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 141.244544][T10189] vfs_write+0x52a/0x960 [ 141.244619][T10189] ksys_write+0xda/0x1a0 [ 141.244730][T10189] __x64_sys_write+0x40/0x50 [ 141.244787][T10189] x64_sys_call+0x2802/0x3000 [ 141.244813][T10189] do_syscall_64+0xd2/0x200 [ 141.244832][T10189] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.244856][T10189] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 141.244951][T10189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.244974][T10189] RIP: 0033:0x7f81da6de17f [ 141.244990][T10189] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 141.245015][T10189] RSP: 002b:00007f81d9146df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 141.245036][T10189] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f81da6de17f [ 141.245062][T10189] RDX: 0000000000040000 RSI: 00007f81d0d27000 RDI: 0000000000000004 [ 141.245075][T10189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000470 [ 141.245089][T10189] R10: 0000200000000542 R11: 0000000000000293 R12: 0000000000000004 [ 141.245102][T10189] R13: 00007f81d9146ef0 R14: 00007f81d9146eb0 R15: 00007f81d0d27000 [ 141.245124][T10189] [ 141.499142][T10199] loop3: detected capacity change from 0 to 512 [ 141.509621][T10199] EXT4-fs: dax option not supported [ 141.517485][T10200] loop1: detected capacity change from 0 to 1024 [ 141.525326][T10200] EXT4-fs: Ignoring removed oldalloc option [ 141.531247][T10200] EXT4-fs: Ignoring removed oldalloc option [ 141.547300][T10200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.564565][T10200] macsec1: entered promiscuous mode [ 141.570028][T10200] bridge0: entered promiscuous mode [ 141.576016][T10200] bridge0: port 1(macsec1) entered blocking state [ 141.582542][T10200] bridge0: port 1(macsec1) entered disabled state [ 141.602474][T10200] macsec1: entered allmulticast mode [ 141.607861][T10200] bridge0: entered allmulticast mode [ 141.618314][T10200] macsec1: left allmulticast mode [ 141.621781][T10211] loop3: detected capacity change from 0 to 8192 [ 141.623448][T10200] bridge0: left allmulticast mode [ 141.633216][T10211] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1044) [ 141.643052][T10211] FAT-fs (loop3): Filesystem has been set read-only [ 141.650192][T10200] bridge0: left promiscuous mode [ 141.687380][T10222] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 141.687380][T10222] program syz.2.2510 not setting count and/or reply_len properly [ 141.739153][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.739672][T10224] SELinux: failed to load policy [ 141.783327][T10228] loop3: detected capacity change from 0 to 164 [ 141.874874][T10254] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 141.874874][T10254] program syz.3.2523 not setting count and/or reply_len properly [ 142.865089][T10263] futex_wake_op: syz.3.2525 tries to shift op by 144; fix this program [ 142.894681][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 142.894696][ T29] audit: type=1326 audit(2000000036.510:30713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 142.951541][ T29] audit: type=1326 audit(2000000036.550:30714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 142.975251][ T29] audit: type=1326 audit(2000000036.550:30715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 142.998869][ T29] audit: type=1326 audit(2000000036.550:30716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 143.022560][ T29] audit: type=1400 audit(2000000036.550:30717): avc: granted { setsecparam } for pid=10269 comm="syz.4.2528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 143.041869][ T29] audit: type=1326 audit(2000000036.560:30718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 143.065525][ T29] audit: type=1326 audit(2000000036.560:30719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 143.089412][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 143.089439][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.103311][ T29] audit: type=1326 audit(2000000036.560:30720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 143.127026][ T29] audit: type=1326 audit(2000000036.560:30721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 143.150673][ T29] audit: type=1326 audit(2000000036.560:30722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10268 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 143.200003][T10283] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 143.200003][T10283] program syz.3.2532 not setting count and/or reply_len properly [ 143.225583][T10262] lo speed is unknown, defaulting to 1000 [ 143.287570][T10281] loop1: detected capacity change from 0 to 8192 [ 143.297147][T10281] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1044) [ 143.305365][T10281] FAT-fs (loop1): Filesystem has been set read-only [ 143.381467][T10297] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 143.381467][T10297] program syz.1.2538 not setting count and/or reply_len properly [ 143.402284][T10298] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2536'. [ 143.434121][T10298] loop3: detected capacity change from 0 to 128 [ 143.530496][T10307] lo speed is unknown, defaulting to 1000 [ 143.844513][T10321] futex_wake_op: syz.4.2543 tries to shift op by 144; fix this program [ 143.873355][T10322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 143.900694][T10324] syz_tun: entered promiscuous mode [ 143.915423][T10324] macvtap1: entered promiscuous mode [ 143.931277][T10322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2554'. [ 143.960843][T10322] loop2: detected capacity change from 0 to 128 [ 144.034483][T10332] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 144.034483][T10332] program syz.4.2550 not setting count and/or reply_len properly [ 144.064531][T10330] loop2: detected capacity change from 0 to 8192 [ 144.074120][T10330] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1044) [ 144.082354][T10330] FAT-fs (loop2): Filesystem has been set read-only [ 144.130590][T10338] sd 0:0:1:0: device reset [ 144.292990][T10354] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2562'. [ 144.302387][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2562'. [ 145.104125][T10360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2563'. [ 145.126007][T10360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2563'. [ 145.178591][T10379] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 145.178591][T10379] program syz.5.2571 not setting count and/or reply_len properly [ 145.244469][T10360] loop4: detected capacity change from 0 to 128 [ 145.254367][T10389] loop2: detected capacity change from 0 to 512 [ 145.261814][T10389] EXT4-fs: Ignoring removed bh option [ 145.267481][T10389] EXT4-fs: Ignoring removed oldalloc option [ 145.273399][T10389] ext4: Unknown parameter 'dont_measure' [ 145.280381][T10390] lo speed is unknown, defaulting to 1000 [ 145.286577][T10390] lo speed is unknown, defaulting to 1000 [ 145.286932][T10392] loop5: detected capacity change from 0 to 1024 [ 145.292670][T10390] lo speed is unknown, defaulting to 1000 [ 145.309977][T10390] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 145.327002][T10392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.346379][T10401] loop2: detected capacity change from 0 to 512 [ 145.354850][T10390] lo speed is unknown, defaulting to 1000 [ 145.365275][T10392] FAULT_INJECTION: forcing a failure. [ 145.365275][T10392] name failslab, interval 1, probability 0, space 0, times 0 [ 145.365633][T10401] EXT4-fs: dax option not supported [ 145.377925][T10392] CPU: 0 UID: 0 PID: 10392 Comm: syz.5.2579 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.378010][T10392] Tainted: [W]=WARN [ 145.378018][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.378033][T10392] Call Trace: [ 145.378041][T10392] [ 145.378051][T10392] __dump_stack+0x1d/0x30 [ 145.378077][T10392] dump_stack_lvl+0xe8/0x140 [ 145.378134][T10392] dump_stack+0x15/0x1b [ 145.378156][T10392] should_fail_ex+0x265/0x280 [ 145.378180][T10392] should_failslab+0x8c/0xb0 [ 145.378296][T10392] __kmalloc_noprof+0xa5/0x570 [ 145.378331][T10392] ? __d_alloc+0x90/0x340 [ 145.378371][T10392] __d_alloc+0x90/0x340 [ 145.378507][T10392] d_alloc+0x2e/0x100 [ 145.378544][T10392] lookup_one_qstr_excl+0x99/0x250 [ 145.378710][T10392] filename_create+0x149/0x230 [ 145.378824][T10392] do_symlinkat+0x65/0x3c0 [ 145.378896][T10392] __x64_sys_symlinkat+0x5a/0x70 [ 145.378934][T10392] x64_sys_call+0x2941/0x3000 [ 145.378968][T10392] do_syscall_64+0xd2/0x200 [ 145.379016][T10392] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.379112][T10392] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.379161][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.379255][T10392] RIP: 0033:0x7f0ebf1af6c9 [ 145.379276][T10392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.379303][T10392] RSP: 002b:00007f0ebdc0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 145.379328][T10392] RAX: ffffffffffffffda RBX: 00007f0ebf405fa0 RCX: 00007f0ebf1af6c9 [ 145.379348][T10392] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 0000200000000100 [ 145.379387][T10392] RBP: 00007f0ebdc0f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.379405][T10392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.379424][T10392] R13: 00007f0ebf406038 R14: 00007f0ebf405fa0 R15: 00007ffe47874328 [ 145.379453][T10392] [ 145.380426][T10390] lo speed is unknown, defaulting to 1000 [ 145.584390][T10390] lo speed is unknown, defaulting to 1000 [ 145.590978][ T5596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.592260][T10390] lo speed is unknown, defaulting to 1000 [ 145.614818][T10390] lo speed is unknown, defaulting to 1000 [ 145.688449][T10417] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 145.688449][T10417] program syz.2.2587 not setting count and/or reply_len properly [ 145.740963][T10425] loop4: detected capacity change from 0 to 512 [ 145.754235][T10425] EXT4-fs: dax option not supported [ 145.763908][T10427] loop2: detected capacity change from 0 to 2048 [ 145.771497][T10421] loop5: detected capacity change from 0 to 4096 [ 145.780254][T10421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.795850][T10427] Alternate GPT is invalid, using primary GPT. [ 145.802171][T10427] loop2: p1 p2 p3 [ 145.805951][T10427] loop2: partition table partially beyond EOD, truncated [ 145.841153][T10436] FAULT_INJECTION: forcing a failure. [ 145.841153][T10436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.848377][T10438] loop2: detected capacity change from 0 to 764 [ 145.854270][T10436] CPU: 0 UID: 0 PID: 10436 Comm: syz.4.2595 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.854317][T10436] Tainted: [W]=WARN [ 145.854327][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.854344][T10436] Call Trace: [ 145.854354][T10436] [ 145.854364][T10436] __dump_stack+0x1d/0x30 [ 145.854405][T10436] dump_stack_lvl+0xe8/0x140 [ 145.854483][T10436] dump_stack+0x15/0x1b [ 145.854575][T10436] should_fail_ex+0x265/0x280 [ 145.854600][T10436] should_fail+0xb/0x20 [ 145.854627][T10436] should_fail_usercopy+0x1a/0x20 [ 145.854654][T10436] _copy_from_user+0x1c/0xb0 [ 145.854686][T10436] __sys_sendto+0x19e/0x330 [ 145.854790][T10436] __x64_sys_sendto+0x76/0x90 [ 145.854877][T10436] x64_sys_call+0x2d14/0x3000 [ 145.854905][T10436] do_syscall_64+0xd2/0x200 [ 145.854931][T10436] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.854967][T10436] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.855062][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.855110][T10436] RIP: 0033:0x7fa388b0155c [ 145.855130][T10436] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 145.855152][T10436] RSP: 002b:00007fa38755dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 145.855254][T10436] RAX: ffffffffffffffda RBX: 00007fa38755dfc0 RCX: 00007fa388b0155c [ 145.855270][T10436] RDX: 0000000000000020 RSI: 00007fa38755e010 RDI: 0000000000000003 [ 145.855305][T10436] RBP: 0000000000000000 R08: 00007fa38755df14 R09: 000000000000000c [ 145.855322][T10436] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 145.855340][T10436] R13: 00007fa38755df68 R14: 00007fa38755e010 R15: 0000000000000000 [ 145.855368][T10436] [ 146.038056][T10438] ISOFS: Logical zone size(255) < hardware blocksize(2048) [ 146.067310][T10438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.140016][T10438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.141705][T10458] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2604'. [ 146.159650][T10458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2604'. [ 146.213013][T10438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.258092][T10438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.310919][ T2133] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.322391][ T2133] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.333891][ T2133] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.344384][ T2133] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.514576][T10483] SELinux: failed to load policy [ 146.561348][ T5596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.593653][T10491] siw: device registration error -23 [ 146.618049][T10493] loop5: detected capacity change from 0 to 512 [ 146.627760][T10493] EXT4-fs: dax option not supported [ 146.659376][T10495] loop5: detected capacity change from 0 to 512 [ 146.666155][T10495] EXT4-fs: dax option not supported [ 146.854926][T10512] FAULT_INJECTION: forcing a failure. [ 146.854926][T10512] name failslab, interval 1, probability 0, space 0, times 0 [ 146.867632][T10512] CPU: 1 UID: 0 PID: 10512 Comm: syz.5.2626 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 146.867670][T10512] Tainted: [W]=WARN [ 146.867676][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.867688][T10512] Call Trace: [ 146.867694][T10512] [ 146.867702][T10512] __dump_stack+0x1d/0x30 [ 146.867769][T10512] dump_stack_lvl+0xe8/0x140 [ 146.867787][T10512] dump_stack+0x15/0x1b [ 146.867801][T10512] should_fail_ex+0x265/0x280 [ 146.867817][T10512] ? alloc_netdev_mqs+0x7da/0xa50 [ 146.867834][T10512] should_failslab+0x8c/0xb0 [ 146.867860][T10512] __kmalloc_cache_noprof+0x4c/0x4a0 [ 146.867896][T10512] alloc_netdev_mqs+0x7da/0xa50 [ 146.867914][T10512] tun_set_iff+0x42c/0x8a0 [ 146.867941][T10512] __tun_chr_ioctl+0x5f0/0x14c0 [ 146.868030][T10512] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 146.868071][T10512] tun_chr_ioctl+0x27/0x40 [ 146.868098][T10512] __se_sys_ioctl+0xce/0x140 [ 146.868199][T10512] __x64_sys_ioctl+0x43/0x50 [ 146.868218][T10512] x64_sys_call+0x1816/0x3000 [ 146.868326][T10512] do_syscall_64+0xd2/0x200 [ 146.868344][T10512] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.868368][T10512] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.868400][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.868471][T10512] RIP: 0033:0x7f0ebf1af6c9 [ 146.868484][T10512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.868542][T10512] RSP: 002b:00007f0ebdc0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.868558][T10512] RAX: ffffffffffffffda RBX: 00007f0ebf405fa0 RCX: 00007f0ebf1af6c9 [ 146.868568][T10512] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 000000000000000a [ 146.868579][T10512] RBP: 00007f0ebdc0f090 R08: 0000000000000000 R09: 0000000000000000 [ 146.868589][T10512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.868599][T10512] R13: 00007f0ebf406038 R14: 00007f0ebf405fa0 R15: 00007ffe47874328 [ 146.868616][T10512] [ 147.125592][T10517] 9pnet: Could not find request transport: 0xffffffffffffffff [ 147.144891][T10522] netlink: 'syz.5.2630': attribute type 12 has an invalid length. [ 147.180010][T10526] loop3: detected capacity change from 0 to 512 [ 147.186840][T10526] EXT4-fs: dax option not supported [ 147.203256][T10528] 9pnet_fd: Insufficient options for proto=fd [ 147.264351][T10537] loop5: detected capacity change from 0 to 5479 [ 147.272992][T10538] sch_tbf: peakrate 7 is lower than or equals to rate 11 ! [ 147.285642][T10537] loop5: detected capacity change from 5479 to 6719 [ 147.376380][T10551] loop4: detected capacity change from 0 to 512 [ 147.396417][T10551] EXT4-fs: dax option not supported [ 147.409894][T10553] loop2: detected capacity change from 0 to 512 [ 147.425482][T10553] EXT4-fs: dax option not supported [ 147.462699][T10557] loop4: detected capacity change from 0 to 512 [ 147.476781][T10557] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 147.539958][T10567] FAULT_INJECTION: forcing a failure. [ 147.539958][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 147.552649][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz.3.2652 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.552694][T10567] Tainted: [W]=WARN [ 147.552702][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.552714][T10567] Call Trace: [ 147.552719][T10567] [ 147.552725][T10567] __dump_stack+0x1d/0x30 [ 147.552786][T10567] dump_stack_lvl+0xe8/0x140 [ 147.552862][T10567] dump_stack+0x15/0x1b [ 147.552883][T10567] should_fail_ex+0x265/0x280 [ 147.552904][T10567] ? legacy_init_fs_context+0x31/0x80 [ 147.552937][T10567] should_failslab+0x8c/0xb0 [ 147.553039][T10567] __kmalloc_cache_noprof+0x4c/0x4a0 [ 147.553078][T10567] legacy_init_fs_context+0x31/0x80 [ 147.553110][T10567] alloc_fs_context+0x3ef/0x4e0 [ 147.553188][T10567] fs_context_for_mount+0x22/0x30 [ 147.553264][T10567] do_new_mount+0xea/0x660 [ 147.553291][T10567] ? security_capable+0x83/0x90 [ 147.553407][T10567] path_mount+0x4a5/0xb70 [ 147.553429][T10567] ? user_path_at+0x109/0x130 [ 147.553452][T10567] __se_sys_mount+0x28c/0x2e0 [ 147.553479][T10567] __x64_sys_mount+0x67/0x80 [ 147.553540][T10567] x64_sys_call+0x2b51/0x3000 [ 147.553565][T10567] do_syscall_64+0xd2/0x200 [ 147.553589][T10567] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.553622][T10567] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.553683][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.553705][T10567] RIP: 0033:0x7f81da6df6c9 [ 147.553718][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.553770][T10567] RSP: 002b:00007f81d9147038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.553788][T10567] RAX: ffffffffffffffda RBX: 00007f81da935fa0 RCX: 00007f81da6df6c9 [ 147.553867][T10567] RDX: 0000200000002540 RSI: 0000200000002500 RDI: 0000000000000000 [ 147.553882][T10567] RBP: 00007f81d9147090 R08: 0000200000000200 R09: 0000000000000000 [ 147.553896][T10567] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 147.553908][T10567] R13: 00007f81da936038 R14: 00007f81da935fa0 R15: 00007ffd44d98838 [ 147.553930][T10567] [ 147.844564][T10581] loop4: detected capacity change from 0 to 512 [ 147.853054][T10581] EXT4-fs: dax option not supported [ 147.895176][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 147.895191][ T29] audit: type=1326 audit(2000000041.510:30926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 147.925891][ T29] audit: type=1326 audit(2000000041.520:30927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 147.949625][ T29] audit: type=1326 audit(2000000041.520:30928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 147.973348][ T29] audit: type=1326 audit(2000000041.520:30929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 147.996985][ T29] audit: type=1326 audit(2000000041.550:30930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 148.020643][ T29] audit: type=1326 audit(2000000041.550:30931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 148.044309][ T29] audit: type=1326 audit(2000000041.550:30932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 148.068698][T10586] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.068698][T10586] program syz.4.2661 not setting count and/or reply_len properly [ 148.069628][ T29] audit: type=1326 audit(2000000041.550:30933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 148.109122][ T29] audit: type=1326 audit(2000000041.550:30934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 148.132724][ T29] audit: type=1326 audit(2000000041.550:30935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.1.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b78a5f6c9 code=0x7ffc0000 [ 148.157625][T10590] siw: device registration error -23 [ 148.333126][T10611] loop4: detected capacity change from 0 to 512 [ 148.342106][T10611] EXT4-fs: dax option not supported [ 148.433450][T10624] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.433450][T10624] program syz.1.2676 not setting count and/or reply_len properly [ 148.467702][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 148.480964][T10630] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.480964][T10630] program syz.1.2679 not setting count and/or reply_len properly [ 148.516717][T10633] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.516717][T10633] program syz.3.2690 not setting count and/or reply_len properly [ 148.553634][T10638] 9pnet_fd: Insufficient options for proto=fd [ 148.584815][T10643] loop2: detected capacity change from 0 to 512 [ 148.604558][T10643] EXT4-fs: dax option not supported [ 148.642842][T10653] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2688'. [ 148.660277][T10653] loop3: detected capacity change from 0 to 512 [ 148.677231][T10657] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.677231][T10657] program syz.2.2691 not setting count and/or reply_len properly [ 148.697561][T10659] loop1: detected capacity change from 0 to 1024 [ 148.704688][T10659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.714388][T10659] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 148.722809][T10659] System zones: 0-1, 3-36 [ 148.728623][T10659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.763023][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2689'. [ 148.764653][T10667] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.764653][T10667] program syz.2.2693 not setting count and/or reply_len properly [ 148.797536][T10659] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2689: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 148.814890][T10659] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2689: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 148.826451][T10670] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.826451][T10670] program syz.3.2696 not setting count and/or reply_len properly [ 148.832400][T10659] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2689: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 148.867587][T10659] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2689: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 148.904309][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.922791][T10674] loop3: detected capacity change from 0 to 512 [ 148.932744][T10674] EXT4-fs: dax option not supported [ 148.994985][T10685] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.994985][T10685] program syz.5.2703 not setting count and/or reply_len properly [ 149.148502][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2706'. [ 149.162256][T10700] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 149.170836][T10700] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 149.180624][T10702] ================================================================== [ 149.188730][T10702] BUG: KCSAN: data-race in __percpu_counter_init_many / copy_mm [ 149.196409][T10702] [ 149.198733][T10702] write to 0xffff88810389d4b0 of 8 bytes by task 10703 on cpu 1: [ 149.206467][T10702] __percpu_counter_init_many+0x292/0x310 [ 149.212204][T10702] mm_init+0x6ab/0x7f0 [ 149.216278][T10702] copy_mm+0x101/0x370 [ 149.220351][T10702] copy_process+0xd08/0x2000 [ 149.224965][T10702] kernel_clone+0x16c/0x5c0 [ 149.229584][T10702] __x64_sys_clone+0xe6/0x120 [ 149.234293][T10702] x64_sys_call+0x119c/0x3000 [ 149.238979][T10702] do_syscall_64+0xd2/0x200 [ 149.243497][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.249396][T10702] [ 149.251717][T10702] read to 0xffff88810389d080 of 1408 bytes by task 10702 on cpu 0: [ 149.259610][T10702] copy_mm+0xe2/0x370 [ 149.263610][T10702] copy_process+0xd08/0x2000 [ 149.268207][T10702] kernel_clone+0x16c/0x5c0 [ 149.272719][T10702] __x64_sys_clone+0xe6/0x120 [ 149.277420][T10702] x64_sys_call+0x119c/0x3000 [ 149.282099][T10702] do_syscall_64+0xd2/0x200 [ 149.286601][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.292495][T10702] [ 149.294814][T10702] Reported by Kernel Concurrency Sanitizer on: [ 149.300962][T10702] CPU: 0 UID: 0 PID: 10702 Comm: syz.1.2710 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.312330][T10702] Tainted: [W]=WARN [ 149.316158][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.326293][T10702] ================================================================== [ 159.075207][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!