last executing test programs: 55.617007309s ago: executing program 1 (id=3157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x20, 0x700, 0xfffffff9, 0x80, {{0x25, 0x4, 0x1, 0x9, 0x94, 0x66, 0x0, 0x6, 0x29, 0x0, @broadcast, @local, {[@noop, @lsrr={0x83, 0x17, 0x15, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xf}, @local, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0xa, [{@multicast1, 0xfffffff8}]}, @timestamp={0x44, 0x28, 0x67, 0x0, 0x3, [0x40, 0x0, 0x7f, 0x0, 0xd804, 0x0, 0x5, 0xeb, 0x242b]}, @timestamp_addr={0x44, 0x2c, 0x67, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x911}, {@multicast2, 0x7ff}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0x1}, {@broadcast, 0x6}]}, @end, @rr={0x7, 0x7, 0x63, [@loopback]}]}}}}}) r5 = fcntl$dupfd(r1, 0x406, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3c7f, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7fffffff}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x13, &(0x7f0000000300)=""/19, 0x41000, 0x0, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0xe, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r1, r1, r1], &(0x7f0000000580)=[{0x4, 0x4, 0x6, 0x1}, {0x3, 0x5, 0x5, 0x9}, {0x4, 0x3, 0x0, 0xb}], 0x10, 0x5}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = inotify_init1(0x0) read(r6, 0x0, 0x0) (fail_nth: 6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0xffffffffffffffec, r7, 0x1, 0x70bd2d, 0x0, {0x1b}}, 0x14}}, 0x0) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r9 = getpid() syz_pidfd_open(r9, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0)=r9, 0x12) 55.325833692s ago: executing program 1 (id=3158): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x0) 55.306822184s ago: executing program 1 (id=3161): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100"], 0x138}}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0) 55.292890955s ago: executing program 1 (id=3162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x6}, 0x18) r6 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r6, &(0x7f0000000280)=""/176, 0xb0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x85, 0x6c, &(0x7f0000000680)="db219e236400264387a1bfc4f03ad5f777b60b75d0342cd31e8b6514bd3f7fb42b70686ee060f4c110258a57a74a9fe5106e790c020135fc90a5841e33eb6008d0de58ea6095e33097d87d20063c84a043a9bb68ffe3f8867ebc4faf98a5dadfcbc87877fdc853cc4d9e51ba19e8a657ecd30ae8cf3308bc809a795cd03c8fb7c0bb280ab0", &(0x7f0000000840)=""/108, 0xff, 0x0, 0x30, 0xb4, &(0x7f0000000380)="3e65269de2d7d018550b9ee916602374b5cadb9c3f155d8c2358ae1c9b7ddc13220f4239c2f259890f07811222192d21", &(0x7f00000008c0)="2b8b5d893089cda6c0ea3dd985b065071022b280cc9752436a3b38524b806e3b86b9a3c1774199e5f1293a4308b4bfdee8ba7e9d912b04f0c583379f25353e6fd86e1d1b56f3bd896c45590fdc105d0da4ac8fadd77539175f74ae79fd1e0e2b30d996ee1860d34839a15ae96d8bfb437aef3075c06206d0e0e6f43d9364d4eff23bd219f090a2d03973d875278c11ed12d55b8b49d397efad476d53b55883725975e9d971f205aaaf51332981ca1cec08d069a3", 0x3, 0x0, 0x9}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4) timer_create(0x0, 0x0, 0x0) 55.23099091s ago: executing program 1 (id=3163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f00000000008510000002000000850000005500000095000000000000009500a5e609000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304ec"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 54.958740872s ago: executing program 1 (id=3169): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001140)) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r4 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19f5d9c2c1c51800000000000000100100002b000000dc00"], 0x18}, 0xfc00) close_range(r4, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=0x1, 0x11, 0x0, 0x578, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000840)='syz1\x00', 0x200002, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 54.948730733s ago: executing program 32 (id=3169): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001140)) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r4 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19f5d9c2c1c51800000000000000100100002b000000dc00"], 0x18}, 0xfc00) close_range(r4, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=0x1, 0x11, 0x0, 0x578, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000840)='syz1\x00', 0x200002, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1.810749604s ago: executing program 3 (id=4310): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x7}, 0x18) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="c96e698c", 0x4}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) (fail_nth: 5) 1.527381887s ago: executing program 3 (id=4313): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x4, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 1.362937551s ago: executing program 3 (id=4318): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8001) r6 = gettid() fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000340)="a4cb29358cf4970cace84a2e86083a2fbae9482d1adb747b51f6948370f7b17d8fffa22609be56ea0d45da6d3afe6a0d971484fa7e8fa3dd87b357a0908988f884a915e1afb5939b4a703e", 0x4b) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x4}, 0x1c) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r9, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x54, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000010000008016c382b8d7181f1cb34f73e1e8c8de3b764a4da15fde84651acc00192f631b2ffe7f32de60e0bc6192de05dec7bd669c9902ab9baa94aab3cef3a82660838d2dbd273da141dfceef93e1bbe86035529f5164bdf1d1f67978e8124d3e6f95a32f900b05000000dda330b9ba8a8de2290015fc9cd847c2dc3ee4c833ff2e6bb1e4914f5f75f45d349cf308a313997370d36c47b268cd6088eeaf377716d9dd6ef8"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYBLOB="43b014c631187ca61a3400372f9cb6ae2127ab7700c2ffdf950389e1b100ac3f134e3636b219489d9349f8b16e22504900c1bf7f0b7dd84f90faee91fb3da7b01347fc28264bee194031bbcacb768353da59024bc67ac2e8f27fb421d38d9be41f798e7c13d5bc", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x31bc1f93aa6f72c0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) ioprio_get$uid(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 1.351220151s ago: executing program 2 (id=4319): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00', @ANYBLOB="c770"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.291035896s ago: executing program 2 (id=4323): socket$nl_route(0x10, 0x3, 0x0) gettid() bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x2e9aa845) (fail_nth: 5) 1.225551022s ago: executing program 4 (id=4324): syz_open_dev$sg(&(0x7f0000001600), 0x6, 0x22c01) unshare(0x22020600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffec9, 0x0}, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) set_tid_address(0x0) 1.225280912s ago: executing program 2 (id=4325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x11, 0x66, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x448, 0xf0, 0x2a8, 0xffffffff, 0x2a8, 0xf0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x9}, 0x10, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) 1.222805802s ago: executing program 2 (id=4326): syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) getpid() sched_setaffinity(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x9) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0180729e0937c9a78b457be93af2fef95f8fc2000000bbbbbbbbbbbb86dd60b3388300103a"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 907.258048ms ago: executing program 0 (id=4332): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 907.118778ms ago: executing program 5 (id=4333): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00', @ANYBLOB="c770"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 906.769687ms ago: executing program 5 (id=4334): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)) 877.72013ms ago: executing program 5 (id=4335): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000265000/0x2000)=nil, 0x2000, 0x1, 0x110, r1, 0x91990000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000280), &(0x7f0000000300)=r3}, 0x20) close(0x3) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x6}, 0x21) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x7c}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x23e}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) 817.736625ms ago: executing program 5 (id=4336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0xfffffffffffffff2) write(r0, 0x0, 0x0) 817.479905ms ago: executing program 5 (id=4337): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc22cddfde31e1cc9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x7c}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x8000002}, 0x10004}}, 0x10) bind$tipc(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x9, 0x800) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvfrom$packet(r1, &(0x7f0000000380)=""/199, 0xc7, 0x2, 0x0, 0x0) 470.378003ms ago: executing program 3 (id=4338): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0040", 0x6, 0x0, 0x0, 0x2}]) 422.068027ms ago: executing program 4 (id=4339): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x1}, 0x18) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xa00) 405.455118ms ago: executing program 0 (id=4340): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x4, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 321.671455ms ago: executing program 3 (id=4341): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0x7c, "197fe10a157e57911688ffc58632885555dd87a5b81c31a218fafc1f0494472e5341056edd3a62ce5a81d07981ffbfde85db1be6f66ea2d7878871088eb7380180c13b22c8c9c961bd0cd5d8dfd324e0bec670a39bdb9e4414acdb507fc19be456dc7d421f92b337756fca5fbdc65357878787faac31bfa909c17f10"}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r1, 0x52, "addad0a64eaf8b1ca883757c72f4102ea577f40476c97fec4246fd545967387c508dc3e796683fc124b1e96b8e02c684f0004042fda1ae15ca5ecd44154ba8251bcaccc642b80984a1889fc53d6f73621362"}, &(0x7f0000000340)=0x5a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x300, 0x0, 0x69, 0x11, 0xa}, [@jmp={0x5, 0x0, 0x7, 0xb, 0x9, 0xc, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xfd4d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001800000005000000000000000080000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x1, 0x3, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = memfd_secret(0x80000) fcntl$lock(r5, 0x25, &(0x7f00000000c0)={0x0, 0x2}) capset(&(0x7f0000000540)={0x20080522}, &(0x7f0000000140)={0x3, 0x3, 0x7, 0x0, 0x40, 0x8b}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000005b2e67aced1b76fc9f909784de00007112180000000000bc2010"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 316.670025ms ago: executing program 0 (id=4342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r3, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e3000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 282.299258ms ago: executing program 2 (id=4343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18007b0000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 233.925181ms ago: executing program 4 (id=4344): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022abd7000fbdbdf25080000000c000180080000000000000008000500090000000400018008000500a9887a98754488da390928e003c07a0000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x400d0) 161.735708ms ago: executing program 0 (id=4345): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00', @ANYBLOB="c770"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 161.217778ms ago: executing program 4 (id=4346): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)) 159.559518ms ago: executing program 0 (id=4347): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4044) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="04000000000000c69b96660000af460000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x962c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) fchdir(r3) mkdir(0x0, 0x0) 119.003561ms ago: executing program 0 (id=4348): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0xfe37, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000100"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0xb, 0x2e, 0x2, 0x2000009, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x2000000000fff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x4040) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)={0x74, 0x0, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5e6}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x38}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x74}}, 0x10810) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x2006}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 96.596213ms ago: executing program 3 (id=4349): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000003c0)=0xe8, 0xfed3) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="9800028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000e"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x4000840, &(0x7f0000000240)={0xa, 0x4e23, 0x8be6, @mcast2}, 0x1c) setns(r1, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 81.355424ms ago: executing program 4 (id=4350): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)=""/105, &(0x7f0000000080)=0x69) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x7, 0x7, 0x7]}, &(0x7f00000001c0)=0x44) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x302, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x240280) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x73e9, 0x3ddfb55a, {{0x4f, 0x4, 0x1, 0x0, 0x13c, 0x67, 0x0, 0x5, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x1f, 0xeb, [@multicast2, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x2, 0x5, "f9f1ce"}]}, @cipso={0x86, 0x69, 0x1, [{0x5, 0x8, "7f076cf7b2f5"}, {0x6, 0xe, "bc8a280295fcc1fd0814aa0f"}, {0x1, 0xd, "03890fc649738fa0c4ade8"}, {0x2, 0x9, "f583466f0f5629"}, {0x5, 0x7, "66c7072651"}, {0x5, 0x10, "d82a171a99049f168e6f5e1d9607"}, {0x1, 0x6, "c8377408"}, {0x1, 0xe, "587e76d9c06efcfed51de64f"}, {0x7, 0x3, 'i'}, {0x0, 0x9, "63dedcb6d57606"}]}, @timestamp_prespec={0x44, 0x1c, 0xd4, 0x3, 0x1, [{@rand_addr=0x64010100, 0xa}, {@private=0xa010101, 0xa5}, {@loopback, 0x10000}]}, @timestamp_addr={0x44, 0xc, 0x36, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x7ff}]}, @ssrr={0x89, 0x13, 0x60, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @multicast1]}, @timestamp={0x44, 0x2c, 0x5d, 0x0, 0x5, [0x3ff, 0x3, 0xf, 0x18000, 0x400000, 0x9, 0xffffffff, 0xffffffff, 0x7fff, 0x9]}, @timestamp_addr={0x44, 0x2c, 0x11, 0x1, 0x6, [{@rand_addr=0x64010101, 0x3}, {@loopback, 0xdeab}, {@broadcast, 0x1}, {@empty, 0x7f}, {@local}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xe4, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8080}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000007c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000800)=0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x6, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@alu={0x3, 0x1, 0x1, 0x3, 0x1, 0x30, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0xc2e00, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x10, 0x3, 0xd88}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000980)=[0x1, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x3, 0x1, 0x5, 0x2}, {0x0, 0x5, 0x2, 0xa}, {0x2, 0x4, 0xf, 0x9}, {0x4, 0x1, 0xb, 0x4}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000840)='sctp_probe\x00', r9, 0x0, 0xfffffffffffffffa}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000b00)={0x42, 0x3, 0x3}, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448e3, &(0x7f0000000b40)="69796657bc467e421395defe1d6fa608e5e0fa5d889848fa8b870c4eff17b17e22e52667c9d27689eb7e02c5c91e9c4444ee42c4706aacadf343a481bd96e9c51f019d214ca2422ca0d85f2d75c22f30a5144cf31619d9a53390ba9c744e4331fadc9e6bdfa91fa9a3a7f677e1fbbe5e9feaf7b4ea984ed1a2f4a1e67007410e740b92b6a8d77a86235969b0b859be092e0124345130dcd9420bdfd11fcfe24e8e3839b96158c4cd1441220d5c6efd8e5ec1ecdc39b913bf9ccbf084f2fd270a4e0c8ad4b5ce6d20d6f25cb954fab223f8178be77a6ff2e7162cb0892d6cfc1b115fdc57f1d2e63e5fa4b78c") getsockopt$sock_int(r4, 0x1, 0x27, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) sendto(r0, &(0x7f0000000cc0)="d305461154c820caf2c67895486b8cbbf3ba155d6485fce8e58a6f19e53eae45c0ae6e462e55bc3c43ba3d84e92385bc7734092d135246ba895e734cd22315a9f93735acdb6802ff6056879ba73c769036e9755b4bcacefb088783f0f331040e9488be479ff88e0d7450abae9cb1b4e344ba07f38a9147eb74ccb65cf897b4", 0x7f, 0x20000884, &(0x7f0000000d40)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(xcbc(aes),pcbc(twofish-asm))\x00'}, 0x80) r11 = open_tree(0xffffffffffffffff, &(0x7f0000000dc0)='./file0\x00', 0x8001) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e40)={0x0, @multicast2, @broadcast}, &(0x7f0000000e80)=0xc) sendmsg$nl_route(r11, &(0x7f00000010c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)=@bridge_setlink={0x1c0, 0x13, 0x2, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r12, 0x410, 0x202}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x3}, @IFLA_VF_PORTS={0x198, 0x18, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d68d380fc81c67fe2f24b6eb40dfcb3a"}, @IFLA_PORT_PROFILE={0x17, 0x2, '-)##:${*.$-L]+&%\'\xac\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x80000000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cd8b11fe480d0be94262069643213754"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d3494eb15a216c30ea351d10121231cb"}, @IFLA_PORT_PROFILE={0x6, 0x2, '%\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0170dd8852d166e6c0d40aef86ce8fab"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_PROFILE={0x8, 0x2, ',+/\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '{\x00'}, @IFLA_PORT_PROFILE={0xb, 0x2, 'vxcan1\x00'}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6a34d43ae379e000e3852b6f11707490"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1ee954565b2729a8f87e69a476090304"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "55a2b7f096eac52560cacb5e0f041a7b"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "daf45ae02a74c2d84ecaf9021d1e3879"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "58a85df9df35bd58d0d079748c309e6d"}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}, @IFLA_PORT_PROFILE={0x2c, 0x2, 'authencesn(xcbc(aes),pcbc(twofish-asm))\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7ebedb57b10bbfd97038bf8a5ed2d038"}, @IFLA_PORT_PROFILE={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x48081) r13 = accept$phonet_pipe(r11, &(0x7f0000001100), &(0x7f0000001140)=0x10) connect$phonet_pipe(r13, &(0x7f0000001180)={0x23, 0x4, 0x1, 0x1}, 0x10) sendmsg$kcm(r11, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001200)=[{0xb0, 0x118, 0x1f, "e9a064e8a10f4120be8edc6bf45fb507b72bc575ff1ade238225380abd4edc54addb97d5ab868e50f77f7304d70f06c71524301813468d163f8a48374b5ada38ab61977274105b2903eba999b09cb42ed4cea97fa34fd322ade339759a6c8899c87e7703192abc281356644d85dfcf4b0041aff620d4c4299d43d407f3e0f8c03ade44d2c1e4d1aaa76cd51cd0275ec0dfb33bb42d4eed0040"}, {0xf8, 0x118, 0x4, "051086c9bd58b6c3133bcad13ebd7a0a90094587bc5d14df5efb5f02a6c9a14b8be2dce9176365190c5ff91f9c8b9d59bb7bca1f9a1853416675a5d2d5f830b03f43fd5de6a5aa239f8bf5abf23b7ac4ceea53c77f84690eefcfcdac5e0d7c76bda867b45912ed1743ca8f182fb2bc00dd07dada84a384d62933f0ea310bc65985454e34f399c9cd5af748894b36b6bfffdcea7821276b8340b47dd118283e0c32548b55e2e0eaef3bf0c5fed0c2613ed21f60447f1a26fdea07af7d93b4950ac5c06223e5d6c5251a20c19edf0451f8730ae69cd52fb2177fe2ec6a39bb09ef9a4acb8f4f"}, {0x100, 0x10f, 0x1, "2fbbc40668003ca69645b38e5f4de6d527beb77cf284e0a1043d58652164857c762f9efa29073def7e4e3f8a1bb6cba5a6e661dbe7d60ece525d1cd7b7b4b1897abbc3a26647ea349d699133e21bc2cf70b389a204a0849d6d93f2010331d0bbde3073bd34dc55760df9d70798f528833558fb8644ac75ac475ddf636581acb14a76e59eafc56754801bf0d01fcea36cc6ec744f21c7e04925710b82198b36b4f7a22f31bb368cf7f44474a48adbce933c965e66e3d22095c54afd4fc6525b0a06b475014f0165c5ea82d5d96562b963717ff2ddee20eb0f86b3f1bedb4309b4afe8e942885cef9413026ece"}, {0xd8, 0x10e, 0x6, "1e46f8109b51ce507cb08a55d8863f0fe08da984e057aafc8be4c8f2119aed434a73875d09cd8a24fbe1655f2bfa7b0e8dd720e499689ea63358b2518d54c3cf4e9a40cbcaaceb7a6b0ffe1fbbdd02af4b1e57b5fb86736e4c656b0e3b63ba5bfc2971e61ed0f01e5eb4c994e70e1bf112f77dd56f9cb6c0efb73c7a8c93188948c4a845557033133e9d8242a1c1540a42bde1092e22f83d2d52ceb6132a8161df140f6caa6cfc2842b693e93a1b21b09a17de5711bbe6f43ba08d1861e1b0977f"}, {0x1010, 0x10f, 0x3, "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"}, {0xd8, 0x112, 0x5de, "a279ac384a0d344daa8564bf7aa76631b11b713c1bcc33d3b9a69a0282f6d372c2d50fb8208cb966258d6320285653a8d8cbf47393582af597c879bf2f9621af774d45591a0400ef730a4fd240c2acc9dcfe1005ca75ab98d5f48ad3bb4994d4fcdd29fb5e246eb2544dbbb5fee08c13bffb03c40c94b4dc5997cb68111784735f5f18b641d188787cf2e7c1f6ecea380e44e6074784326771ffa1f3a40a54fac2194c3ef88600a170f1adc81e8c2afeb8e0bfafb30924f34ab3f3938190b25b908e87"}], 0x1468}, 0x8091) 37.688778ms ago: executing program 2 (id=4351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000000), &(0x7f0000000280)='%-010d \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 37.238788ms ago: executing program 4 (id=4352): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x4, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$eJzs3U1rXNUbAPDn3mb+k38bTQQVX0AqihVLJ01sKV1ZF6KbYqDgNg3JJMRMemNmpjahi3TlVkRRcKPfwY0rxbUfwK+gIFrioq5G7rykbTrTjnWSgczvB3fmOffe4TlnJpwHcoY5AYysk/lDGvF8RMwlEZPt80lEFJrRWMSl1n27t28u5kcSjcaVP5LmPXk77nlN7kRE7ETEcxHxUyHidPpg3urW9tpCpVLebLena+sb09Wt7TOr6wsr5ZXytYvnzs2eu3D+4sXBjfWN9z94tnT+nYnv55bnT838+l0Sl2Kife3ecQxS6z0p5G/hfd49iGRDlAy7AzyWsYg41n5+JibjWDMCAI6yRjGiAQCMmET9B4AR0/k/QGdt76DWwXr5/e2IGO+Wf6y9ZjbeXIc8vpvctzKRRMTUYXaUI2nnVkRcnTr54N9f8sCa7b91dhAd5ED9mM8/l7rNP+ne/BNd5p/xzncn/qPe89/d/Md6zH9zfeZ478V61jP/rYgXxrrlT/byJz3yX+0z/w93lv7uda3xbcRrXetPcl+u3t8PmV5erZTPth675zhZv/nhw8Z/vEf+nUeMf6PP8U989vLPOw/J//orD//8u+XPa+Knfeb/pPDWF72u5fmXeoz/UZ//N33mv/DSR9t93goAAAAAAAAAAAAAAAAAAAAAAAAAAABHQhoRE5Gkpb04TUul1h7eT8fxtJJVa6eXs/q1pWjulT0VhbTzU8uTrXaSt2fav8ffac8249299psR8VREfF78f7NdWswqS8MePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0ndi3//9fxdb+/wDAETc+7A4AAIdO/QeA0aP+A8DoUf8BYPSo/wAwetR/ABg9j1H/iwfRDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGxtzly/nR2L19czFvL13fqq9l188slatrpfX6Ymkx29worWTZSqVcWszW978+2deuZNnG7GzUb0zXytXadHVre349q1+rza+uL6yU58uFQxsZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRvonkkaSki0macpqVSxBMRMRWFZHm1Uj4bEU9GxC/FQjFvzwy70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwYNWt7bWFSqW8KRAIBHvBsGcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHx3N/0edk8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJjS35KIyI9Tk69O7L/6v+ROsfkcER9/feXLGwu12uZMfv7PvfO1r9rnZ4fRfwDgUTp1ulPHAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCb6tb22kKlUt5sBXcaLXfPDCAY9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABicfwIAAP//wLPUPg==") 0s ago: executing program 5 (id=4353): syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) getpid() sched_setaffinity(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x9) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0180729e0937c9a78b457be93af2fef95f8fc2000000bbbbbbbbbbbb86dd60b3388300103a"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ][T14911] 42778 total pagecache pages [ 193.957531][T14911] 2 pages in swap cache [ 193.961698][T14911] Free swap = 124988kB [ 193.965909][T14911] Total swap = 124996kB [ 193.970069][T14911] 2097051 pages RAM [ 193.973855][T14911] 0 pages HighMem/MovableOnly [ 193.978545][T14911] 80444 pages reserved [ 194.023151][T14922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.036473][T14922] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 194.048721][T14922] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 194.092332][T14939] loop4: detected capacity change from 0 to 256 [ 194.099169][T14939] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.130977][T14939] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.281142][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3693'. [ 194.290488][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3693'. [ 194.404669][T14978] loop5: detected capacity change from 0 to 1764 [ 194.414518][T14978] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 194.430745][T14968] netlink: 'syz.4.3695': attribute type 1 has an invalid length. [ 194.459700][T14981] FAULT_INJECTION: forcing a failure. [ 194.459700][T14981] name failslab, interval 1, probability 0, space 0, times 0 [ 194.472488][T14981] CPU: 0 UID: 0 PID: 14981 Comm: syz.5.3700 Not tainted syzkaller #0 PREEMPT(voluntary) [ 194.472516][T14981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.472529][T14981] Call Trace: [ 194.472535][T14981] [ 194.472542][T14981] __dump_stack+0x1d/0x30 [ 194.472561][T14981] dump_stack_lvl+0xe8/0x140 [ 194.472576][T14981] dump_stack+0x15/0x1b [ 194.472613][T14981] should_fail_ex+0x265/0x280 [ 194.472635][T14981] should_failslab+0x8c/0xb0 [ 194.472662][T14981] kmem_cache_alloc_node_noprof+0x57/0x320 [ 194.472684][T14981] ? __alloc_skb+0x101/0x320 [ 194.472700][T14981] __alloc_skb+0x101/0x320 [ 194.472755][T14981] netlink_alloc_large_skb+0xba/0xf0 [ 194.472850][T14981] netlink_sendmsg+0x3cf/0x6b0 [ 194.472907][T14981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.473007][T14981] __sock_sendmsg+0x145/0x180 [ 194.473035][T14981] ____sys_sendmsg+0x345/0x4e0 [ 194.473145][T14981] ___sys_sendmsg+0x17b/0x1d0 [ 194.473230][T14981] __sys_sendmmsg+0x178/0x300 [ 194.473264][T14981] __x64_sys_sendmmsg+0x57/0x70 [ 194.473322][T14981] x64_sys_call+0x1c4a/0x2ff0 [ 194.473392][T14981] do_syscall_64+0xd2/0x200 [ 194.473419][T14981] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.473443][T14981] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 194.473483][T14981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.473576][T14981] RIP: 0033:0x7faf905bebe9 [ 194.473593][T14981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.473608][T14981] RSP: 002b:00007faf8f027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 194.473624][T14981] RAX: ffffffffffffffda RBX: 00007faf907e5fa0 RCX: 00007faf905bebe9 [ 194.473635][T14981] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 194.473651][T14981] RBP: 00007faf8f027090 R08: 0000000000000000 R09: 0000000000000000 [ 194.473662][T14981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.473800][T14981] R13: 00007faf907e6038 R14: 00007faf907e5fa0 R15: 00007fff722c3708 [ 194.473819][T14981] [ 194.492173][T14968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.517362][T14987] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3702'. [ 194.548162][T14988] lo speed is unknown, defaulting to 1000 [ 194.576411][T14985] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 194.726009][T14985] bond1: (slave batadv1): making interface the new active one [ 194.734533][T14985] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 194.808048][T14982] lo speed is unknown, defaulting to 1000 [ 194.905253][T15001] netlink: 'syz.4.3707': attribute type 10 has an invalid length. [ 194.952108][T15001] team0: Port device dummy0 added [ 194.972589][T15007] netlink: 'syz.4.3707': attribute type 10 has an invalid length. [ 195.003185][T15007] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 195.022947][T15007] team0: Failed to send options change via netlink (err -105) [ 195.030635][T15007] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 195.039695][T15007] team0: Port device dummy0 removed [ 195.047286][T15007] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 195.070705][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3707'. [ 195.080103][T15001] netlink: 'syz.4.3707': attribute type 30 has an invalid length. [ 195.092066][ T163] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.102789][ T163] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.111934][ T163] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.132091][ T163] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.172746][T15025] 9pnet_fd: Insufficient options for proto=fd [ 195.296896][T15047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.304441][T15047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.312036][T15042] capability: warning: `syz.3.3723' uses 32-bit capabilities (legacy support in use) [ 195.323600][T15047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.331102][T15047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.458711][T15069] loop4: detected capacity change from 0 to 512 [ 195.465544][T15069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.472386][T15069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.480917][T15069] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 195.509361][T15069] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 195.517699][T15069] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 195.526356][T15069] EXT4-fs (loop4): 1 truncate cleaned up [ 195.532676][T15069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.549221][T15069] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 195.567837][T14124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.603244][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 195.603336][ T29] audit: type=1326 audit(195.593:4468): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 195.609879][T15077] loop4: detected capacity change from 0 to 164 [ 195.632949][ T29] audit: type=1326 audit(195.593:4469): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 195.633013][ T29] audit: type=1326 audit(195.593:4470): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 195.640148][T15077] iso9660: Unknown parameter '01777777777777777777777ÿ' [ 195.662451][ T29] audit: type=1326 audit(195.593:4471): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 195.715955][ T29] audit: type=1326 audit(195.593:4472): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 195.739564][ T29] audit: type=1326 audit(195.593:4473): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 195.762882][ T29] audit: type=1326 audit(195.593:4474): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 195.786344][ T29] audit: type=1326 audit(195.593:4475): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ce500b07 code=0x7ffc0000 [ 195.809735][ T29] audit: type=1326 audit(195.593:4476): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb3ce500a7c code=0x7ffc0000 [ 195.833706][ T29] audit: type=1326 audit(195.593:4477): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb3ce5009b4 code=0x7ffc0000 [ 195.975549][T15096] loop2: detected capacity change from 0 to 256 [ 195.982779][T15096] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.995189][T15096] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.064883][T15100] SELinux: failed to load policy [ 196.243885][T15118] loop2: detected capacity change from 0 to 1024 [ 196.264644][T15118] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3752: Failed to acquire dquot type 0 [ 196.276982][T15118] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 196.293477][T15118] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3752: corrupted inode contents [ 196.305901][T15118] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.3752: mark_inode_dirty error [ 196.317758][T15118] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3752: corrupted inode contents [ 196.330185][T15118] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.3752: mark_inode_dirty error [ 196.342017][T15118] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3752: corrupted inode contents [ 196.354427][T15118] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 196.363106][T15118] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.3752: corrupted inode contents [ 196.376059][T15118] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.3752: mark_inode_dirty error [ 196.387910][T15118] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 196.397611][T15118] EXT4-fs (loop2): 1 truncate cleaned up [ 196.403903][T15118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.456945][T15132] smc: net device bond0 applied user defined pnetid AYZ2 [ 196.469012][T15132] smc: removing net device bond0 with user defined pnetid AYZ2 [ 196.483070][T15132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.497420][T15132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.521151][T15132] bond0 (unregistering): Released all slaves [ 196.631014][T15139] pim6reg: entered allmulticast mode [ 196.638920][T15139] pim6reg: left allmulticast mode [ 196.688058][T15139] loop3: detected capacity change from 0 to 164 [ 196.695176][T15139] iso9660: Unknown parameter '01777777777777777777777ÿ' [ 196.788257][T15145] 9pnet_fd: Insufficient options for proto=fd [ 196.797725][T15147] loop4: detected capacity change from 0 to 512 [ 196.805165][T15147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.811961][T15147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.818838][T15147] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 196.831017][T15147] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 196.839050][T15147] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 196.857774][T15147] EXT4-fs (loop4): 1 truncate cleaned up [ 196.864038][T15147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.878324][T15147] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 196.883899][T15150] loop3: detected capacity change from 0 to 512 [ 196.893786][T15150] EXT4-fs: Ignoring removed nobh option [ 196.910285][T14124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.921674][T15150] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3761: corrupted inode contents [ 196.951843][T15150] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.3761: mark_inode_dirty error [ 196.952237][T15150] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3761: corrupted inode contents [ 196.952316][T15150] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3761: mark_inode_dirty error [ 196.952638][T15150] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3761: Failed to acquire dquot type 0 [ 196.953132][T15150] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3761: corrupted inode contents [ 197.010646][T15150] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.3761: mark_inode_dirty error [ 197.022580][T15157] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 197.029117][T15157] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.037054][T15157] vhci_hcd vhci_hcd.0: Device attached [ 197.043991][T15150] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3761: corrupted inode contents [ 197.044187][T15150] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3761: mark_inode_dirty error [ 197.068854][T15150] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3761: corrupted inode contents [ 197.069826][T15160] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 197.088084][T15160] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.088162][T15160] vhci_hcd vhci_hcd.0: Device attached [ 197.106080][T15150] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 197.106580][T15156] program syz.4.3762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.134153][T15150] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3761: corrupted inode contents [ 197.134379][T15150] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.3761: mark_inode_dirty error [ 197.134474][T15150] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 197.134745][T15150] EXT4-fs (loop3): 1 truncate cleaned up [ 197.135180][T15150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.165142][T12363] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.218474][T15157] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 197.242133][T15157] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 197.242271][ T36] vhci_hcd: vhci_device speed not set [ 197.242339][T15157] vhci_hcd vhci_hcd.0: Device attached [ 197.309296][ T36] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 197.332897][T15167] vhci_hcd: connection closed [ 197.333053][T15161] vhci_hcd: connection closed [ 197.338175][ T2235] vhci_hcd: stop threads [ 197.347329][ T2235] vhci_hcd: release socket [ 197.347346][ T2235] vhci_hcd: disconnect device [ 197.347500][T15158] vhci_hcd: connection reset by peer [ 197.347749][ T2235] vhci_hcd: stop threads [ 197.347757][ T2235] vhci_hcd: release socket [ 197.347766][ T2235] vhci_hcd: disconnect device [ 197.347863][ T2235] vhci_hcd: stop threads [ 197.347868][ T2235] vhci_hcd: release socket [ 197.347878][ T2235] vhci_hcd: disconnect device [ 197.350263][T15193] loop4: detected capacity change from 0 to 256 [ 197.350731][T15193] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.365271][T15194] loop0: detected capacity change from 0 to 512 [ 197.374163][T15193] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.383364][T15194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.434402][T15194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.442422][T15194] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 197.451550][T15194] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 197.459790][T15194] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 197.460439][T15196] loop4: detected capacity change from 0 to 2048 [ 197.469154][T15194] EXT4-fs (loop0): 1 truncate cleaned up [ 197.480677][T15194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.497577][T15194] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 197.511574][T15196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 197.527076][T12838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.538876][T15196] __nla_validate_parse: 12 callbacks suppressed [ 197.538891][T15196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3775'. [ 197.563612][T14124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 197.606411][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3779'. [ 197.615889][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3779'. [ 197.638497][T15216] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3780'. [ 197.678668][T15221] pim6reg: entered allmulticast mode [ 197.685952][T15221] pim6reg: left allmulticast mode [ 197.707775][T13790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.725134][T15221] loop4: detected capacity change from 0 to 164 [ 197.732115][T15221] iso9660: Unknown parameter '01777777777777777777777ÿ' [ 197.765642][T15229] ip6gre1: entered allmulticast mode [ 197.788836][T15231] FAULT_INJECTION: forcing a failure. [ 197.788836][T15231] name failslab, interval 1, probability 0, space 0, times 0 [ 197.801809][T15231] CPU: 1 UID: 0 PID: 15231 Comm: syz.4.3785 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.801838][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.801936][T15231] Call Trace: [ 197.801943][T15231] [ 197.801952][T15231] __dump_stack+0x1d/0x30 [ 197.801973][T15231] dump_stack_lvl+0xe8/0x140 [ 197.802050][T15231] dump_stack+0x15/0x1b [ 197.802065][T15231] should_fail_ex+0x265/0x280 [ 197.802103][T15231] should_failslab+0x8c/0xb0 [ 197.802176][T15231] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 197.802201][T15231] ? sidtab_sid2str_get+0xa0/0x130 [ 197.802288][T15231] kmemdup_noprof+0x2b/0x70 [ 197.802309][T15231] sidtab_sid2str_get+0xa0/0x130 [ 197.802328][T15231] security_sid_to_context_core+0x1eb/0x2e0 [ 197.802423][T15231] security_sid_to_context+0x27/0x40 [ 197.802439][T15231] selinux_lsmprop_to_secctx+0x67/0xf0 [ 197.802457][T15231] security_lsmprop_to_secctx+0x43/0x80 [ 197.802479][T15231] audit_log_task_context+0x77/0x190 [ 197.802538][T15231] audit_log_task+0xf4/0x250 [ 197.802562][T15231] audit_seccomp+0x61/0x100 [ 197.802605][T15231] ? __seccomp_filter+0x68c/0x10d0 [ 197.802624][T15231] __seccomp_filter+0x69d/0x10d0 [ 197.802644][T15231] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 197.802668][T15231] ? vfs_write+0x7e8/0x960 [ 197.802691][T15231] __secure_computing+0x82/0x150 [ 197.802737][T15231] syscall_trace_enter+0xcf/0x1e0 [ 197.802759][T15231] do_syscall_64+0xac/0x200 [ 197.802784][T15231] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 197.802806][T15231] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 197.802852][T15231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.802869][T15231] RIP: 0033:0x7fb3ce4febe9 [ 197.802882][T15231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.802927][T15231] RSP: 002b:00007fb3ccf67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.802947][T15231] RAX: ffffffffffffffda RBX: 00007fb3ce725fa0 RCX: 00007fb3ce4febe9 [ 197.802961][T15231] RDX: 00000000000000d1 RSI: 0000000000000000 RDI: 0000000000000006 [ 197.802974][T15231] RBP: 00007fb3ccf67090 R08: 0000000000000004 R09: 0000000000000000 [ 197.803053][T15231] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.803064][T15231] R13: 00007fb3ce726038 R14: 00007fb3ce725fa0 R15: 00007ffeb5171b98 [ 197.803080][T15231] [ 198.069678][T15235] 9pnet_fd: Insufficient options for proto=fd [ 198.084952][T15233] SELinux: failed to load policy [ 198.092697][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3788'. [ 198.128705][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3791'. [ 198.132179][T15239] 9pnet_fd: Insufficient options for proto=fd [ 198.138113][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3791'. [ 198.153464][T15244] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3792'. [ 198.197588][T15251] lo speed is unknown, defaulting to 1000 [ 198.228745][T15258] FAULT_INJECTION: forcing a failure. [ 198.228745][T15258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.241900][T15258] CPU: 0 UID: 0 PID: 15258 Comm: syz.4.3798 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.241924][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.241936][T15258] Call Trace: [ 198.241942][T15258] [ 198.241948][T15258] __dump_stack+0x1d/0x30 [ 198.241969][T15258] dump_stack_lvl+0xe8/0x140 [ 198.241985][T15258] dump_stack+0x15/0x1b [ 198.242040][T15258] should_fail_ex+0x265/0x280 [ 198.242061][T15258] should_fail+0xb/0x20 [ 198.242078][T15258] should_fail_usercopy+0x1a/0x20 [ 198.242161][T15258] _copy_from_user+0x1c/0xb0 [ 198.242185][T15258] ___sys_sendmsg+0xc1/0x1d0 [ 198.242215][T15258] __x64_sys_sendmsg+0xd4/0x160 [ 198.242289][T15258] x64_sys_call+0x191e/0x2ff0 [ 198.242306][T15258] do_syscall_64+0xd2/0x200 [ 198.242355][T15258] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.242389][T15258] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 198.242409][T15258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.242426][T15258] RIP: 0033:0x7fb3ce4febe9 [ 198.242439][T15258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.242487][T15258] RSP: 002b:00007fb3ccf67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.242503][T15258] RAX: ffffffffffffffda RBX: 00007fb3ce725fa0 RCX: 00007fb3ce4febe9 [ 198.242514][T15258] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 198.242524][T15258] RBP: 00007fb3ccf67090 R08: 0000000000000000 R09: 0000000000000000 [ 198.242619][T15258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.242630][T15258] R13: 00007fb3ce726038 R14: 00007fb3ce725fa0 R15: 00007ffeb5171b98 [ 198.242645][T15258] [ 198.274402][T15261] loop5: detected capacity change from 0 to 256 [ 198.274840][T15261] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.284275][T15261] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.287065][T15259] lo speed is unknown, defaulting to 1000 [ 198.408697][T15269] SELinux: failed to load policy [ 198.470065][T15266] siw: device registration error -23 [ 198.487030][T15276] lo speed is unknown, defaulting to 1000 [ 198.538326][T15279] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3806'. [ 198.656129][T15302] FAULT_INJECTION: forcing a failure. [ 198.656129][T15302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.669450][T15302] CPU: 1 UID: 0 PID: 15302 Comm: syz.3.3814 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.669505][T15302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.669516][T15302] Call Trace: [ 198.669521][T15302] [ 198.669529][T15302] __dump_stack+0x1d/0x30 [ 198.669604][T15302] dump_stack_lvl+0xe8/0x140 [ 198.669623][T15302] dump_stack+0x15/0x1b [ 198.669682][T15302] should_fail_ex+0x265/0x280 [ 198.669767][T15302] should_fail_alloc_page+0xf2/0x100 [ 198.669816][T15302] __alloc_frozen_pages_noprof+0xff/0x360 [ 198.669850][T15302] alloc_pages_mpol+0xb3/0x250 [ 198.669922][T15302] alloc_pages_noprof+0x90/0x130 [ 198.670000][T15302] get_zeroed_page_noprof+0x1a/0x40 [ 198.670019][T15302] simple_transaction_get+0x4c/0x130 [ 198.670037][T15302] selinux_transaction_write+0x9d/0x110 [ 198.670067][T15302] ? __pfx_selinux_transaction_write+0x10/0x10 [ 198.670088][T15302] vfs_write+0x269/0x960 [ 198.670109][T15302] ? __rcu_read_unlock+0x4f/0x70 [ 198.670145][T15302] ? __fget_files+0x184/0x1c0 [ 198.670166][T15302] ksys_write+0xda/0x1a0 [ 198.670184][T15302] __x64_sys_write+0x40/0x50 [ 198.670256][T15302] x64_sys_call+0x27fe/0x2ff0 [ 198.670274][T15302] do_syscall_64+0xd2/0x200 [ 198.670323][T15302] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 198.670350][T15302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.670377][T15302] RIP: 0033:0x7f2b6625ebe9 [ 198.670431][T15302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.670444][T15302] RSP: 002b:00007f2b64cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.670462][T15302] RAX: ffffffffffffffda RBX: 00007f2b66485fa0 RCX: 00007f2b6625ebe9 [ 198.670473][T15302] RDX: 0000000000000067 RSI: 0000200000000240 RDI: 0000000000000003 [ 198.670483][T15302] RBP: 00007f2b64cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.670502][T15302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.670516][T15302] R13: 00007f2b66486038 R14: 00007f2b66485fa0 R15: 00007ffef4d67288 [ 198.670535][T15302] [ 198.896278][T15305] ip6gre2: entered allmulticast mode [ 198.923889][T15307] SELinux: failed to load policy [ 198.955972][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3817'. [ 198.980603][T15311] loop0: detected capacity change from 0 to 256 [ 198.987898][T15312] netlink: 'syz.2.3808': attribute type 4 has an invalid length. [ 199.001506][T15311] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.014858][T15311] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.115687][T15317] FAULT_INJECTION: forcing a failure. [ 199.115687][T15317] name failslab, interval 1, probability 0, space 0, times 0 [ 199.128471][T15317] CPU: 0 UID: 0 PID: 15317 Comm: syz.3.3820 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.128500][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.128557][T15317] Call Trace: [ 199.128565][T15317] [ 199.128574][T15317] __dump_stack+0x1d/0x30 [ 199.128596][T15317] dump_stack_lvl+0xe8/0x140 [ 199.128615][T15317] dump_stack+0x15/0x1b [ 199.128628][T15317] should_fail_ex+0x265/0x280 [ 199.128646][T15317] should_failslab+0x8c/0xb0 [ 199.128727][T15317] __kmalloc_cache_node_noprof+0x54/0x320 [ 199.128752][T15317] ? __get_vm_area_node+0x106/0x1d0 [ 199.128776][T15317] __get_vm_area_node+0x106/0x1d0 [ 199.128828][T15317] __vmalloc_node_range_noprof+0x273/0xe00 [ 199.128854][T15317] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 199.128878][T15317] ? avc_has_perm_noaudit+0x1b1/0x200 [ 199.128900][T15317] ? cred_has_capability+0x210/0x280 [ 199.128995][T15317] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 199.129020][T15317] __vmalloc_noprof+0x83/0xc0 [ 199.129050][T15317] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 199.129077][T15317] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 199.129115][T15317] ? bpf_prog_alloc+0x2a/0x150 [ 199.129135][T15317] bpf_prog_alloc+0x3c/0x150 [ 199.129173][T15317] bpf_prog_load+0x514/0x1070 [ 199.129208][T15317] ? security_bpf+0x2b/0x90 [ 199.129236][T15317] __sys_bpf+0x462/0x7b0 [ 199.129351][T15317] __x64_sys_bpf+0x41/0x50 [ 199.129370][T15317] x64_sys_call+0x2aea/0x2ff0 [ 199.129387][T15317] do_syscall_64+0xd2/0x200 [ 199.129413][T15317] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.129438][T15317] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 199.129560][T15317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.129631][T15317] RIP: 0033:0x7f2b6625ebe9 [ 199.129645][T15317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.129660][T15317] RSP: 002b:00007f2b64cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.129676][T15317] RAX: ffffffffffffffda RBX: 00007f2b66485fa0 RCX: 00007f2b6625ebe9 [ 199.129688][T15317] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 199.129701][T15317] RBP: 00007f2b64cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.129732][T15317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.129742][T15317] R13: 00007f2b66486038 R14: 00007f2b66485fa0 R15: 00007ffef4d67288 [ 199.129762][T15317] [ 199.474305][T15326] tmpfs: Unknown parameter '/dev/rtc0' [ 199.517256][T15330] random: crng reseeded on system resumption [ 199.737338][T15340] SELinux: failed to load policy [ 200.648228][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 200.648242][ T29] audit: type=1400 audit(200.633:5035): avc: denied { mount } for pid=15364 comm="syz.4.3835" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 200.702591][T15368] 9pnet_fd: Insufficient options for proto=fd [ 200.748261][ T29] audit: type=1400 audit(200.703:5036): avc: denied { search } for pid=15364 comm="+}[@" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.806143][T15352] Set syz1 is full, maxelem 65536 reached [ 200.946593][T15384] loop4: detected capacity change from 0 to 256 [ 200.969848][T15384] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.986464][T15382] FAULT_INJECTION: forcing a failure. [ 200.986464][T15382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.999601][T15382] CPU: 0 UID: 0 PID: 15382 Comm: syz.5.3838 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.999624][T15382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.999634][T15382] Call Trace: [ 200.999641][T15382] [ 200.999650][T15382] __dump_stack+0x1d/0x30 [ 200.999671][T15382] dump_stack_lvl+0xe8/0x140 [ 200.999758][T15382] dump_stack+0x15/0x1b [ 200.999798][T15382] should_fail_ex+0x265/0x280 [ 200.999816][T15382] should_fail+0xb/0x20 [ 200.999880][T15382] should_fail_usercopy+0x1a/0x20 [ 200.999903][T15382] _copy_from_user+0x1c/0xb0 [ 200.999930][T15382] __sys_bpf+0x178/0x7b0 [ 200.999959][T15382] __x64_sys_bpf+0x41/0x50 [ 200.999983][T15382] x64_sys_call+0x2aea/0x2ff0 [ 201.000003][T15382] do_syscall_64+0xd2/0x200 [ 201.000071][T15382] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.000094][T15382] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 201.000185][T15382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.000213][T15382] RIP: 0033:0x7faf905bebe9 [ 201.000229][T15382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.000254][T15382] RSP: 002b:00007faf8f006038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.000275][T15382] RAX: ffffffffffffffda RBX: 00007faf907e6090 RCX: 00007faf905bebe9 [ 201.000288][T15382] RDX: 0000000000000020 RSI: 00002000000005c0 RDI: 0000000000000002 [ 201.000302][T15382] RBP: 00007faf8f006090 R08: 0000000000000000 R09: 0000000000000000 [ 201.000315][T15382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.000328][T15382] R13: 00007faf907e6128 R14: 00007faf907e6090 R15: 00007fff722c3708 [ 201.000348][T15382] [ 201.181921][T15384] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.264457][ T29] audit: type=1326 audit(201.253:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7a18ebe9 code=0x7ffc0000 [ 201.287863][ T29] audit: type=1326 audit(201.253:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7a18ebe9 code=0x7ffc0000 [ 201.311330][ T29] audit: type=1326 audit(201.253:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c7a18ebe9 code=0x7ffc0000 [ 201.334257][ T29] audit: type=1326 audit(201.253:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7a18ebe9 code=0x7ffc0000 [ 201.357337][ T29] audit: type=1326 audit(201.253:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2c7a18ebe9 code=0x7ffc0000 [ 201.380275][ T29] audit: type=1326 audit(201.253:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7a18ebe9 code=0x7ffc0000 [ 201.403130][ T29] audit: type=1326 audit(201.253:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2c7a18ebe9 code=0x7ffc0000 [ 201.425898][ T29] audit: type=1326 audit(201.253:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.2.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7a18ebe9 code=0x7ffc0000 [ 201.665392][T15400] netlink: 'syz.3.3846': attribute type 4 has an invalid length. [ 201.908578][T15408] vlan2: entered promiscuous mode [ 201.913805][T15408] gretap0: entered promiscuous mode [ 202.146388][T15419] loop4: detected capacity change from 0 to 256 [ 202.176165][T15419] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.231828][T15419] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.273239][T15425] netlink: 'syz.2.3856': attribute type 15 has an invalid length. [ 202.353182][ T36] usb 11-1: enqueue for inactive port 0 [ 202.358862][ T36] usb 11-1: enqueue for inactive port 0 [ 202.399218][T15432] lo speed is unknown, defaulting to 1000 [ 202.449352][ T36] vhci_hcd: vhci_device speed not set [ 202.472414][T15436] lo speed is unknown, defaulting to 1000 [ 202.556568][T15451] __nla_validate_parse: 8 callbacks suppressed [ 202.556585][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3863'. [ 202.573367][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3863'. [ 202.786883][T15466] loop2: detected capacity change from 0 to 256 [ 202.794994][T15466] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.833936][T15466] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.873309][T15470] tipc: Trying to set illegal importance in message [ 202.986186][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 203.012973][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 203.293457][T15511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3884'. [ 203.314331][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3885'. [ 203.323601][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3885'. [ 203.343284][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 203.354840][T15515] bridge0: entered promiscuous mode [ 203.361538][T15515] bridge0: port 3(macvlan2) entered blocking state [ 203.368109][T15515] bridge0: port 3(macvlan2) entered disabled state [ 203.375647][T15515] macvlan2: entered allmulticast mode [ 203.381192][T15515] bridge0: entered allmulticast mode [ 203.387878][T15515] macvlan2: left allmulticast mode [ 203.393134][T15515] bridge0: left allmulticast mode [ 203.398507][T15515] bridge0: left promiscuous mode [ 203.549574][T15526] loop0: detected capacity change from 0 to 512 [ 203.556247][T15526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.562909][T15526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.569758][T15526] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 203.579054][T15526] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 203.587207][T15526] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 203.595774][T15526] EXT4-fs (loop0): 1 truncate cleaned up [ 203.601798][T15526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.615587][T15526] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 203.631904][T12838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.653869][T15530] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3891'. [ 203.691959][T15536] lo speed is unknown, defaulting to 1000 [ 203.733332][T15536] lo speed is unknown, defaulting to 1000 [ 203.758894][T15538] loop0: detected capacity change from 0 to 512 [ 203.771277][T15538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.784984][T15538] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.801385][T15530] netlink: 'syz.0.3891': attribute type 4 has an invalid length. [ 203.907381][T15546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.916812][T15546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.086443][T15559] loop2: detected capacity change from 0 to 2048 [ 204.100376][T15559] EXT4-fs (loop2): failed to initialize system zone (-117) [ 204.108396][T15559] EXT4-fs (loop2): mount failed [ 204.128782][T15563] 9pnet_fd: Insufficient options for proto=fd [ 204.181478][T15569] tipc: Enabled bearer , priority 0 [ 204.188483][T15569] syzkaller0: entered promiscuous mode [ 204.194189][T15569] syzkaller0: entered allmulticast mode [ 204.203831][T15569] syzkaller0: mtu greater than device maximum [ 204.210826][T15568] tipc: Resetting bearer [ 204.231029][T15568] tipc: Disabling bearer [ 204.252002][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3905'. [ 204.283207][T15580] FAULT_INJECTION: forcing a failure. [ 204.283207][T15580] name failslab, interval 1, probability 0, space 0, times 0 [ 204.296105][T15580] CPU: 1 UID: 0 PID: 15580 Comm: syz.2.3907 Not tainted syzkaller #0 PREEMPT(voluntary) [ 204.296127][T15580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.296136][T15580] Call Trace: [ 204.296180][T15580] [ 204.296187][T15580] __dump_stack+0x1d/0x30 [ 204.296205][T15580] dump_stack_lvl+0xe8/0x140 [ 204.296220][T15580] dump_stack+0x15/0x1b [ 204.296246][T15580] should_fail_ex+0x265/0x280 [ 204.296263][T15580] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 204.296286][T15580] should_failslab+0x8c/0xb0 [ 204.296325][T15580] __kmalloc_cache_noprof+0x4c/0x320 [ 204.296350][T15580] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 204.296373][T15580] sctp_association_new+0xde5/0x1200 [ 204.296443][T15580] sctp_connect_new_asoc+0x1a8/0x3a0 [ 204.296518][T15580] sctp_sendmsg+0xf10/0x18d0 [ 204.296543][T15580] ? selinux_socket_sendmsg+0xa1/0x1b0 [ 204.296573][T15580] ? __pfx_sctp_sendmsg+0x10/0x10 [ 204.296597][T15580] inet_sendmsg+0xc5/0xd0 [ 204.296658][T15580] __sock_sendmsg+0x102/0x180 [ 204.296682][T15580] ____sys_sendmsg+0x345/0x4e0 [ 204.296703][T15580] ___sys_sendmsg+0x17b/0x1d0 [ 204.296796][T15580] __sys_sendmmsg+0x178/0x300 [ 204.296822][T15580] __x64_sys_sendmmsg+0x57/0x70 [ 204.296839][T15580] x64_sys_call+0x1c4a/0x2ff0 [ 204.296856][T15580] do_syscall_64+0xd2/0x200 [ 204.296917][T15580] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 204.296936][T15580] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 204.296957][T15580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.297054][T15580] RIP: 0033:0x7f2c7a18ebe9 [ 204.297067][T15580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.297081][T15580] RSP: 002b:00007f2c78bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.297097][T15580] RAX: ffffffffffffffda RBX: 00007f2c7a3b5fa0 RCX: 00007f2c7a18ebe9 [ 204.297108][T15580] RDX: 0000000000000003 RSI: 0000200000001040 RDI: 0000000000000003 [ 204.297118][T15580] RBP: 00007f2c78bef090 R08: 0000000000000000 R09: 0000000000000000 [ 204.297128][T15580] R10: 0000000000048000 R11: 0000000000000246 R12: 0000000000000001 [ 204.297142][T15580] R13: 00007f2c7a3b6038 R14: 00007f2c7a3b5fa0 R15: 00007ffed16ad0a8 [ 204.297157][T15580] [ 204.539554][T15586] 9pnet_fd: Insufficient options for proto=fd [ 204.564517][T15591] 9pnet_fd: Insufficient options for proto=fd [ 204.647094][T15604] loop3: detected capacity change from 0 to 512 [ 204.654923][T15604] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.662024][T15604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.682655][T15604] EXT4-fs (loop3): 1 truncate cleaned up [ 204.688919][T15604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.761149][T15621] vlan2: entered allmulticast mode [ 204.778351][T15623] loop2: detected capacity change from 0 to 512 [ 204.785430][T15623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.792330][T15623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.800142][T15623] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 204.810288][T15623] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 204.818461][T15623] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 204.827196][T15623] EXT4-fs (loop2): 1 truncate cleaned up [ 204.833312][T15623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.862927][T15623] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 204.894246][T12363] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.916126][T15629] 9pnet_fd: Insufficient options for proto=fd [ 204.930200][T15631] siw: device registration error -23 [ 205.253779][T15657] loop4: detected capacity change from 0 to 512 [ 205.260946][T15657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.267752][T15657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.274846][T15657] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 205.284557][T15657] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 205.292837][T15657] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 205.301615][T15657] EXT4-fs (loop4): 1 truncate cleaned up [ 205.308079][T15657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.322316][T15657] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 205.341990][T14124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.427614][T15669] 9pnet_fd: Insufficient options for proto=fd [ 205.487970][T13790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.544355][T15689] loop5: detected capacity change from 0 to 512 [ 205.570254][T15689] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.577354][T15689] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 205.594185][T15689] EXT4-fs (loop5): 1 truncate cleaned up [ 205.605178][T15689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.651223][T15700] 9pnet_fd: Insufficient options for proto=fd [ 205.835975][T15724] loop4: detected capacity change from 0 to 1024 [ 205.843689][T15724] EXT4-fs: Ignoring removed nobh option [ 205.849336][T15724] EXT4-fs: Ignoring removed bh option [ 205.862036][T15724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.881074][T15724] FAULT_INJECTION: forcing a failure. [ 205.881074][T15724] name failslab, interval 1, probability 0, space 0, times 0 [ 205.893789][T15724] CPU: 1 UID: 0 PID: 15724 Comm: syz.4.3961 Not tainted syzkaller #0 PREEMPT(voluntary) [ 205.893874][T15724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.893887][T15724] Call Trace: [ 205.893895][T15724] [ 205.893903][T15724] __dump_stack+0x1d/0x30 [ 205.893926][T15724] dump_stack_lvl+0xe8/0x140 [ 205.893942][T15724] dump_stack+0x15/0x1b [ 205.893956][T15724] should_fail_ex+0x265/0x280 [ 205.894047][T15724] should_failslab+0x8c/0xb0 [ 205.894070][T15724] kmem_cache_alloc_noprof+0x50/0x310 [ 205.894096][T15724] ? security_file_alloc+0x32/0x100 [ 205.894155][T15724] security_file_alloc+0x32/0x100 [ 205.894184][T15724] init_file+0x5c/0x1d0 [ 205.894211][T15724] alloc_empty_file+0x8b/0x200 [ 205.894240][T15724] path_openat+0x68/0x2170 [ 205.894256][T15724] ? _parse_integer_limit+0x170/0x190 [ 205.894278][T15724] ? kstrtoull+0x111/0x140 [ 205.894298][T15724] ? kstrtouint+0x76/0xc0 [ 205.894358][T15724] do_filp_open+0x109/0x230 [ 205.894445][T15724] do_sys_openat2+0xa6/0x110 [ 205.894473][T15724] __x64_sys_openat+0xf2/0x120 [ 205.894497][T15724] x64_sys_call+0x2e9c/0x2ff0 [ 205.894518][T15724] do_syscall_64+0xd2/0x200 [ 205.894619][T15724] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 205.894642][T15724] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 205.894702][T15724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.894723][T15724] RIP: 0033:0x7fb3ce4fd550 [ 205.894739][T15724] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 205.894815][T15724] RSP: 002b:00007fb3ccf66f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 205.894832][T15724] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb3ce4fd550 [ 205.894843][T15724] RDX: 0000000000000002 RSI: 00007fb3ccf66fa0 RDI: 00000000ffffff9c [ 205.894854][T15724] RBP: 00007fb3ccf66fa0 R08: 0000000000000000 R09: 0000000000000000 [ 205.894876][T15724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 205.894889][T15724] R13: 00007fb3ce726038 R14: 00007fb3ce725fa0 R15: 00007ffeb5171b98 [ 205.894908][T15724] [ 206.135800][T14124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.157358][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 206.157371][ T29] audit: type=1326 audit(206.143:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 206.188620][ T29] audit: type=1326 audit(206.143:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 206.211543][ T29] audit: type=1326 audit(206.143:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 206.234401][ T29] audit: type=1326 audit(206.143:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 206.257423][ T29] audit: type=1326 audit(206.143:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 206.276215][T15730] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 206.280425][ T29] audit: type=1326 audit(206.143:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 206.280509][ T29] audit: type=1326 audit(206.143:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 206.297380][T15728] infiniband syz!: set active [ 206.312590][ T29] audit: type=1326 audit(206.143:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb3ce500a7c code=0x7ffc0000 [ 206.335445][T15728] infiniband syz!: added team_slave_0 [ 206.340124][ T29] audit: type=1326 audit(206.143:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb3ce5009b4 code=0x7ffc0000 [ 206.340205][ T29] audit: type=1326 audit(206.143:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb3ce5009b4 code=0x7ffc0000 [ 206.425708][T15732] 9pnet_fd: Insufficient options for proto=fd [ 206.450557][T15728] RDS/IB: syz!: added [ 206.451273][T13533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.454759][T15728] smc: adding ib device syz! with port count 1 [ 206.470209][T15736] loop2: detected capacity change from 0 to 512 [ 206.471610][T15728] smc: ib device syz! port 1 has pnetid [ 206.492360][T15736] EXT4-fs (loop2): 1 orphan inode deleted [ 206.518734][T15736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.547993][ T2235] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 1 [ 207.163337][T15772] Set syz1 is full, maxelem 65536 reached [ 207.653298][T15781] loop0: detected capacity change from 0 to 2048 [ 207.697236][T12363] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.735466][T15785] __nla_validate_parse: 86 callbacks suppressed [ 207.735484][T15785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3980'. [ 207.801973][T15785] lo speed is unknown, defaulting to 1000 [ 207.896232][T15795] SELinux: failed to load policy [ 208.016811][T15804] 9pnet_fd: Insufficient options for proto=fd [ 208.041738][T15806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3990'. [ 208.064270][T15802] loop0: detected capacity change from 0 to 2048 [ 208.121042][T15802] EXT4-fs (loop0): failed to initialize system zone (-117) [ 208.128509][T15802] EXT4-fs (loop0): mount failed [ 208.205634][T15813] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3991'. [ 208.214833][T15813] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3991'. [ 208.228813][T15815] loop0: detected capacity change from 0 to 512 [ 208.255002][T15815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.262814][T15815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.270027][T15815] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 208.280950][T15815] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 208.289004][T15815] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 208.297610][T15815] EXT4-fs (loop0): 1 truncate cleaned up [ 208.304618][T15815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.321847][T15815] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 208.344234][T12838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.372622][T15811] netlink: 5560 bytes leftover after parsing attributes in process `syz.2.3990'. [ 208.408252][T15821] lo speed is unknown, defaulting to 1000 [ 208.463096][T15825] lo speed is unknown, defaulting to 1000 [ 208.486845][T15823] loop0: detected capacity change from 0 to 2048 [ 208.559854][T15823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.603515][T12838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.637250][T15831] 9pnet_fd: Insufficient options for proto=fd [ 208.753051][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3998'. [ 208.762113][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3998'. [ 208.787041][T15837] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 208.798708][T15837] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.806016][T15837] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.807818][T15834] SELinux: failed to load policy [ 209.057434][T15854] FAULT_INJECTION: forcing a failure. [ 209.057434][T15854] name failslab, interval 1, probability 0, space 0, times 0 [ 209.070145][T15854] CPU: 0 UID: 0 PID: 15854 Comm: syz.4.4005 Not tainted syzkaller #0 PREEMPT(voluntary) [ 209.070170][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.070206][T15854] Call Trace: [ 209.070213][T15854] [ 209.070221][T15854] __dump_stack+0x1d/0x30 [ 209.070242][T15854] dump_stack_lvl+0xe8/0x140 [ 209.070261][T15854] dump_stack+0x15/0x1b [ 209.070274][T15854] should_fail_ex+0x265/0x280 [ 209.070292][T15854] should_failslab+0x8c/0xb0 [ 209.070382][T15854] kmem_cache_alloc_noprof+0x50/0x310 [ 209.070426][T15854] ? security_inode_alloc+0x37/0x100 [ 209.070469][T15854] security_inode_alloc+0x37/0x100 [ 209.070489][T15854] inode_init_always_gfp+0x4b7/0x500 [ 209.070511][T15854] ? __pfx_sock_alloc_inode+0x10/0x10 [ 209.070536][T15854] alloc_inode+0x58/0x170 [ 209.070638][T15854] __sock_create+0x122/0x5b0 [ 209.070667][T15854] __sys_socketpair+0x170/0x430 [ 209.070698][T15854] __x64_sys_socketpair+0x52/0x60 [ 209.070787][T15854] x64_sys_call+0x2bf2/0x2ff0 [ 209.070806][T15854] do_syscall_64+0xd2/0x200 [ 209.070828][T15854] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.070848][T15854] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 209.070917][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.070944][T15854] RIP: 0033:0x7fb3ce4febe9 [ 209.070968][T15854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.070993][T15854] RSP: 002b:00007fb3ccf67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 209.071014][T15854] RAX: ffffffffffffffda RBX: 00007fb3ce725fa0 RCX: 00007fb3ce4febe9 [ 209.071027][T15854] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 209.071043][T15854] RBP: 00007fb3ccf67090 R08: 0000000000000000 R09: 0000000000000000 [ 209.071054][T15854] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 209.071101][T15854] R13: 00007fb3ce726038 R14: 00007fb3ce725fa0 R15: 00007ffeb5171b98 [ 209.071118][T15854] [ 209.071130][T15854] socket: no more sockets [ 209.324849][T15856] loop4: detected capacity change from 0 to 2048 [ 209.327526][T15858] FAULT_INJECTION: forcing a failure. [ 209.327526][T15858] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.344615][T15858] CPU: 0 UID: 0 PID: 15858 Comm: syz.5.4007 Not tainted syzkaller #0 PREEMPT(voluntary) [ 209.344640][T15858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.344650][T15858] Call Trace: [ 209.344655][T15858] [ 209.344707][T15858] __dump_stack+0x1d/0x30 [ 209.344726][T15858] dump_stack_lvl+0xe8/0x140 [ 209.344744][T15858] dump_stack+0x15/0x1b [ 209.344758][T15858] should_fail_ex+0x265/0x280 [ 209.344778][T15858] should_fail_alloc_page+0xf2/0x100 [ 209.344816][T15858] __alloc_frozen_pages_noprof+0xff/0x360 [ 209.344847][T15858] alloc_pages_mpol+0xb3/0x250 [ 209.344896][T15858] vma_alloc_folio_noprof+0x1aa/0x300 [ 209.344926][T15858] do_wp_page+0x5db/0x24e0 [ 209.344945][T15858] ? enqueue_task_fair+0x35e/0x980 [ 209.344990][T15858] ? css_rstat_updated+0xb7/0x240 [ 209.345064][T15858] ? __rcu_read_lock+0x37/0x50 [ 209.345082][T15858] handle_mm_fault+0x77d/0x2c20 [ 209.345161][T15858] do_user_addr_fault+0x636/0x1090 [ 209.345190][T15858] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 209.345221][T15858] exc_page_fault+0x62/0xa0 [ 209.345253][T15858] asm_exc_page_fault+0x26/0x30 [ 209.345273][T15858] RIP: 0033:0x7faf90480ba3 [ 209.345289][T15858] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 209.345303][T15858] RSP: 002b:00007faf8f0263f0 EFLAGS: 00010206 [ 209.345316][T15858] RAX: 00000000000ea080 RBX: 00007faf8f026490 RCX: 00007faf86c07000 [ 209.345327][T15858] RDX: 00007faf8f026630 RSI: 0000000000000039 RDI: 00007faf8f026530 [ 209.345371][T15858] RBP: 000000000000005f R08: 0000000000000008 R09: 00000000000000a3 [ 209.345381][T15858] R10: 00000000000000b6 R11: 00007faf8f026490 R12: 0000000000000001 [ 209.345394][T15858] R13: 00007faf9065da20 R14: 00000000000000af R15: 00007faf8f026530 [ 209.345412][T15858] [ 209.345423][T15858] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 209.350631][T15860] lo speed is unknown, defaulting to 1000 [ 209.365573][T15858] loop5: detected capacity change from 0 to 2048 [ 209.408994][T15861] lo speed is unknown, defaulting to 1000 [ 209.555540][T15856] EXT4-fs (loop4): failed to initialize system zone (-117) [ 209.564336][T15856] EXT4-fs (loop4): mount failed [ 209.571805][T15858] Alternate GPT is invalid, using primary GPT. [ 209.578397][T15858] loop5: p2 p3 p7 [ 209.660395][T15872] lo speed is unknown, defaulting to 1000 [ 209.705456][T15884] 9pnet_fd: Insufficient options for proto=fd [ 209.798977][T15893] loop3: detected capacity change from 0 to 512 [ 209.814164][T15893] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.828516][T15893] EXT4-fs (loop3): 1 truncate cleaned up [ 209.842960][T15893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.891920][T15893] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.4019: invalid fast symlink length 39 [ 209.905194][T15893] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.4019: invalid fast symlink length 39 [ 209.942629][T15901] loop0: detected capacity change from 0 to 512 [ 209.977098][T15899] infiniband syz1: set active [ 209.981919][T15899] infiniband syz1: added syz_tun [ 210.025688][T15912] loop4: detected capacity change from 0 to 2048 [ 210.038945][T15913] lo speed is unknown, defaulting to 1000 [ 210.039537][T13790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.054320][T15899] RDS/IB: syz1: added [ 210.058394][T15899] smc: adding ib device syz1 with port count 1 [ 210.065812][T15912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.072762][T15899] smc: ib device syz1 port 1 has pnetid [ 210.100690][T15912] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 210.159435][T15918] lo speed is unknown, defaulting to 1000 [ 210.186434][T15928] vhci_hcd: invalid port number 255 [ 210.228412][T14124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.485116][T15905] Set syz1 is full, maxelem 65536 reached [ 210.637709][T15949] FAULT_INJECTION: forcing a failure. [ 210.637709][T15949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.650898][T15949] CPU: 1 UID: 0 PID: 15949 Comm: syz.0.4033 Not tainted syzkaller #0 PREEMPT(voluntary) [ 210.650956][T15949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.650969][T15949] Call Trace: [ 210.650975][T15949] [ 210.650984][T15949] __dump_stack+0x1d/0x30 [ 210.651003][T15949] dump_stack_lvl+0xe8/0x140 [ 210.651019][T15949] dump_stack+0x15/0x1b [ 210.651050][T15949] should_fail_ex+0x265/0x280 [ 210.651080][T15949] should_fail+0xb/0x20 [ 210.651096][T15949] should_fail_usercopy+0x1a/0x20 [ 210.651140][T15949] _copy_from_iter+0xd2/0xe80 [ 210.651162][T15949] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 210.651193][T15949] copy_page_from_iter+0x178/0x2a0 [ 210.651217][T15949] ? anon_pipe_write+0x91/0xaa0 [ 210.651278][T15949] anon_pipe_write+0x514/0xaa0 [ 210.651302][T15949] ? anon_pipe_write+0x91/0xaa0 [ 210.651370][T15949] ? __pfx_anon_pipe_write+0x10/0x10 [ 210.651390][T15949] vfs_write+0x52a/0x960 [ 210.651415][T15949] ksys_write+0xda/0x1a0 [ 210.651438][T15949] __x64_sys_write+0x40/0x50 [ 210.651493][T15949] x64_sys_call+0x27fe/0x2ff0 [ 210.651560][T15949] do_syscall_64+0xd2/0x200 [ 210.651647][T15949] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.651668][T15949] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.651721][T15949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.651743][T15949] RIP: 0033:0x7f154947ebe9 [ 210.651836][T15949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.651853][T15949] RSP: 002b:00007f1547ee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.651873][T15949] RAX: ffffffffffffffda RBX: 00007f15496a5fa0 RCX: 00007f154947ebe9 [ 210.651894][T15949] RDX: 0000000000011000 RSI: 0000200000000340 RDI: 0000000000000004 [ 210.651908][T15949] RBP: 00007f1547ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 210.651918][T15949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.651929][T15949] R13: 00007f15496a6038 R14: 00007f15496a5fa0 R15: 00007ffee4347f28 [ 210.651948][T15949] [ 210.894919][T15958] 9pnet_fd: Insufficient options for proto=fd [ 210.946706][T15962] loop5: detected capacity change from 0 to 512 [ 210.953346][T15962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.960096][T15962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.967326][T15962] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 210.979853][T15962] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 210.987942][T15962] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 210.997684][T15962] EXT4-fs (loop5): 1 truncate cleaned up [ 211.001384][T15971] 9pnet_fd: Insufficient options for proto=fd [ 211.004372][T15962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.043784][T15962] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 211.061117][T15979] loop3: detected capacity change from 0 to 128 [ 211.072301][T15979] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.086291][T13533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.103074][T15979] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.4044: No space for directory leaf checksum. Please run e2fsck -D. [ 211.118690][T15979] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.4044: checksumming directory block 0 [ 211.133450][T15982] loop5: detected capacity change from 0 to 512 [ 211.147132][T15979] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.4044: No space for directory leaf checksum. Please run e2fsck -D. [ 211.162631][T15979] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.4044: Directory block failed checksum [ 211.178048][T15982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.194428][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 211.194442][ T29] audit: type=1400 audit(211.183:5378): avc: denied { read write } for pid=15981 comm="syz.5.4045" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.222804][ T29] audit: type=1400 audit(211.183:5379): avc: denied { open } for pid=15981 comm="syz.5.4045" path="/161/file0/file0/file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.257970][ T29] audit: type=1400 audit(211.203:5380): avc: denied { append } for pid=15981 comm="syz.5.4045" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.279987][ T29] audit: type=1400 audit(211.203:5381): avc: denied { ioctl } for pid=15981 comm="syz.5.4045" path="/161/file0/file2" dev="loop5" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.304585][ T29] audit: type=1326 audit(211.253:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 211.327549][ T29] audit: type=1326 audit(211.253:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 211.350508][ T29] audit: type=1326 audit(211.253:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 211.373545][ T29] audit: type=1326 audit(211.253:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 211.396472][ T29] audit: type=1326 audit(211.253:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 211.419787][ T29] audit: type=1326 audit(211.253:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15981 comm="syz.5.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 211.513705][T16000] loop3: detected capacity change from 0 to 2048 [ 211.532181][T16000] EXT4-fs (loop3): failed to initialize system zone (-117) [ 211.549580][T16000] EXT4-fs (loop3): mount failed [ 211.560424][T16004] lo speed is unknown, defaulting to 1000 [ 211.570158][T16008] 9pnet_fd: Insufficient options for proto=fd [ 211.593466][T16010] FAULT_INJECTION: forcing a failure. [ 211.593466][T16010] name failslab, interval 1, probability 0, space 0, times 0 [ 211.606249][T16010] CPU: 1 UID: 0 PID: 16010 Comm: syz.3.4054 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.606351][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.606362][T16010] Call Trace: [ 211.606368][T16010] [ 211.606424][T16010] __dump_stack+0x1d/0x30 [ 211.606445][T16010] dump_stack_lvl+0xe8/0x140 [ 211.606460][T16010] dump_stack+0x15/0x1b [ 211.606474][T16010] should_fail_ex+0x265/0x280 [ 211.606525][T16010] should_failslab+0x8c/0xb0 [ 211.606561][T16010] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 211.606591][T16010] ? kstrdup_const+0x3e/0x50 [ 211.606617][T16010] kstrdup+0x3e/0xd0 [ 211.606673][T16010] kstrdup_const+0x3e/0x50 [ 211.606692][T16010] alloc_vfsmnt+0xe7/0x300 [ 211.606793][T16010] clone_mnt+0x46/0x630 [ 211.606823][T16010] copy_tree+0x2cd/0x8c0 [ 211.606843][T16010] copy_mnt_ns+0x120/0x5c0 [ 211.606873][T16010] ? kmem_cache_alloc_noprof+0x220/0x310 [ 211.606893][T16010] ? create_new_namespaces+0x3c/0x3d0 [ 211.606943][T16010] create_new_namespaces+0x83/0x3d0 [ 211.606971][T16010] unshare_nsproxy_namespaces+0xe8/0x120 [ 211.607001][T16010] ksys_unshare+0x3d0/0x6d0 [ 211.607101][T16010] ? ksys_write+0x192/0x1a0 [ 211.607126][T16010] __x64_sys_unshare+0x1f/0x30 [ 211.607217][T16010] x64_sys_call+0x2911/0x2ff0 [ 211.607238][T16010] do_syscall_64+0xd2/0x200 [ 211.607261][T16010] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.607280][T16010] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 211.607348][T16010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.607370][T16010] RIP: 0033:0x7f2b6625ebe9 [ 211.607452][T16010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.607476][T16010] RSP: 002b:00007f2b64cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 211.607496][T16010] RAX: ffffffffffffffda RBX: 00007f2b66485fa0 RCX: 00007f2b6625ebe9 [ 211.607507][T16010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 211.607518][T16010] RBP: 00007f2b64cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.607576][T16010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.607589][T16010] R13: 00007f2b66486038 R14: 00007f2b66485fa0 R15: 00007ffef4d67288 [ 211.607607][T16010] [ 211.891237][T16014] loop3: detected capacity change from 0 to 512 [ 211.898136][T16014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.905259][T16014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.918908][T16014] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 211.930390][T16014] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 211.943665][T16014] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 211.959733][T16014] EXT4-fs (loop3): 1 truncate cleaned up [ 211.968426][T16014] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 211.989860][T16024] SELinux: failed to load policy [ 212.066235][T16040] loop0: detected capacity change from 0 to 128 [ 212.078568][T16041] loop5: detected capacity change from 0 to 2048 [ 212.095717][T16041] EXT4-fs (loop5): failed to initialize system zone (-117) [ 212.103655][T16041] EXT4-fs (loop5): mount failed [ 212.177238][T16050] loop4: detected capacity change from 0 to 512 [ 212.191003][T16050] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4069: Failed to acquire dquot type 1 [ 212.213482][T16055] loop5: detected capacity change from 0 to 128 [ 212.225222][T16050] EXT4-fs (loop4): 1 truncate cleaned up [ 212.230246][T16055] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.4070: No space for directory leaf checksum. Please run e2fsck -D. [ 212.246238][T16055] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.4070: checksumming directory block 0 [ 212.258354][T16050] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4069'. [ 212.272189][T16055] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.4070: No space for directory leaf checksum. Please run e2fsck -D. [ 212.287576][T16055] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.4070: Directory block failed checksum [ 212.333191][T16063] loop4: detected capacity change from 0 to 512 [ 212.341298][T16063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.347940][T16063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.356203][T16063] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 212.367880][T16063] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 212.376303][T16063] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 212.393088][T16063] EXT4-fs (loop4): 1 truncate cleaned up [ 212.410348][T16063] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 212.445790][T16072] veth0_to_team: entered promiscuous mode [ 212.478896][T16074] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4075'. [ 212.521473][T16079] 9pnet_fd: Insufficient options for proto=fd [ 212.544364][T16080] SELinux: failed to load policy [ 212.550082][T16083] loop3: detected capacity change from 0 to 512 [ 212.571056][T16070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.580861][T16070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.628043][T16097] loop0: detected capacity change from 0 to 1024 [ 212.670552][T16097] can0: slcan on ttyS3. [ 212.709514][T16097] can0 (unregistered): slcan off ttyS3. [ 212.747092][T16105] can0: slcan on ttyS3. [ 212.757707][T16103] loop4: detected capacity change from 0 to 128 [ 212.947943][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 212.955429][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 212.962886][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 212.970357][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 212.977768][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 212.985238][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 212.992649][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 213.000150][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 213.007805][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 213.015220][ T3372] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 213.025769][ T3372] hid-generic 0000:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 213.081934][T16112] lo speed is unknown, defaulting to 1000 [ 213.091260][T16120] loop4: detected capacity change from 0 to 512 [ 213.098047][T16120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.104901][T16120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.113213][T16120] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 213.122641][T16120] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 213.131601][T16120] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 213.140313][T16120] EXT4-fs (loop4): 1 truncate cleaned up [ 213.147708][T16120] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 213.191318][T16115] lo speed is unknown, defaulting to 1000 [ 213.333951][T16140] netlink: 'syz.5.4095': attribute type 10 has an invalid length. [ 213.355875][T16140] syz_tun: entered promiscuous mode [ 213.367735][T16140] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 213.378567][T16138] 9pnet_fd: Insufficient options for proto=fd [ 213.383615][T16140] netlink: 'syz.5.4095': attribute type 10 has an invalid length. [ 213.396850][T16140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.406117][T16140] team0: Port device bond0 added [ 213.420353][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 213.437847][T16140] loop5: detected capacity change from 0 to 512 [ 213.444804][T16140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.457806][T16140] EXT4-fs (loop5): 1 truncate cleaned up [ 213.504530][T16150] loop5: detected capacity change from 0 to 2048 [ 213.521192][T16150] EXT4-fs (loop5): failed to initialize system zone (-117) [ 213.528495][T16150] EXT4-fs (loop5): mount failed [ 213.572442][T16158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.586156][T16158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.596254][T13073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=13073 comm=kworker/0:6 [ 213.610354][ T3390] kernel read not supported for file 412/task/413/oom_score_adj (pid: 3390 comm: kworker/0:3) [ 213.642297][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4104'. [ 213.651854][T16105] can0 (unregistered): slcan off ttyS3. [ 213.660105][T16168] hsr_slave_0: left promiscuous mode [ 213.669592][T16168] hsr_slave_1: left promiscuous mode [ 213.694848][T16171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4104'. [ 213.752541][T16177] loop3: detected capacity change from 0 to 2048 [ 213.764154][T16171] pim6reg: entered allmulticast mode [ 213.772505][T16171] pim6reg: left allmulticast mode [ 213.799394][T16177] EXT4-fs (loop3): failed to initialize system zone (-117) [ 213.806837][T16177] EXT4-fs (loop3): mount failed [ 213.817068][T16182] 9pnet_fd: Insufficient options for proto=fd [ 213.833966][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4110'. [ 213.899490][T16185] netlink: 'syz.0.4106': attribute type 4 has an invalid length. [ 213.907263][T16185] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4106'. [ 213.947850][T16184] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 213.958483][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4110'. [ 213.986838][T16186] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 214.005942][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4110'. [ 214.027660][T16188] netlink: 'syz.2.4111': attribute type 10 has an invalid length. [ 214.037689][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4110'. [ 214.048584][T16188] syz_tun: entered promiscuous mode [ 214.107624][T16189] netlink: 'syz.2.4111': attribute type 10 has an invalid length. [ 214.216651][T16195] FAULT_INJECTION: forcing a failure. [ 214.216651][T16195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.229823][T16195] CPU: 1 UID: 0 PID: 16195 Comm: syz.5.4114 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.229848][T16195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.229919][T16195] Call Trace: [ 214.229927][T16195] [ 214.229934][T16195] __dump_stack+0x1d/0x30 [ 214.229952][T16195] dump_stack_lvl+0xe8/0x140 [ 214.230046][T16195] dump_stack+0x15/0x1b [ 214.230071][T16195] should_fail_ex+0x265/0x280 [ 214.230093][T16195] should_fail+0xb/0x20 [ 214.230111][T16195] should_fail_usercopy+0x1a/0x20 [ 214.230133][T16195] strncpy_from_user+0x25/0x230 [ 214.230199][T16195] ? kmem_cache_alloc_noprof+0x186/0x310 [ 214.230226][T16195] ? getname_flags+0x80/0x3b0 [ 214.230319][T16195] getname_flags+0xae/0x3b0 [ 214.230345][T16195] __x64_sys_symlinkat+0x40/0x70 [ 214.230369][T16195] x64_sys_call+0x293d/0x2ff0 [ 214.230438][T16195] do_syscall_64+0xd2/0x200 [ 214.230460][T16195] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.230484][T16195] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 214.230571][T16195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.230590][T16195] RIP: 0033:0x7faf905bebe9 [ 214.230667][T16195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.230683][T16195] RSP: 002b:00007faf8f027038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 214.230704][T16195] RAX: ffffffffffffffda RBX: 00007faf907e5fa0 RCX: 00007faf905bebe9 [ 214.230717][T16195] RDX: 0000200000000000 RSI: ffffffffffffff9c RDI: 0000200000002040 [ 214.230790][T16195] RBP: 00007faf8f027090 R08: 0000000000000000 R09: 0000000000000000 [ 214.230800][T16195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.230811][T16195] R13: 00007faf907e6038 R14: 00007faf907e5fa0 R15: 00007fff722c3708 [ 214.230829][T16195] [ 214.430750][T16188] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 214.441502][T16197] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 214.457890][T16189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.464645][T16197] SELinux: failed to load policy [ 214.521657][T16189] team0: Port device bond0 added [ 214.669120][T16207] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4117'. [ 214.678355][T16207] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4117'. [ 214.704837][T16207] lo speed is unknown, defaulting to 1000 [ 214.721738][T16204] loop3: detected capacity change from 0 to 512 [ 214.730214][T16204] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 214.738615][T16204] EXT4-fs (loop3): orphan cleanup on readonly fs [ 214.749153][T16204] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 214.783585][T16204] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 214.820853][T16204] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4119: bg 0: block 40: padding at end of block bitmap is not set [ 214.871282][T16204] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 214.904502][T16204] EXT4-fs (loop3): 1 truncate cleaned up [ 215.189087][T16216] loop3: detected capacity change from 0 to 2048 [ 215.260147][T16216] EXT4-fs (loop3): failed to initialize system zone (-117) [ 215.281969][T16216] EXT4-fs (loop3): mount failed [ 215.292827][T16225] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 215.313906][T16229] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 215.384089][T16231] 9pnet_fd: Insufficient options for proto=fd [ 215.393842][T16233] rdma_rxe: rxe_newlink: failed to add syz_tun [ 215.518208][T16243] 9pnet_fd: Insufficient options for proto=fd [ 215.578399][T16247] lo speed is unknown, defaulting to 1000 [ 215.582200][T16255] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 215.625626][T16257] 9pnet_fd: Insufficient options for proto=fd [ 215.727979][T16233] loop3: detected capacity change from 0 to 2048 [ 215.794485][T16233] Alternate GPT is invalid, using primary GPT. [ 215.800936][T16233] loop3: p2 p3 p7 [ 216.035749][T16273] syz!: rxe_newlink: already configured on team_slave_0 [ 216.047257][T16280] lo speed is unknown, defaulting to 1000 [ 216.084064][T16283] lo speed is unknown, defaulting to 1000 [ 216.093327][T16285] lo speed is unknown, defaulting to 1000 [ 216.182579][T16294] 9pnet_fd: Insufficient options for proto=fd [ 216.439932][T16306] SELinux: failed to load policy [ 216.441604][T16310] rdma_rxe: rxe_newlink: failed to add syz_tun [ 216.530933][T16308] lo speed is unknown, defaulting to 1000 [ 217.397541][T16327] loop4: detected capacity change from 0 to 512 [ 217.404547][T16327] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.411392][T16327] ext4: Unknown parameter 'obj_type' [ 217.448725][T16326] lo speed is unknown, defaulting to 1000 [ 217.454852][T16325] lo speed is unknown, defaulting to 1000 [ 217.592922][T16333] loop0: detected capacity change from 0 to 1024 [ 217.630728][T16333] ext4: Unknown parameter 'obj_type' [ 217.639317][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 217.639331][ T29] audit: type=1400 audit(217.573:5719): avc: denied { accept } for pid=16330 comm="syz.0.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 217.676956][T16310] loop5: detected capacity change from 0 to 2048 [ 217.741075][T16332] SELinux: Context ./file0 is not valid (left unmapped). [ 217.774894][ T29] audit: type=1400 audit(217.733:5720): avc: denied { relabelto } for pid=16330 comm="+}[@" name="cgroup.controllers" dev="tmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="./file0" [ 217.799326][ T29] audit: type=1400 audit(217.733:5721): avc: denied { associate } for pid=16330 comm="+}[@" name="cgroup.controllers" dev="tmpfs" ino=1212 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="./file0" [ 217.800041][T16310] Alternate GPT is invalid, using primary GPT. [ 217.830906][T16310] loop5: p2 p3 p7 [ 217.837105][T16333] loop0: detected capacity change from 0 to 512 [ 217.874185][T16342] 9pnet_fd: Insufficient options for proto=fd [ 217.971588][ T29] audit: type=1400 audit(217.963:5722): avc: denied { unlink } for pid=12838 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="./file0" [ 218.227467][T16370] netlink: 'syz.3.4169': attribute type 4 has an invalid length. [ 218.381093][T16376] netlink: 'syz.2.4175': attribute type 1 has an invalid length. [ 218.436356][T16372] loop4: detected capacity change from 0 to 1024 [ 218.597392][T16372] EXT4-fs: Ignoring removed bh option [ 218.622031][T16372] EXT4-fs: inline encryption not supported [ 218.749511][T16384] loop0: detected capacity change from 0 to 512 [ 219.149328][T16376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.182906][T16379] gretap1: entered promiscuous mode [ 219.202186][T16379] bond2: (slave gretap1): making interface the new active one [ 219.220655][T16379] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 219.579957][ T29] audit: type=1400 audit(218.733:5723): avc: denied { ioctl } for pid=16378 comm="syz.0.4176" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 219.610399][T16372] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.067787][T16384] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 220.076011][T16384] EXT4-fs (loop0): orphan cleanup on readonly fs [ 220.085332][T16384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.4176: corrupted inode contents [ 220.097750][T16372] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 220.106604][T16384] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.4176: mark_inode_dirty error [ 220.118557][T16384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.4176: corrupted inode contents [ 220.130707][T16384] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.4176: mark_inode_dirty error [ 220.142215][T16384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.4176: corrupted inode contents [ 220.157761][T16384] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 220.166777][T16384] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.4176: corrupted inode contents [ 220.181496][T16384] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.4176: mark_inode_dirty error [ 220.192922][T16384] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 220.202393][T16384] EXT4-fs (loop0): 1 truncate cleaned up [ 220.212354][T16372] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.4173: lblock 2 mapped to illegal pblock 2 (length 1) [ 220.226898][T16372] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 220.235965][T16372] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.4173: lblock 0 mapped to illegal pblock 48 (length 1) [ 220.251708][T16372] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 220.260546][T16372] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4173: Failed to acquire dquot type 0 [ 220.299427][T16372] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 220.317549][T16372] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.4173: mark_inode_dirty error [ 220.333422][T16401] 9pnet_fd: Insufficient options for proto=fd [ 220.345306][T16372] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 220.368426][T16372] EXT4-fs (loop4): 1 orphan inode deleted [ 220.385096][T16372] EXT4-fs mount: 22 callbacks suppressed [ 220.385209][T16372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.435495][T16408] netlink: zone id is out of range [ 220.442228][T16407] netlink: zone id is out of range [ 220.447512][T16408] netlink: zone id is out of range [ 220.453015][T16407] netlink: zone id is out of range [ 220.458352][T16407] netlink: zone id is out of range [ 220.463497][T16407] netlink: zone id is out of range [ 220.469775][T16408] netlink: zone id is out of range [ 220.474912][T16408] netlink: zone id is out of range [ 220.477044][T16407] netlink: zone id is out of range [ 220.484217][ T31] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 220.485151][T16407] netlink: zone id is out of range [ 220.500263][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 220.516898][T16413] 9pnet_fd: Insufficient options for proto=fd [ 220.523269][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 220.540971][ T31] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 220.549515][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 220.567332][T16384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.583071][T14124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.592630][T14124] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 220.597530][T16415] __nla_validate_parse: 61 callbacks suppressed [ 220.597545][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4184'. [ 220.625802][T14124] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 220.638386][T14124] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 220.651833][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'. [ 220.699752][T16425] syz.3.4188 (16425): /proc/16423/oom_adj is deprecated, please use /proc/16423/oom_score_adj instead. [ 220.766736][T12838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.779473][T16432] 9pnet_fd: Insufficient options for proto=fd [ 220.788798][T16433] loop3: detected capacity change from 0 to 2048 [ 220.826551][ T29] audit: type=1326 audit(220.813:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.4191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154947ebe9 code=0x7ffc0000 [ 220.877411][T16435] sd 0:0:1:0: device reset [ 220.879422][T16433] EXT4-fs (loop3): failed to initialize system zone (-117) [ 220.889402][T16433] EXT4-fs (loop3): mount failed [ 220.900835][T16439] FAULT_INJECTION: forcing a failure. [ 220.900835][T16439] name failslab, interval 1, probability 0, space 0, times 0 [ 220.907100][T16435] usb usb1: check_ctrlrecip: process 16435 (syz.0.4191) requesting ep 01 but needs 81 [ 220.913616][T16439] CPU: 0 UID: 0 PID: 16439 Comm: syz.4.4193 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.913643][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.913709][T16439] Call Trace: [ 220.913716][T16439] [ 220.913724][T16439] __dump_stack+0x1d/0x30 [ 220.913745][T16439] dump_stack_lvl+0xe8/0x140 [ 220.913838][T16439] dump_stack+0x15/0x1b [ 220.913917][T16439] should_fail_ex+0x265/0x280 [ 220.913938][T16439] should_failslab+0x8c/0xb0 [ 220.913967][T16439] kmem_cache_alloc_noprof+0x50/0x310 [ 220.913993][T16439] ? alloc_empty_file+0x76/0x200 [ 220.914076][T16439] alloc_empty_file+0x76/0x200 [ 220.914102][T16439] alloc_file_pseudo+0xc6/0x160 [ 220.914188][T16439] __shmem_file_setup+0x1de/0x210 [ 220.914219][T16439] shmem_file_setup+0x3b/0x50 [ 220.914262][T16439] __se_sys_memfd_create+0x2c3/0x590 [ 220.914283][T16439] __x64_sys_memfd_create+0x31/0x40 [ 220.914302][T16439] x64_sys_call+0x2abe/0x2ff0 [ 220.914322][T16439] do_syscall_64+0xd2/0x200 [ 220.914352][T16439] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 220.914375][T16439] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 220.914474][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.914495][T16439] RIP: 0033:0x7fb3ce4febe9 [ 220.914511][T16439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.914527][T16439] RSP: 002b:00007fb3ccf66e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 220.914546][T16439] RAX: ffffffffffffffda RBX: 000000000000050f RCX: 00007fb3ce4febe9 [ 220.914559][T16439] RDX: 00007fb3ccf66ef0 RSI: 0000000000000000 RDI: 00007fb3ce5827e8 [ 220.914636][T16439] RBP: 0000200000000140 R08: 00007fb3ccf66bb7 R09: 00007fb3ccf66e40 [ 220.914649][T16439] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 220.914662][T16439] R13: 00007fb3ccf66ef0 R14: 00007fb3ccf66eb0 R15: 00002000000000c0 [ 220.914680][T16439] [ 220.992701][T16442] usb usb9: usbfs: process 16442 (syz.0.4191) did not claim interface 0 before use [ 220.998644][T16444] 9pnet_fd: Insufficient options for proto=fd [ 221.036083][T16447] loop3: detected capacity change from 0 to 1024 [ 221.053355][T16435] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 221.147789][T16447] EXT4-fs: Ignoring removed bh option [ 221.154419][T16447] EXT4-fs: inline encryption not supported [ 221.164276][T16447] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 221.177988][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4198'. [ 221.187991][T16447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 221.197229][T16447] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.4197: lblock 2 mapped to illegal pblock 2 (length 1) [ 221.213512][T16455] loop0: detected capacity change from 0 to 512 [ 221.225219][T16447] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.4197: lblock 0 mapped to illegal pblock 48 (length 1) [ 221.258117][T16455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.266191][T16455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.273292][T16455] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 221.283058][T16447] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.4197: Failed to acquire dquot type 0 [ 221.307634][T16447] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 221.309358][T16455] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 221.336078][T16455] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 221.344495][T16447] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.4197: mark_inode_dirty error [ 221.366063][T16447] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 221.376736][T16455] EXT4-fs (loop0): 1 truncate cleaned up [ 221.383166][T16455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.399437][T16476] 9pnet_fd: Insufficient options for proto=fd [ 221.403045][T16447] EXT4-fs (loop3): 1 orphan inode deleted [ 221.419309][ T2235] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 221.493609][ T2235] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 221.505297][T16481] loop5: detected capacity change from 0 to 1764 [ 221.518343][T16447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.540123][T16455] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 221.559001][T12838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.605196][T16447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.612647][T16447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.026283][T16447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.033753][T16447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.070596][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4211'. [ 222.097617][T16501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4214'. [ 222.106710][T16501] netlink: 'syz.5.4214': attribute type 7 has an invalid length. [ 222.114446][T16501] netlink: 'syz.5.4214': attribute type 8 has an invalid length. [ 222.122173][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4214'. [ 222.135821][T16501] erspan0: entered promiscuous mode [ 222.143710][T16501] batadv_slave_1: entered promiscuous mode [ 222.150999][T16503] FAULT_INJECTION: forcing a failure. [ 222.150999][T16503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.164243][T16503] CPU: 1 UID: 0 PID: 16503 Comm: syz.0.4215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.164268][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.164279][T16503] Call Trace: [ 222.164351][T16503] [ 222.164357][T16503] __dump_stack+0x1d/0x30 [ 222.164375][T16503] dump_stack_lvl+0xe8/0x140 [ 222.164406][T16503] dump_stack+0x15/0x1b [ 222.164418][T16503] should_fail_ex+0x265/0x280 [ 222.164450][T16503] should_fail+0xb/0x20 [ 222.164463][T16503] should_fail_usercopy+0x1a/0x20 [ 222.164480][T16503] _copy_from_user+0x1c/0xb0 [ 222.164500][T16503] memdup_user+0x5e/0xd0 [ 222.164579][T16503] strndup_user+0x68/0xb0 [ 222.164623][T16503] __se_sys_fsopen+0x3c/0x1e0 [ 222.164642][T16503] __x64_sys_fsopen+0x31/0x40 [ 222.164659][T16503] x64_sys_call+0x2a9d/0x2ff0 [ 222.164675][T16503] do_syscall_64+0xd2/0x200 [ 222.164758][T16503] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 222.164812][T16503] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 222.164830][T16503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.164865][T16503] RIP: 0033:0x7f154947ebe9 [ 222.164878][T16503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.164891][T16503] RSP: 002b:00007f1547ee7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 222.164923][T16503] RAX: ffffffffffffffda RBX: 00007f15496a5fa0 RCX: 00007f154947ebe9 [ 222.164933][T16503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 222.164943][T16503] RBP: 00007f1547ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.164953][T16503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.165009][T16503] R13: 00007f15496a6038 R14: 00007f15496a5fa0 R15: 00007ffee4347f28 [ 222.165024][T16503] [ 222.169135][T16501] erspan0: left promiscuous mode [ 222.361255][T16501] batadv_slave_1: left promiscuous mode [ 222.372664][T16505] loop5: detected capacity change from 0 to 512 [ 222.392319][T16505] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 222.393725][T16507] loop0: detected capacity change from 0 to 512 [ 222.411448][T16505] EXT4-fs (loop5): 1 truncate cleaned up [ 222.417541][T16505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.419868][T16507] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 222.440961][T13790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.453078][T13790] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 222.466224][T13790] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 222.475762][T16507] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 1285)! [ 222.486280][T16507] EXT4-fs (loop0): group descriptors corrupted! [ 222.493077][T13790] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 222.512825][T16510] loop4: detected capacity change from 0 to 2048 [ 222.523048][T16507] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7 sclass=netlink_xfrm_socket pid=16507 comm=syz.0.4216 [ 222.536939][T16507] loop0: detected capacity change from 0 to 128 [ 222.545065][T16507] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.559392][T16507] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.569431][T13533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.573421][T16517] 9pnet_fd: Insufficient options for proto=fd [ 222.585281][T16510] EXT4-fs (loop4): failed to initialize system zone (-117) [ 222.603700][T16510] EXT4-fs (loop4): mount failed [ 222.607768][T16507] SELinux: security policydb version 17 (MLS) not backwards compatible [ 222.617804][T16507] SELinux: failed to load policy [ 222.649300][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 222.649316][ T29] audit: type=1326 audit(222.633:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.678599][ T29] audit: type=1326 audit(222.633:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.703016][ T29] audit: type=1326 audit(222.633:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.726020][ T29] audit: type=1326 audit(222.633:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.749142][ T29] audit: type=1326 audit(222.633:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.772023][ T29] audit: type=1326 audit(222.633:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.794897][ T29] audit: type=1326 audit(222.633:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.817780][ T29] audit: type=1326 audit(222.633:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.840700][ T29] audit: type=1326 audit(222.633:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.843453][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 222.885638][ T29] audit: type=1326 audit(222.673:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16518 comm="syz.5.4220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf905bebe9 code=0x7ffc0000 [ 222.928471][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4226'. [ 222.937806][T16533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4226'. [ 222.971623][T16538] loop3: detected capacity change from 0 to 512 [ 223.006264][T16543] syzkaller1: entered promiscuous mode [ 223.017522][T16543] syzkaller1: entered allmulticast mode [ 223.086167][T16548] netlink: 'syz.2.4229': attribute type 30 has an invalid length. [ 223.190288][T16552] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4228'. [ 223.460982][T16558] loop3: detected capacity change from 0 to 1764 [ 223.661046][T16565] loop3: detected capacity change from 0 to 2048 [ 223.700383][T16565] EXT4-fs (loop3): failed to initialize system zone (-117) [ 223.712583][ T36] hid_parser_main: 43 callbacks suppressed [ 223.712599][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 223.729149][T16565] EXT4-fs (loop3): mount failed [ 223.752873][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.032514][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 224.042263][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.148322][T16594] FAULT_INJECTION: forcing a failure. [ 224.148322][T16594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.161528][T16594] CPU: 1 UID: 0 PID: 16594 Comm: syz.5.4242 Not tainted syzkaller #0 PREEMPT(voluntary) [ 224.161554][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.161624][T16594] Call Trace: [ 224.161631][T16594] [ 224.161640][T16594] __dump_stack+0x1d/0x30 [ 224.161661][T16594] dump_stack_lvl+0xe8/0x140 [ 224.161676][T16594] dump_stack+0x15/0x1b [ 224.161690][T16594] should_fail_ex+0x265/0x280 [ 224.161757][T16594] should_fail+0xb/0x20 [ 224.161775][T16594] should_fail_usercopy+0x1a/0x20 [ 224.161795][T16594] strncpy_from_user+0x25/0x230 [ 224.161889][T16594] ? __kmalloc_cache_noprof+0x189/0x320 [ 224.161946][T16594] __se_sys_memfd_create+0x1ff/0x590 [ 224.162019][T16594] __x64_sys_memfd_create+0x31/0x40 [ 224.162098][T16594] x64_sys_call+0x2abe/0x2ff0 [ 224.162116][T16594] do_syscall_64+0xd2/0x200 [ 224.162218][T16594] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 224.162243][T16594] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 224.162273][T16594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.162295][T16594] RIP: 0033:0x7faf905bebe9 [ 224.162311][T16594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.162328][T16594] RSP: 002b:00007faf8f026e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 224.162346][T16594] RAX: ffffffffffffffda RBX: 0000000000000553 RCX: 00007faf905bebe9 [ 224.162401][T16594] RDX: 00007faf8f026ef0 RSI: 0000000000000000 RDI: 00007faf906427e8 [ 224.162415][T16594] RBP: 0000200000001080 R08: 00007faf8f026bb7 R09: 00007faf8f026e40 [ 224.162443][T16594] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 224.162457][T16594] R13: 00007faf8f026ef0 R14: 00007faf8f026eb0 R15: 00002000000001c0 [ 224.162476][T16594] [ 224.440581][T16605] loop0: detected capacity change from 0 to 1764 [ 224.450787][T16607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.458414][T16607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.467098][T16607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.474773][T16607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.646601][T16630] 9pnet: Could not find request transport: fd0x0000000000000003 [ 224.713106][T16636] netlink: 'syz.0.4251': attribute type 4 has an invalid length. [ 224.756019][T16638] loop4: detected capacity change from 0 to 1024 [ 224.808340][T16638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.935478][T16638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.527551][T16669] lo speed is unknown, defaulting to 1000 [ 225.698793][T16681] 9pnet: Could not find request transport: fd0x0000000000000003 [ 225.759160][T16684] __nla_validate_parse: 27 callbacks suppressed [ 225.759176][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 225.813103][T16685] syz!: rxe_newlink: already configured on team_slave_0 [ 225.835702][T16684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4270'. [ 225.861558][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4270'. [ 225.882557][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4270'. [ 225.947306][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4271'. [ 225.971277][T16688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.978709][T16688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.046030][T16688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.053558][T16688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.103358][T16692] loop4: detected capacity change from 0 to 2048 [ 226.127514][T16692] EXT4-fs: Ignoring removed bh option [ 226.248192][T16702] 9pnet_fd: Insufficient options for proto=fd [ 226.260630][T16692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.291830][T16691] lo speed is unknown, defaulting to 1000 [ 226.313913][T16691] lo speed is unknown, defaulting to 1000 [ 226.332221][T16691] lo speed is unknown, defaulting to 1000 [ 226.358884][T16691] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 226.406332][T16691] lo speed is unknown, defaulting to 1000 [ 226.420342][T16691] lo speed is unknown, defaulting to 1000 [ 226.430421][T16691] lo speed is unknown, defaulting to 1000 [ 226.446719][T16691] lo speed is unknown, defaulting to 1000 [ 226.469968][T16691] lo speed is unknown, defaulting to 1000 [ 226.476122][T16691] lo speed is unknown, defaulting to 1000 [ 226.515433][T16725] 9pnet: Could not find request transport: fd0x0000000000000003 [ 226.543633][T14124] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.556557][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4282'. [ 226.610164][T16731] bond0: (slave dummy0): Releasing backup interface [ 226.614866][T16739] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 226.634268][T16739] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4282'. [ 226.647266][T16731] bridge_slave_0: left allmulticast mode [ 226.653087][T16731] bridge_slave_0: left promiscuous mode [ 226.658907][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.712899][T16731] bridge_slave_1: left allmulticast mode [ 226.718581][T16731] bridge_slave_1: left promiscuous mode [ 226.724253][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.758102][T16731] bond0: (slave bond_slave_0): Releasing backup interface [ 226.773561][T16731] bond0: (slave bond_slave_1): Releasing backup interface [ 226.788847][T16731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.796419][T16731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.820627][T16731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.828124][T16731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.849522][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4282'. [ 226.915416][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4282'. [ 227.274430][T16757] netlink: 'syz.5.4288': attribute type 4 has an invalid length. [ 227.282316][T16757] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4288'. [ 227.430526][T16759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.525752][T16759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.552656][T16764] netlink: 'syz.2.4290': attribute type 29 has an invalid length. [ 227.594039][T16759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.653426][T16759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.721338][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.744339][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.852823][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.000829][T16777] 9pnet_fd: Insufficient options for proto=fd [ 228.027934][T16773] FAULT_INJECTION: forcing a failure. [ 228.027934][T16773] name failslab, interval 1, probability 0, space 0, times 0 [ 228.040670][T16773] CPU: 0 UID: 0 PID: 16773 Comm: syz.3.4294 Not tainted syzkaller #0 PREEMPT(voluntary) [ 228.040775][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.040785][T16773] Call Trace: [ 228.040792][T16773] [ 228.040801][T16773] __dump_stack+0x1d/0x30 [ 228.040822][T16773] dump_stack_lvl+0xe8/0x140 [ 228.040841][T16773] dump_stack+0x15/0x1b [ 228.040859][T16773] should_fail_ex+0x265/0x280 [ 228.040880][T16773] should_failslab+0x8c/0xb0 [ 228.040936][T16773] kmem_cache_alloc_noprof+0x50/0x310 [ 228.040988][T16773] ? skb_clone+0x151/0x1f0 [ 228.041012][T16773] skb_clone+0x151/0x1f0 [ 228.041032][T16773] __netlink_deliver_tap+0x2c9/0x500 [ 228.041053][T16773] netlink_unicast+0x66b/0x690 [ 228.041163][T16773] netlink_sendmsg+0x58b/0x6b0 [ 228.041187][T16773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.041270][T16773] __sock_sendmsg+0x145/0x180 [ 228.041292][T16773] ____sys_sendmsg+0x31e/0x4e0 [ 228.041314][T16773] ___sys_sendmsg+0x17b/0x1d0 [ 228.041343][T16773] __x64_sys_sendmsg+0xd4/0x160 [ 228.041438][T16773] x64_sys_call+0x191e/0x2ff0 [ 228.041455][T16773] do_syscall_64+0xd2/0x200 [ 228.041480][T16773] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 228.041511][T16773] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 228.041537][T16773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.041559][T16773] RIP: 0033:0x7f2b6625ebe9 [ 228.041572][T16773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.041641][T16773] RSP: 002b:00007f2b64cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.041658][T16773] RAX: ffffffffffffffda RBX: 00007f2b66485fa0 RCX: 00007f2b6625ebe9 [ 228.041669][T16773] RDX: 0000000000004850 RSI: 0000200000000000 RDI: 0000000000000008 [ 228.041680][T16773] RBP: 00007f2b64cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 228.041690][T16773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.041747][T16773] R13: 00007f2b66486038 R14: 00007f2b66485fa0 R15: 00007ffef4d67288 [ 228.041799][T16773] [ 228.047946][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.271383][T16770] lo speed is unknown, defaulting to 1000 [ 228.299715][T16771] lo speed is unknown, defaulting to 1000 [ 228.569249][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 228.569265][ T29] audit: type=1326 audit(228.493:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6625ebe9 code=0x7ffc0000 [ 228.598527][ T29] audit: type=1326 audit(228.503:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f2b6625ebe9 code=0x7ffc0000 [ 228.621494][ T29] audit: type=1326 audit(228.503:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6625ebe9 code=0x7ffc0000 [ 228.644356][ T29] audit: type=1326 audit(228.503:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16785 comm="syz.3.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6625ebe9 code=0x7ffc0000 [ 228.681152][T16771] lo speed is unknown, defaulting to 1000 [ 228.703671][T16794] lo speed is unknown, defaulting to 1000 [ 228.721572][T16796] loop5: detected capacity change from 0 to 2048 [ 228.728649][ T29] audit: type=1400 audit(228.663:5930): avc: denied { compute_member } for pid=16792 comm="syz.5.4301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 228.761586][T16770] lo speed is unknown, defaulting to 1000 [ 228.790439][T16796] EXT4-fs (loop5): failed to initialize system zone (-117) [ 228.797780][T16796] EXT4-fs (loop5): mount failed [ 228.841659][T16794] lo speed is unknown, defaulting to 1000 [ 228.850547][T16797] lo speed is unknown, defaulting to 1000 [ 228.958394][T16804] lo speed is unknown, defaulting to 1000 [ 228.964971][T16797] lo speed is unknown, defaulting to 1000 [ 228.971460][T16805] lo speed is unknown, defaulting to 1000 [ 229.104005][T16804] lo speed is unknown, defaulting to 1000 [ 229.117622][T16815] 9pnet_fd: Insufficient options for proto=fd [ 229.126093][T16814] syz!: rxe_newlink: already configured on team_slave_0 [ 229.149807][ T29] audit: type=1326 audit(229.133:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 229.172756][ T29] audit: type=1326 audit(229.133:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 229.195858][ T29] audit: type=1326 audit(229.133:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 229.218790][ T29] audit: type=1326 audit(229.133:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 229.241743][ T29] audit: type=1326 audit(229.133:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3ce4febe9 code=0x7ffc0000 [ 229.268230][T16805] lo speed is unknown, defaulting to 1000 [ 229.400539][T16824] 9pnet_fd: Insufficient options for proto=fd [ 229.537724][T16831] FAULT_INJECTION: forcing a failure. [ 229.537724][T16831] name failslab, interval 1, probability 0, space 0, times 0 [ 229.550460][T16831] CPU: 1 UID: 0 PID: 16831 Comm: syz.3.4310 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.550490][T16831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.550503][T16831] Call Trace: [ 229.550510][T16831] [ 229.550519][T16831] __dump_stack+0x1d/0x30 [ 229.550618][T16831] dump_stack_lvl+0xe8/0x140 [ 229.550638][T16831] dump_stack+0x15/0x1b [ 229.550655][T16831] should_fail_ex+0x265/0x280 [ 229.550675][T16831] ? sctp_association_new+0x71/0x1200 [ 229.550731][T16831] should_failslab+0x8c/0xb0 [ 229.550755][T16831] __kmalloc_cache_noprof+0x4c/0x320 [ 229.550784][T16831] sctp_association_new+0x71/0x1200 [ 229.550823][T16831] ? sctp_v4_to_sk_saddr+0x29/0x40 [ 229.550850][T16831] ? sctp_do_bind+0x497/0x4b0 [ 229.550959][T16831] ? sctp_v4_scope+0x140/0x150 [ 229.550985][T16831] sctp_connect_new_asoc+0x1a8/0x3a0 [ 229.551015][T16831] sctp_sendmsg+0xf10/0x18d0 [ 229.551067][T16831] ? selinux_socket_sendmsg+0xa1/0x1b0 [ 229.551097][T16831] ? __pfx_sctp_sendmsg+0x10/0x10 [ 229.551124][T16831] inet_sendmsg+0xc5/0xd0 [ 229.551145][T16831] __sock_sendmsg+0x102/0x180 [ 229.551218][T16831] ____sys_sendmsg+0x345/0x4e0 [ 229.551243][T16831] ___sys_sendmsg+0x17b/0x1d0 [ 229.551277][T16831] __sys_sendmmsg+0x178/0x300 [ 229.551308][T16831] __x64_sys_sendmmsg+0x57/0x70 [ 229.551369][T16831] x64_sys_call+0x1c4a/0x2ff0 [ 229.551436][T16831] do_syscall_64+0xd2/0x200 [ 229.551469][T16831] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 229.551491][T16831] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 229.551511][T16831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.551600][T16831] RIP: 0033:0x7f2b6625ebe9 [ 229.551616][T16831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.551695][T16831] RSP: 002b:00007f2b64cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 229.551712][T16831] RAX: ffffffffffffffda RBX: 00007f2b66485fa0 RCX: 00007f2b6625ebe9 [ 229.551723][T16831] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000003 [ 229.551733][T16831] RBP: 00007f2b64cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.551744][T16831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.551754][T16831] R13: 00007f2b66486038 R14: 00007f2b66485fa0 R15: 00007ffef4d67288 [ 229.551833][T16831] [ 229.820114][T16837] loop3: detected capacity change from 0 to 2048 [ 229.833963][T16841] loop0: detected capacity change from 0 to 128 [ 229.871684][T16837] EXT4-fs (loop3): failed to initialize system zone (-117) [ 229.881586][T16840] loop5: detected capacity change from 0 to 512 [ 229.891748][T16843] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 229.892031][T16840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.900222][T16837] EXT4-fs (loop3): mount failed [ 229.907433][T16840] EXT4-fs: Ignoring removed i_version option [ 229.920784][T16848] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 229.942688][T16840] EXT4-fs (loop5): 1 orphan inode deleted [ 229.951122][T16840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.982952][T16854] 9pnet_fd: Insufficient options for proto=fd [ 229.990733][T13533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.001971][T16855] 9pnet_fd: Insufficient options for proto=fd [ 230.024515][T16859] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3944. macoff=96 [ 230.048042][T16861] loop0: detected capacity change from 0 to 512 [ 230.057015][T16866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16866 comm=syz.5.4320 [ 230.069595][T16866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16866 comm=syz.5.4320 [ 230.082309][T16861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.105925][T16861] EXT4-fs (loop0): 1 orphan inode deleted [ 230.114873][T16861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.129405][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 230.176756][T16883] loop5: detected capacity change from 0 to 2048 [ 230.179074][T12838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.220960][T16883] EXT4-fs (loop5): failed to initialize system zone (-117) [ 230.244337][T16883] EXT4-fs (loop5): mount failed [ 230.405447][T16901] 9pnet_fd: Insufficient options for proto=fd [ 230.434417][T16907] 9pnet_fd: Insufficient options for proto=fd [ 230.935027][T16923] loop0: detected capacity change from 0 to 2048 [ 230.960042][T16923] EXT4-fs (loop0): failed to initialize system zone (-117) [ 230.980451][T16923] EXT4-fs (loop0): mount failed [ 231.030851][T16929] __nla_validate_parse: 6 callbacks suppressed [ 231.030869][T16929] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4342'. [ 231.061555][T16931] lo speed is unknown, defaulting to 1000 [ 231.131358][T16935] 9pnet_fd: Insufficient options for proto=fd [ 231.167897][T16931] lo speed is unknown, defaulting to 1000 [ 231.216767][T16945] 9pnet_fd: Insufficient options for proto=fd [ 231.262750][T16948] lo speed is unknown, defaulting to 1000 [ 231.282250][T16954] loop4: detected capacity change from 0 to 2048 [ 231.303701][T16954] EXT4-fs (loop4): failed to initialize system zone (-117) [ 231.320011][T16954] EXT4-fs (loop4): mount failed [ 231.329945][T16954] ================================================================== [ 231.338055][T16954] BUG: KCSAN: data-race in mlock_folio / need_mlock_drain [ 231.345282][T16954] [ 231.347603][T16954] read-write to 0xffff888237c26a48 of 1 bytes by task 16953 on cpu 0: [ 231.355736][T16954] mlock_folio+0x128/0x200 [ 231.360148][T16954] folio_add_anon_rmap_ptes+0x20f/0x220 [ 231.365683][T16954] remove_migration_pte+0x67e/0xa70 [ 231.370871][T16954] rmap_walk_anon+0x27d/0x430 [ 231.375538][T16954] rmap_walk+0x8b/0xd0 [ 231.379594][T16954] migrate_pages_batch+0x1422/0x1ae0 [ 231.384903][T16954] migrate_pages+0xf5f/0x1770 [ 231.389596][T16954] __se_sys_mbind+0x975/0xac0 [ 231.394279][T16954] __x64_sys_mbind+0x78/0x90 [ 231.398955][T16954] x64_sys_call+0x2932/0x2ff0 [ 231.403637][T16954] do_syscall_64+0xd2/0x200 [ 231.408160][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.414059][T16954] [ 231.416375][T16954] read to 0xffff888237c26a48 of 1 bytes by task 16954 on cpu 1: [ 231.423994][T16954] need_mlock_drain+0x30/0x50 [ 231.428679][T16954] __lru_add_drain_all+0x220/0x3f0 [ 231.433808][T16954] lru_add_drain_all+0x10/0x20 [ 231.438648][T16954] invalidate_bdev+0x47/0x70 [ 231.443247][T16954] ext4_fill_super+0x2b5d/0x35d0 [ 231.448184][T16954] get_tree_bdev_flags+0x291/0x300 [ 231.453321][T16954] get_tree_bdev+0x1f/0x30 [ 231.457742][T16954] ext4_get_tree+0x1c/0x30 [ 231.462152][T16954] vfs_get_tree+0x54/0x1d0 [ 231.466834][T16954] do_new_mount+0x207/0x5e0 [ 231.471331][T16954] path_mount+0x4a4/0xb20 [ 231.475646][T16954] __se_sys_mount+0x28f/0x2e0 [ 231.480319][T16954] __x64_sys_mount+0x67/0x80 [ 231.484905][T16954] x64_sys_call+0x2b4d/0x2ff0 [ 231.489570][T16954] do_syscall_64+0xd2/0x200 [ 231.494501][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.500386][T16954] [ 231.502693][T16954] value changed: 0x00 -> 0x01 [ 231.507456][T16954] [ 231.509764][T16954] Reported by Kernel Concurrency Sanitizer on: [ 231.515925][T16954] CPU: 1 UID: 0 PID: 16954 Comm: syz.4.4352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 231.525744][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.535791][T16954] ================================================================== [ 231.651708][T16948] lo speed is unknown, defaulting to 1000