last executing test programs: 23.427067165s ago: executing program 4 (id=2425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "a1ee206bf1c7506f731484b6a8ad6ba5fec73600c960a5e1e5c011531c7d96f6", "5f8d1da3bea3c456fef675c1b12460de", {"f9e400d5e0eec96a2ba94b486b52a6d4", "3942bc09e9bc342016741b7f661232b2"}}}}}}}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000380)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x11, 0x0, @opaque="b5ace4c70521b9b404"}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r12, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=""/4096, 0x1000}, 0xfffffffb}, {{&(0x7f0000000800)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000007b40)=""/129, 0x81}, {&(0x7f0000000dc0)=""/48, 0x30}], 0x2}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/127, 0x7f}, 0xfff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/99, 0x63}, 0xfffffeff}], 0x5, 0x0, 0x0) r13 = dup2(r11, r10) sendmmsg(r13, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) 22.564587874s ago: executing program 4 (id=2430): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x2, 0xd737) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) io_setup(0x10001, &(0x7f0000000f80)=0x0) io_pgetevents(r3, 0xd, 0x1, &(0x7f0000000fc0)=[{}], &(0x7f0000001000)={0x77359400}, &(0x7f0000001080)={&(0x7f0000001040)={[0x1a]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2000000005}, 0x18) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3901480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket(0x6, 0x2, 0xffffffff) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0xfffffffc, @mcast1={0xff, 0x7}, 0xfffffff8}}, {{0xa, 0x4e23, 0x0, @private2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}, 0x108) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//ysA4A0=") utime(&(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r5, r6, 0x3, 0x0) 21.453354974s ago: executing program 4 (id=2441): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r0, 0x0, 0x7}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x4) 21.264196339s ago: executing program 4 (id=2444): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) r2 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) dup(0xffffffffffffffff) timer_delete(0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0xfffffffffffffd5b, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) sendfile(r7, r7, 0x0, 0x800000009) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) 21.093248843s ago: executing program 4 (id=2445): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffe, @empty, 0x4}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe84}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) r10 = dup2(r1, r1) write$tun(r10, 0x0, 0x46) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x4, 0x3}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x1002, @private2, 0xffe00000}, 0xe) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@isdn, &(0x7f0000000080)=0x80) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @loopback, 0x800}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4080) 21.087765214s ago: executing program 4 (id=2447): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) 21.058257445s ago: executing program 32 (id=2447): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) 6.562476672s ago: executing program 1 (id=2629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r4 = open(&(0x7f0000000280)='./bus\x00', 0x80e40, 0x80) ioctl$int_out(r4, 0x5460, &(0x7f00000003c0)) socket(0x2, 0x80805, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 6.493441147s ago: executing program 1 (id=2631): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd75, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchdir(r3) (async) fchdir(r3) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x20280, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@user_xattr}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@user_xattr}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f0000000180)}) 6.107819169s ago: executing program 1 (id=2635): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x408001}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="a40000002000040027bd7000fedbdf250a800009090000081000000014000200fc010000000000000000000000000000050016003c00000014000100fc01000000000000000000000000000014000200fe8000000000000000a58cc99e0000bb14000100000000000000000000000000000000001400010000000000000000000000ffffe000000114000200ff0200000000000000000000000000010500160032000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4008011}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf250301f280"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000540), 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r8, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {0x0}], 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) dup(0xffffffffffffffff) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 6.102812259s ago: executing program 2 (id=2637): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5.881223567s ago: executing program 0 (id=2642): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0x200000000000006}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r9, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.780568734s ago: executing program 0 (id=2644): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) dup(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.105410689s ago: executing program 2 (id=2646): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x210, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1e0, 0x2, {{0x10000, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x5, 0x7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xcc}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x210}}, 0x0) 5.024037476s ago: executing program 1 (id=2647): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/41, 0x29}}, 0x120) r1 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x2abc, 0x4, 0x3, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x2c020400) connect$unix(r6, &(0x7f0000000100)=@abs={0x27}, 0x6e) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000180)=""/49, 0x2d) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="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", 0xfe}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 4.84927834s ago: executing program 2 (id=2649): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x54, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/92, 0x5c}], 0x1, 0x6c, 0xfffffffeffffffbe}}], 0x48}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)="60a6e3824b3fc6fbea920b67b1f4705cfec36fe347ec5f0b08ce37a94c9deab694964ba3f544dd7327688964a8807bee963350f86e45645100cb56be759c91202562c531fbe0632152cf66c2f55cf7d83583db28daa31a22380d0cd9c02832fc8b5d3aba5ce90fd0762d0ee24078a1ba97fdb0190e34a74b7eb6f1bbc75710a5962faddf38b44215fad46caaf30a15a660bdcf13222d113dfd732ac6db8331fe632054d957f9", 0xa6}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000001240)={@multicast2, @remote, r4}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x7, 0x760c, 0xf, 0xb, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x74, 0x1, 0xb, [{@multicast1, 0x5}, {@multicast1, 0xa}, {@rand_addr=0x64010101, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x6, 0x3, 0x7, 0x3, 0x0, @mcast2, @remote, 0x1, 0x700, 0x9, 0x5}}) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x200, 0x8, 0x6, 0x8, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c841}, 0x44080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r15, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="240003"], 0x10e0}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000a00)={0x1b4, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40080}, 0x20008880) 4.823155532s ago: executing program 0 (id=2650): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000d80)={[{@debug}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x402}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val={'init_itable', 0x3d, 0xec}}, {@minixdf}, {@errors_remount}], [{@obj_user={'obj_user', 0x3d, 'resgid'}}, {@uid_eq}, {@seclabel}]}, 0x3, 0x47c, &(0x7f00000007c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x9e, &(0x7f00000003c0)=ANY=[@ANYBLOB="feff10495bfdaaaaaaaaaa0086dd60cb653e00683afffe800000000000000000000000000000fe8002000000000000000000000000aa890090780000000020010000000000000000000000000000fc01000000000000000800000000000004089595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a090400000000000000000200000b090001020073797a300000000014000480100001800a0001006c696d6974000000140000001100010000000000000000000000000a00"/104], 0x68}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000003c0)={'bridge_slave_0\x00', 0x8f, 0x800}) pause() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r8 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r8, 0x16) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35b", 0x6) creat(&(0x7f00000000c0)='./file0\x00', 0x80) 4.761197667s ago: executing program 1 (id=2653): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @local, 0x0}, &(0x7f0000000040)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 4.751203808s ago: executing program 2 (id=2654): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) kexec_load(0x8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="b0", 0x1, 0xc000000000, 0x80000000}], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x4030582a, &(0x7f00000001c0)={0x1, 0x8, 0x6b, 0x401, 0x6b, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x7, &(0x7f00000010c0)=ANY=[@ANYBLOB="18200000bcff1d120000000000000000186100000d000000008000000600ffff00000000040000009500"/56], &(0x7f00000006c0)='syzkaller\x00', 0x34, 0x2a, &(0x7f0000001100)=""/42, 0x40f00, 0xc, '\x00', 0x0, @sock_ops=0x3, r6, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xd, 0x23, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000a80)=[{0x3, 0x3, 0xa, 0x16}, {0x5, 0x2, 0xb, 0xa}, {0x2, 0x1, 0x3}, {0x2, 0x3, 0x10}, {0x4, 0x2, 0x5, 0x4}, {0x1, 0x9, 0xe}, {0x3, 0x5, 0x3, 0x2}, {0x2, 0x2, 0x1, 0x8}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000500)={0x11, 0xf5, r7, 0x1, 0x3, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4.71346615s ago: executing program 1 (id=2655): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$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") write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "d5a9a51f8b1f420a", "6d7e86f495e2f33fb8ae90f0b163cc664ad53590de4df1f778970d06e6c1fcc0", "f1b02a92", "8c1e629ec2616017"}, 0x38) 3.97481527s ago: executing program 0 (id=2657): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400105aa, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) mknod(&(0x7f0000000400)='./file0\x00', 0x8000, 0x0) 3.839534131s ago: executing program 3 (id=2658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.588294521s ago: executing program 2 (id=2660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "a1ee206bf1c7506f731484b6a8ad6ba5fec73600c960a5e1e5c011531c7d96f6", "5f8d1da3bea3c456fef675c1b12460de", {"f9e400d5e0eec96a2ba94b486b52a6d4", "3942bc09e9bc342016741b7f661232b2"}}}}}}}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000380)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x11, 0x0, @opaque="b5ace4c70521b9b404"}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r11 = dup2(r10, r9) setsockopt$sock_attach_bpf(r10, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r11, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) 3.514527597s ago: executing program 2 (id=2661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$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") write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "d5a9a51f8b1f420a", "6d7e86f495e2f33fb8ae90f0b163cc664ad53590de4df1f778970d06e6c1fcc0", "f1b02a92", "8c1e629ec2616017"}, 0x38) 2.878762308s ago: executing program 3 (id=2662): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x800, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) (fail_nth: 8) 2.458862482s ago: executing program 3 (id=2663): syslog(0x2, &(0x7f0000000880), 0x0) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&'], 0x2c}}, 0x800) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x50) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) waitid(0x0, r4, &(0x7f0000000280), 0xcd9ec155f9cfd1ce, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = creat(0x0, 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x2, 0xd85, 0x11, @private2, @mcast1, 0x7, 0x7e0, 0x401, 0x8}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfffffffffffffeaa, 0x0, 0x0, 0x0, '\x00', r7, 0x2}, 0x94) openat$cgroup_ro(r5, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003"], 0xac}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r10}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r11, 0x0, 0x8000000000004}, 0x18) r12 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GETFSUUID(r10, 0x80111500, &(0x7f00000001c0)) sendmsg$key(r12, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 2.241765769s ago: executing program 3 (id=2664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0) write$bt_hci(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32], 0x2, 0x699, &(0x7f0000000140)="$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") execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 1.925632105s ago: executing program 3 (id=2666): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001"], 0x38}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, 0x0, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100080, 0x1, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) lseek(r6, 0x7, 0x4) read(r6, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x6, 0x70080) ioctl$HIDIOCGVERSION(r7, 0x80044801, &(0x7f00000000c0)) 1.893128617s ago: executing program 5 (id=2667): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x7, 0x0, 0x4, 0xa0, 0x4, 0x1, 0x4}, 0x1c) 1.868162559s ago: executing program 5 (id=2668): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.620088059s ago: executing program 5 (id=2669): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) kexec_load(0x8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="b0", 0x1, 0xc000000000, 0x80000000}], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x4030582a, &(0x7f00000001c0)={0x1, 0x8, 0x6b, 0x401, 0x6b, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x7, &(0x7f00000010c0)=ANY=[@ANYBLOB="18200000bcff1d120000000000000000186100000d000000008000000600ffff00000000040000009500"/56], &(0x7f00000006c0)='syzkaller\x00', 0x34, 0x2a, &(0x7f0000001100)=""/42, 0x40f00, 0xc, '\x00', 0x0, @sock_ops=0x3, r6, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xd, 0x23, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000a80)=[{0x3, 0x3, 0xa, 0x16}, {0x5, 0x2, 0xb, 0xa}, {0x2, 0x1, 0x3}, {0x2, 0x3, 0x10}, {0x4, 0x2, 0x5, 0x4}, {0x1, 0x9, 0xe}, {0x3, 0x5, 0x3, 0x2}, {0x2, 0x2, 0x1, 0x8}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000500)={0x11, 0xf5, r7, 0x1, 0x3, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.099775311s ago: executing program 3 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r3, 0x6a98047402e98331, 0x3, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4c896) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x400c001) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xa}, 0x20000, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) 439.903134ms ago: executing program 5 (id=2671): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000008e161d72afbbbad2949be0b11c5000000000300"/38], &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x60, &(0x7f00000002c0), 0x10}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) inotify_init1(0x80800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2060414, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x1, 0x2bd, &(0x7f0000000480)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r5, 0x2004, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES8=r6, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 327.062843ms ago: executing program 0 (id=2659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x210, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1e0, 0x2, {{0x10000, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x5, 0x7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xcc}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x210}}, 0x0) 253.505839ms ago: executing program 5 (id=2672): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x4) 210.502533ms ago: executing program 0 (id=2673): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="feff1e47000000000000000000000923bead2ab77321d077e0708878c8af8ba2f39c15ceedfc7c2544061101753079f6e232a224a065118ca982c57b95b5c4d202e1da207f7c8d8035d68a6051408a9d61136820aa38075ea1ebe7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x12, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x37}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ldst={0x1, 0x0, 0x0, 0x3, 0x4, 0x23, 0xffffffffffffffec}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xa5, &(0x7f0000000340)=""/165, 0x41000, 0x40, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x1, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = memfd_secret(0x80000) fcntl$setlease(r7, 0x400, 0x0) close(r7) 0s ago: executing program 5 (id=2674): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.212005][ T9877] RSP: 002b:00007f59c7faf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.212027][ T9877] RAX: ffffffffffffffda RBX: 00007f59c9775fa0 RCX: 00007f59c954ebe9 [ 196.212040][ T9877] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 196.212054][ T9877] RBP: 00007f59c7faf090 R08: 0000200000000080 R09: 0000000000000000 [ 196.212128][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.212143][ T9877] R13: 00007f59c9776038 R14: 00007f59c9775fa0 R15: 00007ffdfc0d89f8 [ 196.212165][ T9877] [ 196.214058][ T9857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.453258][ T9881] FAULT_INJECTION: forcing a failure. [ 196.453258][ T9881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.467112][ T9881] CPU: 1 UID: 0 PID: 9881 Comm: syz.2.2134 Not tainted syzkaller #0 PREEMPT(voluntary) [ 196.467145][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.467160][ T9881] Call Trace: [ 196.467166][ T9881] [ 196.467176][ T9881] __dump_stack+0x1d/0x30 [ 196.467254][ T9881] dump_stack_lvl+0xe8/0x140 [ 196.467341][ T9881] dump_stack+0x15/0x1b [ 196.467358][ T9881] should_fail_ex+0x265/0x280 [ 196.467382][ T9881] should_fail+0xb/0x20 [ 196.467399][ T9881] should_fail_usercopy+0x1a/0x20 [ 196.467425][ T9881] _copy_to_user+0x20/0xa0 [ 196.467534][ T9881] simple_read_from_buffer+0xb5/0x130 [ 196.467560][ T9881] proc_fail_nth_read+0x10e/0x150 [ 196.467628][ T9881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.467655][ T9881] vfs_read+0x1a5/0x770 [ 196.467754][ T9881] ? __rcu_read_unlock+0x4f/0x70 [ 196.467778][ T9881] ? __fget_files+0x184/0x1c0 [ 196.467878][ T9881] ksys_read+0xda/0x1a0 [ 196.467899][ T9881] __x64_sys_read+0x40/0x50 [ 196.467919][ T9881] x64_sys_call+0x27bc/0x2ff0 [ 196.467998][ T9881] do_syscall_64+0xd2/0x200 [ 196.468025][ T9881] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 196.468042][ T9881] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 196.468059][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.468080][ T9881] RIP: 0033:0x7f59c954d5fc [ 196.468092][ T9881] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 196.468105][ T9881] RSP: 002b:00007f59c7f8e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.468120][ T9881] RAX: ffffffffffffffda RBX: 00007f59c9776090 RCX: 00007f59c954d5fc [ 196.468133][ T9881] RDX: 000000000000000f RSI: 00007f59c7f8e0a0 RDI: 000000000000000a [ 196.468143][ T9881] RBP: 00007f59c7f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 196.468151][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.468160][ T9881] R13: 00007f59c9776128 R14: 00007f59c9776090 R15: 00007ffdfc0d89f8 [ 196.468172][ T9881] [ 196.755197][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.767859][ T9891] binfmt_misc: register: failed to install interpreter file ./file2 [ 196.813753][ T9899] FAULT_INJECTION: forcing a failure. [ 196.813753][ T9899] name failslab, interval 1, probability 0, space 0, times 0 [ 196.826815][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.4.2139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 196.826846][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.826859][ T9899] Call Trace: [ 196.826868][ T9899] [ 196.826878][ T9899] __dump_stack+0x1d/0x30 [ 196.826938][ T9899] dump_stack_lvl+0xe8/0x140 [ 196.826955][ T9899] dump_stack+0x15/0x1b [ 196.827035][ T9899] should_fail_ex+0x265/0x280 [ 196.827055][ T9899] ? nfnetlink_rcv+0xa04/0x1690 [ 196.827094][ T9899] should_failslab+0x8c/0xb0 [ 196.827161][ T9899] __kmalloc_cache_noprof+0x4c/0x320 [ 196.827190][ T9899] nfnetlink_rcv+0xa04/0x1690 [ 196.827278][ T9899] netlink_unicast+0x5bd/0x690 [ 196.827308][ T9899] netlink_sendmsg+0x58b/0x6b0 [ 196.827329][ T9899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.827357][ T9899] __sock_sendmsg+0x145/0x180 [ 196.827407][ T9899] ____sys_sendmsg+0x31e/0x4e0 [ 196.827467][ T9899] ___sys_sendmsg+0x17b/0x1d0 [ 196.827549][ T9899] __x64_sys_sendmsg+0xd4/0x160 [ 196.827572][ T9899] x64_sys_call+0x191e/0x2ff0 [ 196.827592][ T9899] do_syscall_64+0xd2/0x200 [ 196.827617][ T9899] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 196.827705][ T9899] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 196.827820][ T9899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.827841][ T9899] RIP: 0033:0x7f6ab2d5ebe9 [ 196.827857][ T9899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.827874][ T9899] RSP: 002b:00007f6ab17bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.827910][ T9899] RAX: ffffffffffffffda RBX: 00007f6ab2f85fa0 RCX: 00007f6ab2d5ebe9 [ 196.827922][ T9899] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 196.827933][ T9899] RBP: 00007f6ab17bf090 R08: 0000000000000000 R09: 0000000000000000 [ 196.827945][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.827956][ T9899] R13: 00007f6ab2f86038 R14: 00007f6ab2f85fa0 R15: 00007ffe8338a588 [ 196.828025][ T9899] [ 196.873066][ T9896] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 196.893966][ T9903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2136'. [ 196.894399][ T9893] FAULT_INJECTION: forcing a failure. [ 196.894399][ T9893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.899126][ T9903] netem: unknown loss type 12 [ 196.899176][ T9903] netem: change failed [ 196.904032][ T9893] CPU: 0 UID: 0 PID: 9893 Comm: syz.1.2135 Not tainted syzkaller #0 PREEMPT(voluntary) [ 196.904062][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.904074][ T9893] Call Trace: [ 196.904083][ T9893] [ 196.904092][ T9893] __dump_stack+0x1d/0x30 [ 196.904118][ T9893] dump_stack_lvl+0xe8/0x140 [ 196.904142][ T9893] dump_stack+0x15/0x1b [ 196.904159][ T9893] should_fail_ex+0x265/0x280 [ 196.904318][ T9893] should_fail+0xb/0x20 [ 196.904336][ T9893] should_fail_usercopy+0x1a/0x20 [ 196.904359][ T9893] _copy_to_user+0x20/0xa0 [ 196.904388][ T9893] simple_read_from_buffer+0xb5/0x130 [ 196.904477][ T9893] proc_fail_nth_read+0x10e/0x150 [ 196.904504][ T9893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.904529][ T9893] vfs_read+0x1a5/0x770 [ 196.904552][ T9893] ? __rcu_read_unlock+0x4f/0x70 [ 196.904574][ T9893] ? __fget_files+0x184/0x1c0 [ 196.904609][ T9893] ? __sys_setsockopt+0x18e/0x200 [ 196.904632][ T9893] ksys_read+0xda/0x1a0 [ 196.904655][ T9893] __x64_sys_read+0x40/0x50 [ 196.904716][ T9893] x64_sys_call+0x27bc/0x2ff0 [ 196.904737][ T9893] do_syscall_64+0xd2/0x200 [ 196.904826][ T9893] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 196.904869][ T9893] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 196.904895][ T9893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.904974][ T9893] RIP: 0033:0x7f065001d5fc [ 196.904992][ T9893] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 196.905010][ T9893] RSP: 002b:00007f064ea5e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.905031][ T9893] RAX: ffffffffffffffda RBX: 00007f0650246090 RCX: 00007f065001d5fc [ 196.905045][ T9893] RDX: 000000000000000f RSI: 00007f064ea5e0a0 RDI: 0000000000000004 [ 196.905089][ T9893] RBP: 00007f064ea5e090 R08: 0000000000000000 R09: 0000000000000000 [ 196.905101][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.905167][ T9893] R13: 00007f0650246128 R14: 00007f0650246090 R15: 00007fff82c8b358 [ 196.905245][ T9893] [ 197.293553][ T9896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.324234][ T9896] batadv0: entered promiscuous mode [ 197.330712][ T9896] $Hÿ: (slave batadv0): Enslaving as an active interface with an up link [ 197.412901][ T9896] syz.0.2140 (9896) used greatest stack depth: 9344 bytes left [ 197.465009][ T9930] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2149'. [ 197.657147][ T9950] netlink: 'syz.0.2154': attribute type 4 has an invalid length. [ 197.900934][ T9960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.912269][ T9960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.916775][ T9964] audit_log_lost: 96 callbacks suppressed [ 197.916792][ T9964] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 197.921683][ T29] audit: type=1326 audit(1755926174.808:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.2.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 197.927395][ T9964] audit: out of memory in audit_log_start [ 197.935516][ T29] audit: type=1326 audit(1755926174.808:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.2.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 197.935561][ T29] audit: type=1326 audit(1755926174.808:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.2.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 197.935591][ T29] audit: type=1326 audit(1755926174.808:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.2.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 198.039040][ T29] audit: type=1326 audit(1755926174.808:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.2.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 198.063854][ T29] audit: type=1326 audit(1755926174.808:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.2.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 198.088389][ T29] audit: type=1326 audit(1755926174.808:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.2.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 198.113586][ T29] audit: type=1326 audit(1755926174.808:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9963 comm="syz.2.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 198.141135][ T9960] bond0 (unregistering): Released all slaves [ 198.352804][ T9978] FAULT_INJECTION: forcing a failure. [ 198.352804][ T9978] name failslab, interval 1, probability 0, space 0, times 0 [ 198.366578][ T9978] CPU: 1 UID: 0 PID: 9978 Comm: syz.2.2167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.366611][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.366624][ T9978] Call Trace: [ 198.366631][ T9978] [ 198.366638][ T9978] __dump_stack+0x1d/0x30 [ 198.366734][ T9978] dump_stack_lvl+0xe8/0x140 [ 198.366756][ T9978] dump_stack+0x15/0x1b [ 198.366775][ T9978] should_fail_ex+0x265/0x280 [ 198.366856][ T9978] should_failslab+0x8c/0xb0 [ 198.366883][ T9978] __kvmalloc_node_noprof+0x123/0x4e0 [ 198.366933][ T9978] ? hhf_init+0x380/0x5b0 [ 198.366966][ T9978] hhf_init+0x380/0x5b0 [ 198.366995][ T9978] ? __pfx_hhf_init+0x10/0x10 [ 198.367032][ T9978] qdisc_create+0x591/0x9e0 [ 198.367061][ T9978] tc_modify_qdisc+0xf2e/0x1420 [ 198.367094][ T9978] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 198.367153][ T9978] rtnetlink_rcv_msg+0x65a/0x6d0 [ 198.367187][ T9978] netlink_rcv_skb+0x123/0x220 [ 198.367230][ T9978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.367301][ T9978] rtnetlink_rcv+0x1c/0x30 [ 198.367335][ T9978] netlink_unicast+0x5bd/0x690 [ 198.367368][ T9978] netlink_sendmsg+0x58b/0x6b0 [ 198.367392][ T9978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.367496][ T9978] __sock_sendmsg+0x145/0x180 [ 198.367533][ T9978] ____sys_sendmsg+0x31e/0x4e0 [ 198.367559][ T9978] ___sys_sendmsg+0x17b/0x1d0 [ 198.367594][ T9978] __x64_sys_sendmsg+0xd4/0x160 [ 198.367621][ T9978] x64_sys_call+0x191e/0x2ff0 [ 198.367681][ T9978] do_syscall_64+0xd2/0x200 [ 198.367708][ T9978] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.367732][ T9978] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 198.367758][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.367796][ T9978] RIP: 0033:0x7f59c954ebe9 [ 198.367814][ T9978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.367833][ T9978] RSP: 002b:00007f59c7faf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.367855][ T9978] RAX: ffffffffffffffda RBX: 00007f59c9775fa0 RCX: 00007f59c954ebe9 [ 198.367918][ T9978] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006 [ 198.367954][ T9978] RBP: 00007f59c7faf090 R08: 0000000000000000 R09: 0000000000000000 [ 198.368014][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.368028][ T9978] R13: 00007f59c9776038 R14: 00007f59c9775fa0 R15: 00007ffdfc0d89f8 [ 198.368049][ T9978] [ 198.631633][ T9980] loop4: detected capacity change from 0 to 512 [ 198.711406][ T9984] syzkaller0: entered allmulticast mode [ 198.736559][ T9980] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.756351][ T9984] syzkaller0 (unregistering): left allmulticast mode [ 198.804478][ T9980] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.851886][ T3302] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 198.895946][T10003] netlink: 'syz.3.2174': attribute type 4 has an invalid length. [ 199.037871][T10006] mmap: syz.2.2176 (10006): VmData 17453056 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 199.063786][T10002] loop4: detected capacity change from 0 to 8192 [ 199.192361][T10016] netlink: 'syz.2.2180': attribute type 2 has an invalid length. [ 199.244597][T10020] FAULT_INJECTION: forcing a failure. [ 199.244597][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.258896][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.0.2182 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.258930][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.258943][T10020] Call Trace: [ 199.258953][T10020] [ 199.258998][T10020] __dump_stack+0x1d/0x30 [ 199.259024][T10020] dump_stack_lvl+0xe8/0x140 [ 199.259043][T10020] dump_stack+0x15/0x1b [ 199.259059][T10020] should_fail_ex+0x265/0x280 [ 199.259083][T10020] should_fail+0xb/0x20 [ 199.259138][T10020] should_fail_usercopy+0x1a/0x20 [ 199.259162][T10020] _copy_from_iter+0xd2/0xe80 [ 199.259235][T10020] ? __build_skb_around+0x1a0/0x200 [ 199.259265][T10020] ? __alloc_skb+0x223/0x320 [ 199.259353][T10020] netlink_sendmsg+0x471/0x6b0 [ 199.259381][T10020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.259403][T10020] __sock_sendmsg+0x145/0x180 [ 199.259478][T10020] ____sys_sendmsg+0x345/0x4e0 [ 199.259504][T10020] ___sys_sendmsg+0x17b/0x1d0 [ 199.259539][T10020] __sys_sendmmsg+0x178/0x300 [ 199.259572][T10020] __x64_sys_sendmmsg+0x57/0x70 [ 199.259728][T10020] x64_sys_call+0x1c4a/0x2ff0 [ 199.259753][T10020] do_syscall_64+0xd2/0x200 [ 199.259780][T10020] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.259881][T10020] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 199.259963][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.259985][T10020] RIP: 0033:0x7ff1617febe9 [ 199.260004][T10020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.260028][T10020] RSP: 002b:00007ff160267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 199.260051][T10020] RAX: ffffffffffffffda RBX: 00007ff161a25fa0 RCX: 00007ff1617febe9 [ 199.260065][T10020] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 199.260079][T10020] RBP: 00007ff160267090 R08: 0000000000000000 R09: 0000000000000000 [ 199.260092][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.260170][T10020] R13: 00007ff161a26038 R14: 00007ff161a25fa0 R15: 00007fff168603e8 [ 199.260189][T10020] [ 199.529361][T10027] __nla_validate_parse: 6 callbacks suppressed [ 199.529439][T10027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2185'. [ 199.545271][T10027] netem: unknown loss type 12 [ 199.561279][T10024] netlink: 'syz.4.2183': attribute type 4 has an invalid length. [ 199.610752][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2188'. [ 199.656702][T10035] wireguard0: entered promiscuous mode [ 199.662636][T10035] wireguard0: entered allmulticast mode [ 199.975266][T10053] netlink: 'syz.1.2195': attribute type 3 has an invalid length. [ 199.983725][T10053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2195'. [ 200.036938][T10056] FAULT_INJECTION: forcing a failure. [ 200.036938][T10056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.050343][T10056] CPU: 1 UID: 0 PID: 10056 Comm: syz.3.2196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.050435][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.050449][T10056] Call Trace: [ 200.050459][T10056] [ 200.050467][T10056] __dump_stack+0x1d/0x30 [ 200.050501][T10056] dump_stack_lvl+0xe8/0x140 [ 200.050576][T10056] dump_stack+0x15/0x1b [ 200.050619][T10056] should_fail_ex+0x265/0x280 [ 200.050643][T10056] should_fail+0xb/0x20 [ 200.050663][T10056] should_fail_usercopy+0x1a/0x20 [ 200.050705][T10056] _copy_from_user+0x1c/0xb0 [ 200.050765][T10056] ___sys_sendmsg+0xc1/0x1d0 [ 200.050798][T10056] __x64_sys_sendmsg+0xd4/0x160 [ 200.050822][T10056] x64_sys_call+0x191e/0x2ff0 [ 200.050844][T10056] do_syscall_64+0xd2/0x200 [ 200.050946][T10056] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.050970][T10056] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 200.050998][T10056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.051022][T10056] RIP: 0033:0x7fe6a6efebe9 [ 200.051116][T10056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.051133][T10056] RSP: 002b:00007fe6a595f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.051154][T10056] RAX: ffffffffffffffda RBX: 00007fe6a7125fa0 RCX: 00007fe6a6efebe9 [ 200.051169][T10056] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 200.051184][T10056] RBP: 00007fe6a595f090 R08: 0000000000000000 R09: 0000000000000000 [ 200.051222][T10056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.051235][T10056] R13: 00007fe6a7126038 R14: 00007fe6a7125fa0 R15: 00007fff1dbdd2b8 [ 200.051256][T10056] [ 200.350514][T10033] Set syz1 is full, maxelem 65536 reached [ 200.402669][T10070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2201'. [ 200.428451][T10074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2203'. [ 200.500951][T10076] netlink: 'syz.4.2202': attribute type 4 has an invalid length. [ 200.526490][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2197'. [ 200.537581][T10080] sd 0:0:1:0: device reset [ 200.580827][T10081] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 200.594247][T10081] netlink: 4568 bytes leftover after parsing attributes in process `syz.3.2204'. [ 200.603939][T10081] netlink: 4568 bytes leftover after parsing attributes in process `syz.3.2204'. [ 200.726861][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 200.736679][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 201.714885][T10107] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 201.731121][ T8288] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.804108][ T8288] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.889069][T10124] FAULT_INJECTION: forcing a failure. [ 201.889069][T10124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.902848][T10124] CPU: 0 UID: 0 PID: 10124 Comm: syz.0.2220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.902905][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.902920][T10124] Call Trace: [ 201.902977][T10124] [ 201.902988][T10124] __dump_stack+0x1d/0x30 [ 201.903015][T10124] dump_stack_lvl+0xe8/0x140 [ 201.903036][T10124] dump_stack+0x15/0x1b [ 201.903056][T10124] should_fail_ex+0x265/0x280 [ 201.903080][T10124] should_fail+0xb/0x20 [ 201.903136][T10124] should_fail_usercopy+0x1a/0x20 [ 201.903156][T10124] _copy_from_user+0x1c/0xb0 [ 201.903186][T10124] __ia32_sys_rt_sigreturn+0x128/0x350 [ 201.903243][T10124] x64_sys_call+0x2d3c/0x2ff0 [ 201.903267][T10124] do_syscall_64+0xd2/0x200 [ 201.903297][T10124] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.903321][T10124] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 201.903411][T10124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.903432][T10124] RIP: 0033:0x7ff16179ade9 [ 201.903451][T10124] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 201.903510][T10124] RSP: 002b:00007ff160266a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 201.903540][T10124] RAX: ffffffffffffffda RBX: 00007ff161a25fa0 RCX: 00007ff16179ade9 [ 201.903552][T10124] RDX: 00007ff160266a80 RSI: 00007ff160266bb0 RDI: 0000000000000021 [ 201.903565][T10124] RBP: 00007ff160267090 R08: 0000200000048000 R09: 0000000000000000 [ 201.903625][T10124] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 201.903640][T10124] R13: 00007ff161a26038 R14: 00007ff161a25fa0 R15: 00007fff168603e8 [ 201.903662][T10124] [ 202.094464][ T8288] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.105341][T10122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10122 comm=¬í [ 202.142763][ T8288] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.154768][T10127] FAULT_INJECTION: forcing a failure. [ 202.154768][T10127] name failslab, interval 1, probability 0, space 0, times 0 [ 202.167551][T10127] CPU: 0 UID: 0 PID: 10127 Comm: syz.3.2221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.167585][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.167599][T10127] Call Trace: [ 202.167610][T10127] [ 202.167620][T10127] __dump_stack+0x1d/0x30 [ 202.167704][T10127] dump_stack_lvl+0xe8/0x140 [ 202.167725][T10127] dump_stack+0x15/0x1b [ 202.167742][T10127] should_fail_ex+0x265/0x280 [ 202.167762][T10127] ? allocate_file_region_entries+0xd2/0x310 [ 202.167791][T10127] should_failslab+0x8c/0xb0 [ 202.167819][T10127] __kmalloc_cache_noprof+0x4c/0x320 [ 202.167855][T10127] allocate_file_region_entries+0xd2/0x310 [ 202.167907][T10127] region_chg+0x232/0x2d0 [ 202.167929][T10127] alloc_hugetlb_folio+0x312/0x1070 [ 202.167963][T10127] hugetlb_fault+0xd71/0x1b50 [ 202.168058][T10127] handle_mm_fault+0x1861/0x2c20 [ 202.168106][T10127] ? __schedule+0x6b9/0xb30 [ 202.168185][T10127] ? down_read+0x77/0xe0 [ 202.168216][T10127] __get_user_pages+0x102e/0x1fa0 [ 202.168323][T10127] __mm_populate+0x243/0x3a0 [ 202.168351][T10127] __se_sys_remap_file_pages+0x39b/0x600 [ 202.168376][T10127] ? __bpf_trace_sys_enter+0x10/0x30 [ 202.168405][T10127] __x64_sys_remap_file_pages+0x67/0x80 [ 202.168442][T10127] x64_sys_call+0x23af/0x2ff0 [ 202.168467][T10127] do_syscall_64+0xd2/0x200 [ 202.168500][T10127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 202.168526][T10127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 202.168550][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.168571][T10127] RIP: 0033:0x7fe6a6efebe9 [ 202.168611][T10127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.168633][T10127] RSP: 002b:00007fe6a595f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 202.168661][T10127] RAX: ffffffffffffffda RBX: 00007fe6a7125fa0 RCX: 00007fe6a6efebe9 [ 202.168673][T10127] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 202.168685][T10127] RBP: 00007fe6a595f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.168697][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.168711][T10127] R13: 00007fe6a7126038 R14: 00007fe6a7125fa0 R15: 00007fff1dbdd2b8 [ 202.168732][T10127] [ 202.931874][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 202.931893][ T29] audit: type=1326 audit(1755926179.828:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 202.966576][T10130] loop4: detected capacity change from 0 to 512 [ 202.977001][T10130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.011919][ T29] audit: type=1326 audit(1755926179.868:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 203.037560][ T29] audit: type=1326 audit(1755926179.868:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 203.062391][ T29] audit: type=1326 audit(1755926179.868:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 203.087171][ T29] audit: type=1326 audit(1755926179.868:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 203.111505][ T29] audit: type=1326 audit(1755926179.868:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 203.136070][ T29] audit: type=1326 audit(1755926179.868:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 203.160100][ T29] audit: type=1326 audit(1755926179.868:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 203.184118][ T29] audit: type=1326 audit(1755926179.868:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 203.209485][ T29] audit: type=1326 audit(1755926179.878:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.3.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe6a6efebe9 code=0x7ffc0000 [ 203.236852][T10130] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 203.236852][T10130] [ 203.248635][T10130] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 203.257954][T10130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.302150][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.344483][T10150] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 204.648451][T10175] lo speed is unknown, defaulting to 1000 [ 204.991082][T10187] __nla_validate_parse: 4 callbacks suppressed [ 204.991104][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'. [ 205.049203][T10187] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.081124][T10187] bond_slave_0: left promiscuous mode [ 205.100769][T10187] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.131107][T10187] bond_slave_1: left promiscuous mode [ 205.152307][T10187] $Hÿ (unregistering): (slave batadv0): Releasing backup interface [ 205.178416][T10187] batadv0: left promiscuous mode [ 205.201070][T10187] $Hÿ (unregistering): Released all slaves [ 205.295287][T10197] syzkaller0: entered allmulticast mode [ 205.313650][T10197] syzkaller0 (unregistering): left allmulticast mode [ 205.550299][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'. [ 205.603663][T10203] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.634965][T10203] .` (unregistering): (slave dummy0): Releasing backup interface [ 205.671955][T10203] .` (unregistering): Released all slaves [ 205.695163][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2253'. [ 205.851282][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 205.856909][T10225] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2260'. [ 205.956581][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 205.977028][ T51] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 205.991007][ T51] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 206.000980][ T51] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 206.012860][ T51] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 206.084046][T10246] netlink: 'syz.3.2263': attribute type 2 has an invalid length. [ 206.099111][T10245] loop4: detected capacity change from 0 to 1024 [ 206.116626][T10245] EXT4-fs: Ignoring removed orlov option [ 206.122457][T10245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.272858][T10245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.327665][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.430389][T10253] loop4: detected capacity change from 0 to 512 [ 206.454081][T10253] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.493060][T10253] EXT4-fs (loop4): 1 orphan inode deleted [ 206.497599][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 206.499012][T10253] EXT4-fs (loop4): 1 truncate cleaned up [ 206.519193][T10253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.772087][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.857529][T10277] loop4: detected capacity change from 0 to 512 [ 206.888030][T10277] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 206.989558][T10277] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 207.053835][ T3302] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 207.254575][T10285] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2275'. [ 207.263982][T10285] netem: unknown loss type 12 [ 207.339451][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 207.386698][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 207.461947][T10291] loop4: detected capacity change from 0 to 512 [ 207.490389][T10291] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.565964][T10291] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 207.616481][ T3302] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 207.851559][T10311] netlink: 'syz.1.2283': attribute type 4 has an invalid length. [ 208.816172][T10330] netlink: 'syz.3.2291': attribute type 10 has an invalid length. [ 208.824656][T10330] batadv0: entered promiscuous mode [ 208.830445][T10330] batadv0: entered allmulticast mode [ 208.842265][T10328] loop4: detected capacity change from 0 to 512 [ 208.886606][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 208.886628][ T29] audit: type=1400 audit(1755926185.778:3741): avc: denied { getopt } for pid=10332 comm="syz.0.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.887715][T10330] bridge0: port 3(batadv0) entered blocking state [ 208.909175][T10328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.913107][T10330] bridge0: port 3(batadv0) entered disabled state [ 208.987755][T10328] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.011728][T10331] netlink: 'syz.2.2289': attribute type 4 has an invalid length. [ 209.033174][T10328] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2290: corrupted inode contents [ 209.071440][T10328] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2290: mark_inode_dirty error [ 209.083869][T10328] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2290: corrupted inode contents [ 209.096642][T10328] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2290: mark_inode_dirty error [ 209.114799][T10328] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2290: corrupted inode contents [ 209.127447][T10328] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2290: mark_inode_dirty error [ 209.140962][T10328] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2290: corrupted inode contents [ 209.154203][T10328] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2290: corrupted inode contents [ 209.167773][T10328] EXT4-fs error (device loop4): add_dirent_to_buf:2153: inode #2: comm syz.4.2290: mark_inode_dirty error [ 209.241425][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.315225][T10347] netlink: 'syz.3.2297': attribute type 13 has an invalid length. [ 209.340893][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 209.351173][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 209.446883][T10353] netlink: 'syz.4.2296': attribute type 4 has an invalid length. [ 209.731438][T10368] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 209.796545][ T29] audit: type=1326 audit(1755926186.688:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 209.835717][ T29] audit: type=1326 audit(1755926186.728:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 209.861089][ T29] audit: type=1326 audit(1755926186.728:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 209.884771][ T29] audit: type=1326 audit(1755926186.728:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 209.908763][ T29] audit: type=1326 audit(1755926186.728:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 209.933409][ T29] audit: type=1326 audit(1755926186.728:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 209.957900][ T29] audit: type=1326 audit(1755926186.728:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 209.982075][ T29] audit: type=1326 audit(1755926186.728:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 210.006049][ T29] audit: type=1326 audit(1755926186.728:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c954ebe9 code=0x7ffc0000 [ 210.091858][T10389] syzkaller0: entered allmulticast mode [ 210.114148][T10389] syzkaller0 (unregistering): left allmulticast mode [ 210.285278][T10400] __nla_validate_parse: 4 callbacks suppressed [ 210.285300][T10400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2312'. [ 210.326700][T10410] netlink: 'syz.4.2315': attribute type 4 has an invalid length. [ 210.480807][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2318'. [ 211.021128][T10452] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 211.059341][T10453] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2327'. [ 211.286426][T10466] loop4: detected capacity change from 0 to 128 [ 211.403851][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2334'. [ 211.440799][T10474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2336'. [ 211.480268][T10476] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2337'. [ 211.490059][T10476] netem: unknown loss type 12 [ 211.796372][T10492] FAULT_INJECTION: forcing a failure. [ 211.796372][T10492] name failslab, interval 1, probability 0, space 0, times 0 [ 211.809911][T10492] CPU: 0 UID: 0 PID: 10492 Comm: syz.4.2344 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.809947][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.809962][T10492] Call Trace: [ 211.809969][T10492] [ 211.809977][T10492] __dump_stack+0x1d/0x30 [ 211.810003][T10492] dump_stack_lvl+0xe8/0x140 [ 211.810025][T10492] dump_stack+0x15/0x1b [ 211.810084][T10492] should_fail_ex+0x265/0x280 [ 211.810108][T10492] should_failslab+0x8c/0xb0 [ 211.810132][T10492] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 211.810207][T10492] ? p9_client_create+0x59/0xbc0 [ 211.810232][T10492] ? p9_client_create+0x207/0xbc0 [ 211.810260][T10492] ? should_failslab+0x8c/0xb0 [ 211.810285][T10492] kstrdup+0x3e/0xd0 [ 211.810312][T10492] p9_client_create+0x207/0xbc0 [ 211.810388][T10492] v9fs_session_init+0xf7/0xde0 [ 211.810414][T10492] ? avc_has_perm_noaudit+0x1b1/0x200 [ 211.810443][T10492] ? should_fail_ex+0xdb/0x280 [ 211.810465][T10492] ? v9fs_mount+0x51/0x5c0 [ 211.810492][T10492] ? should_failslab+0x8c/0xb0 [ 211.810574][T10492] ? __kmalloc_cache_noprof+0x189/0x320 [ 211.810606][T10492] v9fs_mount+0x67/0x5c0 [ 211.810632][T10492] ? selinux_capable+0x31/0x40 [ 211.810722][T10492] ? __pfx_v9fs_mount+0x10/0x10 [ 211.810751][T10492] legacy_get_tree+0x78/0xd0 [ 211.810778][T10492] vfs_get_tree+0x57/0x1d0 [ 211.810803][T10492] do_new_mount+0x207/0x5e0 [ 211.810827][T10492] ? security_capable+0x83/0x90 [ 211.810852][T10492] path_mount+0x4a4/0xb20 [ 211.810873][T10492] ? user_path_at+0x109/0x130 [ 211.810961][T10492] __se_sys_mount+0x28f/0x2e0 [ 211.810986][T10492] ? fput+0x8f/0xc0 [ 211.811034][T10492] __x64_sys_mount+0x67/0x80 [ 211.811059][T10492] x64_sys_call+0x2b4d/0x2ff0 [ 211.811081][T10492] do_syscall_64+0xd2/0x200 [ 211.811107][T10492] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.811209][T10492] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 211.811265][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.811286][T10492] RIP: 0033:0x7f6ab2d5ebe9 [ 211.811305][T10492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.811374][T10492] RSP: 002b:00007f6ab17bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 211.811397][T10492] RAX: ffffffffffffffda RBX: 00007f6ab2f85fa0 RCX: 00007f6ab2d5ebe9 [ 211.811412][T10492] RDX: 0000200000000200 RSI: 0000200000000580 RDI: 0000000000000000 [ 211.811483][T10492] RBP: 00007f6ab17bf090 R08: 0000200000000240 R09: 0000000000000000 [ 211.811496][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.811510][T10492] R13: 00007f6ab2f86038 R14: 00007f6ab2f85fa0 R15: 00007ffe8338a588 [ 211.811531][T10492] [ 212.470405][T10512] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2351'. [ 212.586685][T10520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2351'. [ 212.592774][T10518] ipvlan2: entered promiscuous mode [ 212.696632][T10502] loop4: detected capacity change from 0 to 512 [ 212.739900][T10502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 212.775177][T10502] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 212.775177][T10502] [ 212.786327][T10502] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 212.872615][T10502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.897069][T10532] netlink: 'syz.2.2357': attribute type 4 has an invalid length. [ 213.010959][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.112677][T10537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2359'. [ 213.219655][T10541] loop4: detected capacity change from 0 to 1024 [ 213.237704][T10541] EXT4-fs: Ignoring removed orlov option [ 213.243784][T10541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.275586][T10541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.313498][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.358331][T10546] loop4: detected capacity change from 0 to 512 [ 213.392198][T10546] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.450553][T10546] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.522524][ T3302] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 213.539666][T10552] FAULT_INJECTION: forcing a failure. [ 213.539666][T10552] name failslab, interval 1, probability 0, space 0, times 0 [ 213.552831][T10552] CPU: 0 UID: 0 PID: 10552 Comm: syz.1.2364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.552863][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.552909][T10552] Call Trace: [ 213.552949][T10552] [ 213.552957][T10552] __dump_stack+0x1d/0x30 [ 213.552980][T10552] dump_stack_lvl+0xe8/0x140 [ 213.552999][T10552] dump_stack+0x15/0x1b [ 213.553014][T10552] should_fail_ex+0x265/0x280 [ 213.553100][T10552] should_failslab+0x8c/0xb0 [ 213.553195][T10552] __kmalloc_noprof+0xa5/0x3e0 [ 213.553225][T10552] ? bitmap_zalloc+0x29/0x40 [ 213.553247][T10552] bitmap_zalloc+0x29/0x40 [ 213.553345][T10552] io_alloc_file_tables+0x47/0x90 [ 213.553366][T10552] io_sqe_files_register+0x13c/0x4f0 [ 213.553464][T10552] __se_sys_io_uring_register+0xb01/0xeb0 [ 213.553599][T10552] ? fput+0x8f/0xc0 [ 213.553629][T10552] ? ksys_write+0x192/0x1a0 [ 213.553714][T10552] __x64_sys_io_uring_register+0x55/0x70 [ 213.553739][T10552] x64_sys_call+0x18a3/0x2ff0 [ 213.553762][T10552] do_syscall_64+0xd2/0x200 [ 213.553792][T10552] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.553848][T10552] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 213.553870][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.553890][T10552] RIP: 0033:0x7f065001ebe9 [ 213.553909][T10552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.553929][T10552] RSP: 002b:00007f064ea7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 213.553995][T10552] RAX: ffffffffffffffda RBX: 00007f0650245fa0 RCX: 00007f065001ebe9 [ 213.554010][T10552] RDX: 0000200000000e80 RSI: 0000000000000002 RDI: 0000000000000003 [ 213.554023][T10552] RBP: 00007f064ea7f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.554035][T10552] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 213.554047][T10552] R13: 00007f0650246038 R14: 00007f0650245fa0 R15: 00007fff82c8b358 [ 213.554121][T10552] [ 213.870615][T10556] loop4: detected capacity change from 0 to 1024 [ 213.883112][T10556] EXT4-fs: Ignoring removed orlov option [ 213.888951][T10556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.964258][T10556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.038535][T10566] netlink: 'syz.3.2367': attribute type 21 has an invalid length. [ 214.047364][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 214.060890][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.071937][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 214.071959][ T29] audit: type=1400 audit(1755926190.968:3942): avc: denied { getopt } for pid=10555 comm="syz.1.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 214.162518][T10572] loop4: detected capacity change from 0 to 512 [ 214.174915][T10572] ext4: Unknown parameter 'obj_user' [ 214.534555][T10594] netlink: 'syz.3.2376': attribute type 4 has an invalid length. [ 215.051373][T10599] netlink: 'syz.4.2378': attribute type 4 has an invalid length. [ 215.139776][ T29] audit: type=1326 audit(1755926192.008:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.4.2379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f6ab2d5ebe9 code=0x0 [ 215.194800][T10602] lo speed is unknown, defaulting to 1000 [ 215.451763][ T29] audit: type=1400 audit(1755926192.328:3944): avc: denied { lock } for pid=10607 comm="syz.2.2381" path="socket:[26763]" dev="sockfs" ino=26763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.980065][ T29] audit: type=1400 audit(1755926192.878:3945): avc: denied { relabelfrom } for pid=10629 comm="syz.2.2389" name="NETLINK" dev="sockfs" ino=26834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 215.990623][T10632] random: crng reseeded on system resumption [ 216.008797][T10634] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 216.031469][T10635] __nla_validate_parse: 2 callbacks suppressed [ 216.031491][T10635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2390'. [ 216.032157][T10628] lo speed is unknown, defaulting to 1000 [ 216.055010][ T29] audit: type=1400 audit(1755926192.888:3946): avc: denied { read append } for pid=10625 comm="syz.0.2387" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 216.079063][ T29] audit: type=1400 audit(1755926192.888:3947): avc: denied { ioctl open } for pid=10625 comm="syz.0.2387" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 216.103871][ T29] audit: type=1400 audit(1755926192.918:3948): avc: denied { relabelto } for pid=10629 comm="syz.2.2389" name="NETLINK" dev="sockfs" ino=26834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 216.132852][ T29] audit: type=1400 audit(1755926192.918:3949): avc: denied { create } for pid=10627 comm="syz.4.2388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=mctp_socket permissive=1 [ 216.153584][ T29] audit: type=1400 audit(1755926192.918:3950): avc: denied { create } for pid=10627 comm="syz.4.2388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 216.216421][T10644] FAULT_INJECTION: forcing a failure. [ 216.216421][T10644] name fail_futex, interval 1, probability 0, space 0, times 1 [ 216.229634][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.1.2393 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.229744][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.229759][T10644] Call Trace: [ 216.229768][T10644] [ 216.229778][T10644] __dump_stack+0x1d/0x30 [ 216.229804][T10644] dump_stack_lvl+0xe8/0x140 [ 216.229825][T10644] dump_stack+0x15/0x1b [ 216.229842][T10644] should_fail_ex+0x265/0x280 [ 216.229869][T10644] should_fail+0xb/0x20 [ 216.229968][T10644] get_futex_key+0x8e3/0xbd0 [ 216.230026][T10644] futex_wait_setup+0x4a/0x3e0 [ 216.230063][T10644] futex_wait_requeue_pi+0x1ac/0x640 [ 216.230158][T10644] ? __pfx_futex_wake_mark+0x10/0x10 [ 216.230210][T10644] do_futex+0x136/0x380 [ 216.230238][T10644] __se_sys_futex+0x2ed/0x360 [ 216.230278][T10644] __x64_sys_futex+0x78/0x90 [ 216.230379][T10644] x64_sys_call+0x2e39/0x2ff0 [ 216.230402][T10644] do_syscall_64+0xd2/0x200 [ 216.230430][T10644] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.230505][T10644] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 216.230533][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.230557][T10644] RIP: 0033:0x7f065001ebe9 [ 216.230575][T10644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.230648][T10644] RSP: 002b:00007f064ea7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.230670][T10644] RAX: ffffffffffffffda RBX: 00007f0650245fa0 RCX: 00007f065001ebe9 [ 216.230684][T10644] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 216.230699][T10644] RBP: 00007f064ea7f090 R08: 0000200000048000 R09: 0000000000000000 [ 216.230714][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.230727][T10644] R13: 00007f0650246038 R14: 00007f0650245fa0 R15: 00007fff82c8b358 [ 216.230746][T10644] [ 216.586384][ T29] audit: type=1326 audit(1755926193.478:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10652 comm="syz.1.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065001ebe9 code=0x7ffc0000 [ 216.638115][T10653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2396'. [ 216.676874][T10625] syz.0.2387 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 216.688015][T10625] CPU: 1 UID: 0 PID: 10625 Comm: syz.0.2387 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.688068][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.688080][T10625] Call Trace: [ 216.688087][T10625] [ 216.688096][T10625] __dump_stack+0x1d/0x30 [ 216.688119][T10625] dump_stack_lvl+0xe8/0x140 [ 216.688139][T10625] dump_stack+0x15/0x1b [ 216.688154][T10625] dump_header+0x81/0x220 [ 216.688238][T10625] oom_kill_process+0x342/0x400 [ 216.688338][T10625] out_of_memory+0x979/0xb80 [ 216.688439][T10625] try_charge_memcg+0x5e6/0x9e0 [ 216.688471][T10625] charge_memcg+0x51/0xc0 [ 216.688489][T10625] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 216.688523][T10625] __read_swap_cache_async+0x1df/0x350 [ 216.688556][T10625] swap_cluster_readahead+0x277/0x3e0 [ 216.688589][T10625] swapin_readahead+0xde/0x6f0 [ 216.688618][T10625] ? __filemap_get_folio+0x4f7/0x6b0 [ 216.688684][T10625] ? swap_cache_get_folio+0x77/0x200 [ 216.688717][T10625] do_swap_page+0x301/0x2430 [ 216.688768][T10625] ? css_rstat_updated+0xb7/0x240 [ 216.688803][T10625] ? __pfx_default_wake_function+0x10/0x10 [ 216.688832][T10625] handle_mm_fault+0x9a5/0x2c20 [ 216.688861][T10625] do_user_addr_fault+0x636/0x1090 [ 216.688938][T10625] ? fpregs_restore_userregs+0xad/0x1d0 [ 216.688972][T10625] ? switch_fpu_return+0xe/0x20 [ 216.688997][T10625] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 216.689045][T10625] exc_page_fault+0x62/0xa0 [ 216.689085][T10625] asm_exc_page_fault+0x26/0x30 [ 216.689104][T10625] RIP: 0033:0x7ff1616d563c [ 216.689121][T10625] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 216.689170][T10625] RSP: 002b:00007fff16860550 EFLAGS: 00010206 [ 216.689188][T10625] RAX: 0000000000000000 RBX: 00007ff161a25fa0 RCX: 0000000000000000 [ 216.689203][T10625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556b136808 [ 216.689214][T10625] RBP: 00007ff161a27da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 216.689226][T10625] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000034e8b [ 216.689238][T10625] R13: 00007ff161a26090 R14: ffffffffffffffff R15: 00007fff16860660 [ 216.689303][T10625] [ 216.919579][T10625] memory: usage 307200kB, limit 307200kB, failcnt 2852 [ 216.926538][T10625] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 216.934673][T10625] kmem: usage 294984kB, limit 9007199254740988kB, failcnt 0 [ 216.942212][T10625] Memory cgroup stats for /syz0: [ 216.949264][T10625] cache 0 [ 216.957907][T10625] rss 4096 [ 216.961126][T10625] shmem 0 [ 216.964139][T10625] mapped_file 0 [ 216.967818][T10625] dirty 0 [ 216.971081][T10625] writeback 0 [ 216.974419][T10625] workingset_refault_anon 12 [ 216.979572][T10625] workingset_refault_file 15 [ 216.984273][T10625] swap 196608 [ 216.987737][T10625] swapcached 8192 [ 216.991797][T10625] pgpgin 223741 [ 216.995909][T10625] pgpgout 223739 [ 216.999852][T10625] pgfault 253078 [ 217.003608][T10625] pgmajfault 9 [ 217.007298][T10625] inactive_anon 8192 [ 217.011444][T10625] active_anon 0 [ 217.015096][T10625] inactive_file 0 [ 217.018804][T10625] active_file 0 [ 217.022584][T10625] unevictable 0 [ 217.026570][T10625] hierarchical_memory_limit 314572800 [ 217.032116][T10625] hierarchical_memsw_limit 9223372036854771712 [ 217.039129][T10625] total_cache 0 [ 217.043169][T10625] total_rss 4096 [ 217.047098][T10625] total_shmem 0 [ 217.050968][T10625] total_mapped_file 0 [ 217.055671][T10625] total_dirty 0 [ 217.059204][T10625] total_writeback 0 [ 217.063299][T10625] total_workingset_refault_anon 12 [ 217.069121][T10625] total_workingset_refault_file 15 [ 217.074775][T10625] total_swap 196608 [ 217.078763][T10625] total_swapcached 8192 [ 217.082954][T10625] total_pgpgin 223741 [ 217.087001][T10625] total_pgpgout 223739 [ 217.091444][T10625] total_pgfault 253078 [ 217.095800][T10625] total_pgmajfault 9 [ 217.099926][T10625] total_inactive_anon 8192 [ 217.104575][T10625] total_active_anon 0 [ 217.108813][T10625] total_inactive_file 0 [ 217.113264][T10625] total_active_file 0 [ 217.117404][T10625] total_unevictable 0 [ 217.121966][T10625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2387,pid=10625,uid=0 [ 217.137575][T10625] Memory cgroup out of memory: Killed process 10625 (syz.0.2387) total-vm:95944kB, anon-rss:944kB, file-rss:22512kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 217.274107][T10670] loop4: detected capacity change from 0 to 1024 [ 217.292932][T10670] EXT4-fs: Ignoring removed orlov option [ 217.299069][T10670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.322954][T10670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.358067][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.415757][T10684] loop4: detected capacity change from 0 to 128 [ 217.612128][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 218.397831][T10716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.434119][T10716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.477807][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2424'. [ 219.036665][T10739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2428'. [ 219.084964][T10741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2429'. [ 219.512780][T10745] loop4: detected capacity change from 0 to 2048 [ 219.529953][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 219.529973][ T29] audit: type=1326 audit(1755926196.398:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 219.560868][ T29] audit: type=1326 audit(1755926196.398:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 219.585845][ T29] audit: type=1326 audit(1755926196.398:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 219.610458][ T29] audit: type=1326 audit(1755926196.398:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 219.634686][ T29] audit: type=1326 audit(1755926196.398:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 219.658475][ T29] audit: type=1326 audit(1755926196.398:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 219.682817][ T29] audit: type=1326 audit(1755926196.398:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 219.707178][ T29] audit: type=1326 audit(1755926196.398:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 219.731581][ T29] audit: type=1326 audit(1755926196.398:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 219.756345][ T29] audit: type=1326 audit(1755926196.398:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10744 comm="syz.4.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ab2d5ebe9 code=0x7ffc0000 [ 220.133476][T10745] loop4: detected capacity change from 0 to 512 [ 220.153956][T10752] wireguard0: entered promiscuous mode [ 220.159822][T10752] wireguard0: entered allmulticast mode [ 220.180285][T10745] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2430: corrupted inode contents [ 220.199218][T10745] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.2430: mark_inode_dirty error [ 220.214229][T10745] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2430: corrupted inode contents [ 220.231660][T10745] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2430: mark_inode_dirty error [ 220.249202][T10745] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2430: corrupted inode contents [ 220.292975][T10768] netlink: 'syz.1.2435': attribute type 4 has an invalid length. [ 220.341328][T10745] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 220.350306][T10745] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2430: corrupted inode contents [ 220.364734][T10745] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.2430: mark_inode_dirty error [ 220.438110][T10745] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 220.450781][T10745] EXT4-fs (loop4): 1 truncate cleaned up [ 220.462587][T10745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.488046][ T8267] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 1 [ 220.511422][T10745] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.556809][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.614451][T10779] loop4: detected capacity change from 0 to 1024 [ 220.661015][T10779] EXT4-fs: Ignoring removed orlov option [ 220.666956][T10779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.739877][T10783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2443'. [ 220.754133][T10779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.785495][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.825743][T10788] loop4: detected capacity change from 0 to 256 [ 220.838777][T10788] FAT-fs (loop4): Directory bread(block 1285) failed [ 220.853163][T10788] FAT-fs (loop4): Directory bread(block 1285) failed [ 220.860653][T10788] FAT-fs (loop4): Directory bread(block 1285) failed [ 220.873049][T10788] FAT-fs (loop4): Directory bread(block 1285) failed [ 220.892553][T10788] FAT-fs (loop4): Directory bread(block 1285) failed [ 220.908739][ T3302] FAT-fs (loop4): Directory bread(block 1285) failed [ 221.001981][ T8288] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.041249][ T8288] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.206256][ T8288] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.265185][T10796] lo speed is unknown, defaulting to 1000 [ 221.280807][ T8288] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.307932][T10808] netlink: 'syz.1.2450': attribute type 4 has an invalid length. [ 221.380796][ T8288] bridge_slave_1: left allmulticast mode [ 221.386684][ T8288] bridge_slave_1: left promiscuous mode [ 221.392543][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.520027][ T8288] bridge_slave_0: left allmulticast mode [ 221.526150][ T8288] bridge_slave_0: left promiscuous mode [ 221.532310][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.716008][ T8288] tipc: Left network mode [ 221.731075][ T8288] hsr_slave_0: left promiscuous mode [ 221.774043][ T8288] hsr_slave_1: left promiscuous mode [ 221.804973][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.812682][ T8288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.853070][T10834] FAULT_INJECTION: forcing a failure. [ 221.853070][T10834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.866907][T10834] CPU: 1 UID: 0 PID: 10834 Comm: syz.2.2456 Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.866942][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.866955][T10834] Call Trace: [ 221.866976][T10834] [ 221.866986][T10834] __dump_stack+0x1d/0x30 [ 221.867013][T10834] dump_stack_lvl+0xe8/0x140 [ 221.867085][T10834] dump_stack+0x15/0x1b [ 221.867101][T10834] should_fail_ex+0x265/0x280 [ 221.867124][T10834] should_fail_alloc_page+0xf2/0x100 [ 221.867219][T10834] __alloc_frozen_pages_noprof+0xff/0x360 [ 221.867317][T10834] alloc_pages_mpol+0xb3/0x250 [ 221.867352][T10834] folio_alloc_mpol_noprof+0x39/0x80 [ 221.867432][T10834] shmem_get_folio_gfp+0x3cf/0xd60 [ 221.867466][T10834] ? simple_xattr_get+0xb9/0x120 [ 221.867498][T10834] shmem_write_begin+0xa8/0x190 [ 221.867579][T10834] generic_perform_write+0x184/0x490 [ 221.867608][T10834] shmem_file_write_iter+0xc5/0xf0 [ 221.867632][T10834] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 221.867656][T10834] vfs_write+0x527/0x960 [ 221.867683][T10834] ksys_write+0xda/0x1a0 [ 221.867732][T10834] __x64_sys_write+0x40/0x50 [ 221.867752][T10834] x64_sys_call+0x27fe/0x2ff0 [ 221.867772][T10834] do_syscall_64+0xd2/0x200 [ 221.867799][T10834] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 221.867850][T10834] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 221.867878][T10834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.867902][T10834] RIP: 0033:0x7f59c954ebe9 [ 221.867922][T10834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.867947][T10834] RSP: 002b:00007f59c7faf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.867985][T10834] RAX: ffffffffffffffda RBX: 00007f59c9775fa0 RCX: 00007f59c954ebe9 [ 221.868036][T10834] RDX: 0000000000032600 RSI: 0000200000000000 RDI: 0000000000000003 [ 221.868049][T10834] RBP: 00007f59c7faf090 R08: 0000000000000000 R09: 0000000000000000 [ 221.868061][T10834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.868073][T10834] R13: 00007f59c9776038 R14: 00007f59c9775fa0 R15: 00007ffdfc0d89f8 [ 221.868092][T10834] [ 222.098945][ T8288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.106906][ T8288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.164706][ T8288] veth1_macvtap: left promiscuous mode [ 222.228640][ T8288] veth0_macvtap: left promiscuous mode [ 222.234556][ T8288] veth1_vlan: left promiscuous mode [ 222.241352][ T8288] veth0_vlan: left promiscuous mode [ 222.368031][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2460'. [ 222.385923][ T8288] pim6reg (unregistering): left allmulticast mode [ 222.432563][ T8288] team0 (unregistering): Port device team_slave_1 removed [ 222.445573][ T8288] team0 (unregistering): Port device team_slave_0 removed [ 222.485720][T10796] chnl_net:caif_netlink_parms(): no params data found [ 222.599529][T10855] netlink: 'syz.2.2459': attribute type 4 has an invalid length. [ 222.664318][T10863] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2462'. [ 222.995906][ T8288] IPVS: stop unused estimator thread 0... [ 223.143605][T10796] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.151635][T10796] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.187321][T10796] bridge_slave_0: entered allmulticast mode [ 223.325937][T10796] bridge_slave_0: entered promiscuous mode [ 223.340850][T10796] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.348219][T10796] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.358756][T10796] bridge_slave_1: entered allmulticast mode [ 223.367502][T10796] bridge_slave_1: entered promiscuous mode [ 223.431396][T10889] team0: Device gtp0 is of different type [ 223.463731][T10796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.504212][T10796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.562017][T10914] netlink: 'syz.0.2469': attribute type 4 has an invalid length. [ 223.580690][T10796] team0: Port device team_slave_0 added [ 223.590022][T10796] team0: Port device team_slave_1 added [ 223.610375][T10796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.617790][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.645454][T10796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.680078][T10796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.687234][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.714844][T10796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.933337][T10796] hsr_slave_0: entered promiscuous mode [ 223.940107][T10796] hsr_slave_1: entered promiscuous mode [ 223.946523][T10796] debugfs: 'hsr0' already exists in 'hsr' [ 223.952395][T10796] Cannot create hsr debugfs directory [ 224.194919][T10796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.217173][T10796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.240470][T10796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.262898][T10796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.517376][T10796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.540339][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 224.540360][ T29] audit: type=1400 audit(1755926201.438:4258): avc: denied { write } for pid=10949 comm="syz.1.2473" lport=44581 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.551858][T10796] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.606945][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.614288][ T8288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.689589][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.696955][ T8288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.762645][T10796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.773721][T10796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.793785][T10918] +}[@ (10918) used greatest stack depth: 7096 bytes left [ 224.850015][ T29] audit: type=1400 audit(1755926201.748:4259): avc: denied { create } for pid=10963 comm="syz.3.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.135514][ T29] audit: type=1400 audit(1755926201.848:4260): avc: denied { create } for pid=10947 comm="syz.2.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.158254][ T29] audit: type=1400 audit(1755926201.848:4261): avc: denied { bind } for pid=10947 comm="syz.2.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.180196][ T29] audit: type=1400 audit(1755926201.848:4262): avc: denied { write } for pid=10947 comm="syz.2.2474" path="socket:[28052]" dev="sockfs" ino=28052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.205101][ T29] audit: type=1400 audit(1755926201.848:4263): avc: denied { write } for pid=10947 comm="syz.2.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 225.226177][ T29] audit: type=1400 audit(1755926201.848:4264): avc: denied { nlmsg_write } for pid=10947 comm="syz.2.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 225.428731][ T29] audit: type=1400 audit(1755926202.318:4265): avc: denied { create } for pid=10975 comm="syz.1.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.449473][ T29] audit: type=1400 audit(1755926202.318:4266): avc: denied { ioctl } for pid=10975 comm="syz.1.2480" path="socket:[28066]" dev="sockfs" ino=28066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.465975][T10978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2478'. [ 225.557172][ T29] audit: type=1400 audit(1755926202.398:4267): avc: denied { bind } for pid=10975 comm="syz.1.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.593123][T10796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.736294][T10997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2484'. [ 225.833591][T10796] veth0_vlan: entered promiscuous mode [ 225.860756][T10796] veth1_vlan: entered promiscuous mode [ 225.908486][T10796] veth0_macvtap: entered promiscuous mode [ 225.933847][T10796] veth1_macvtap: entered promiscuous mode [ 225.966263][T10796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.987506][T10796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.000913][ T8288] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.021954][ T8288] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.042936][ T8288] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.053394][ T8288] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.065874][ T3383] Process accounting resumed [ 226.127200][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2498'. [ 226.187840][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'. [ 226.377531][T11055] loop5: detected capacity change from 0 to 512 [ 226.412425][T11055] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.489492][T11055] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.547127][T10796] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 227.507744][T11085] veth1_macvtap: left promiscuous mode [ 227.513695][T11085] macsec0: entered allmulticast mode [ 227.517010][T11089] loop5: detected capacity change from 0 to 1024 [ 227.541192][T11089] EXT4-fs: Ignoring removed bh option [ 227.542253][T11084] veth1_macvtap: entered promiscuous mode [ 227.552884][T11084] veth1_macvtap: entered allmulticast mode [ 227.562957][T11084] macsec0: entered promiscuous mode [ 227.583177][T11091] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2512'. [ 227.628460][T11089] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 227.684225][T11089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.715831][T11109] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 227.762956][T10796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.881373][T11108] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2516'. [ 227.939853][T11124] loop5: detected capacity change from 0 to 512 [ 227.950174][T11124] ext4: Unknown parameter 'obj_user' [ 227.957904][T11124] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2521'. [ 227.975301][T11126] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 227.975301][T11126] program syz.3.2524 not setting count and/or reply_len properly [ 228.019335][T11126] FAULT_INJECTION: forcing a failure. [ 228.019335][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 228.033272][T11126] CPU: 1 UID: 0 PID: 11126 Comm: syz.3.2524 Not tainted syzkaller #0 PREEMPT(voluntary) [ 228.033352][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.033390][T11126] Call Trace: [ 228.033399][T11126] [ 228.033410][T11126] __dump_stack+0x1d/0x30 [ 228.033461][T11126] dump_stack_lvl+0xe8/0x140 [ 228.033479][T11126] dump_stack+0x15/0x1b [ 228.033498][T11126] should_fail_ex+0x265/0x280 [ 228.033525][T11126] should_failslab+0x8c/0xb0 [ 228.033561][T11126] __kmalloc_noprof+0xa5/0x3e0 [ 228.033595][T11126] ? blk_rq_map_user_iov+0x442/0x14a0 [ 228.033622][T11126] blk_rq_map_user_iov+0x442/0x14a0 [ 228.033655][T11126] blk_rq_map_user_io+0x18f/0x260 [ 228.033738][T11126] ? alloc_pages_mpol+0x201/0x250 [ 228.033766][T11126] ? alloc_pages_noprof+0xa9/0x130 [ 228.033882][T11126] ? sg_build_indirect+0x3a5/0x450 [ 228.033914][T11126] sg_common_write+0xb06/0xc30 [ 228.034036][T11126] sg_write+0x6b5/0x750 [ 228.034080][T11126] ? __pfx_sg_write+0x10/0x10 [ 228.034121][T11126] vfs_write+0x266/0x960 [ 228.034206][T11126] ? __rcu_read_unlock+0x4f/0x70 [ 228.034227][T11126] ? __fget_files+0x184/0x1c0 [ 228.034251][T11126] ksys_write+0xda/0x1a0 [ 228.034278][T11126] __x64_sys_write+0x40/0x50 [ 228.034355][T11126] x64_sys_call+0x27fe/0x2ff0 [ 228.034377][T11126] do_syscall_64+0xd2/0x200 [ 228.034476][T11126] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 228.034505][T11126] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 228.034536][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.034561][T11126] RIP: 0033:0x7fe6a6efebe9 [ 228.034578][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.034652][T11126] RSP: 002b:00007fe6a595f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.034677][T11126] RAX: ffffffffffffffda RBX: 00007fe6a7125fa0 RCX: 00007fe6a6efebe9 [ 228.034690][T11126] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 0000000000000007 [ 228.034702][T11126] RBP: 00007fe6a595f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.034714][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.034793][T11126] R13: 00007fe6a7126038 R14: 00007fe6a7125fa0 R15: 00007fff1dbdd2b8 [ 228.034814][T11126] [ 228.509080][T11141] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2529'. [ 228.601010][T11146] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.699473][T11153] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2533'. [ 228.726136][T11153] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 228.742428][T11153] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 228.742428][T11153] program syz.0.2533 not setting count and/or reply_len properly [ 228.770918][T11157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2534'. [ 228.780676][T11157] netem: unknown loss type 12 [ 228.822510][T11162] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2537'. [ 228.852489][T11163] netlink: 3 bytes leftover after parsing attributes in process `+}[@'. [ 228.861542][T11163] 0ªX¹¦À: renamed from caif0 [ 228.871392][T11163] 0ªX¹¦À: entered allmulticast mode [ 228.876862][T11163] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 228.894502][T11165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11165 comm=syz.3.2538 [ 228.949865][T11179] loop5: detected capacity change from 0 to 1024 [ 228.963715][T11179] EXT4-fs: Ignoring removed nobh option [ 228.974504][T11179] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.989325][T11179] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.2542: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 229.015664][T11179] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2542: couldn't read orphan inode 11 (err -117) [ 229.036973][T11179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.071469][T11179] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #15: comm syz.5.2542: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 229.093580][T11179] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2542: Invalid block bitmap block 0 in block_group 0 [ 229.108142][T11179] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2542: Failed to acquire dquot type 0 [ 229.138996][T10796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.183158][T11193] loop5: detected capacity change from 0 to 512 [ 229.200663][T11193] ext4: Unknown parameter 'obj_user' [ 229.209782][T11193] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2546'. [ 229.371975][T11198] FAULT_INJECTION: forcing a failure. [ 229.371975][T11198] name failslab, interval 1, probability 0, space 0, times 0 [ 229.385642][T11198] CPU: 1 UID: 0 PID: 11198 Comm: syz.2.2548 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.385673][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.385687][T11198] Call Trace: [ 229.385697][T11198] [ 229.385709][T11198] __dump_stack+0x1d/0x30 [ 229.385736][T11198] dump_stack_lvl+0xe8/0x140 [ 229.385791][T11198] dump_stack+0x15/0x1b [ 229.385812][T11198] should_fail_ex+0x265/0x280 [ 229.385833][T11198] ? tty_alloc_file+0x31/0x70 [ 229.385856][T11198] should_failslab+0x8c/0xb0 [ 229.385899][T11198] __kmalloc_cache_noprof+0x4c/0x320 [ 229.385942][T11198] tty_alloc_file+0x31/0x70 [ 229.385967][T11198] ptmx_open+0x46/0x240 [ 229.386065][T11198] chrdev_open+0x2e8/0x3a0 [ 229.386142][T11198] do_dentry_open+0x649/0xa20 [ 229.386247][T11198] ? __pfx_chrdev_open+0x10/0x10 [ 229.386337][T11198] vfs_open+0x37/0x1e0 [ 229.386364][T11198] path_openat+0x1c5e/0x2170 [ 229.386394][T11198] do_filp_open+0x109/0x230 [ 229.386426][T11198] do_sys_openat2+0xa6/0x110 [ 229.386504][T11198] __x64_sys_openat+0xf2/0x120 [ 229.386533][T11198] x64_sys_call+0x2e9c/0x2ff0 [ 229.386556][T11198] do_syscall_64+0xd2/0x200 [ 229.386622][T11198] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 229.386649][T11198] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 229.386680][T11198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.386749][T11198] RIP: 0033:0x7f59c954ebe9 [ 229.386834][T11198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.386855][T11198] RSP: 002b:00007f59c7f6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.386896][T11198] RAX: ffffffffffffffda RBX: 00007f59c9776180 RCX: 00007f59c954ebe9 [ 229.386912][T11198] RDX: 0000000000040000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 229.386927][T11198] RBP: 00007f59c7f6d090 R08: 0000000000000000 R09: 0000000000000000 [ 229.386942][T11198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.386956][T11198] R13: 00007f59c9776218 R14: 00007f59c9776180 R15: 00007ffdfc0d89f8 [ 229.387006][T11198] [ 230.039965][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 230.039989][ T29] audit: type=1400 audit(1755926206.938:4651): avc: denied { name_bind } for pid=11212 comm="syz.5.2554" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 230.137343][T11213] 9pnet: Could not find request transport: 0xffffffffffffffff [ 230.181131][T11216] loop5: detected capacity change from 0 to 1024 [ 230.203862][T11216] EXT4-fs: Ignoring removed orlov option [ 230.209947][T11216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.250631][T11216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.278886][ T29] audit: type=1400 audit(1755926207.178:4652): avc: denied { setattr } for pid=11215 comm="syz.5.2555" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.323285][T10796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.374394][T11221] syzkaller0: entered allmulticast mode [ 230.381833][ T29] audit: type=1400 audit(1755926207.268:4653): avc: denied { setopt } for pid=11220 comm="syz.5.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.422425][T11221] syzkaller0 (unregistering): left allmulticast mode [ 230.713193][T11231] loop5: detected capacity change from 0 to 128 [ 230.741973][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'. [ 230.752945][T11233] bond0: left promiscuous mode [ 230.758184][T11233] bridge0: port 4(bond0) entered disabled state [ 230.778371][ T29] audit: type=1400 audit(1755926207.668:4654): avc: denied { mount } for pid=11230 comm="+}[@" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 230.809165][T11233] dummy0: left allmulticast mode [ 230.814393][T11233] dummy0: left promiscuous mode [ 230.819444][T11233] bridge0: port 3(dummy0) entered disabled state [ 230.852013][T11233] bridge_slave_1: left allmulticast mode [ 230.858348][T11233] bridge_slave_1: left promiscuous mode [ 230.864300][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.895773][T11233] bridge_slave_0: left allmulticast mode [ 230.901799][T11233] bridge_slave_0: left promiscuous mode [ 230.907590][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.981501][T11235] bridge_slave_1: left allmulticast mode [ 230.987277][T11235] bridge_slave_1: left promiscuous mode [ 230.993072][T11235] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.004883][T11235] bridge_slave_0: left allmulticast mode [ 231.011190][T11235] bridge_slave_0: left promiscuous mode [ 231.017112][T11235] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.621267][ T29] audit: type=1400 audit(1755926208.518:4655): avc: denied { unmount } for pid=10796 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 231.657432][ T29] audit: type=1400 audit(1755926208.548:4656): avc: denied { setopt } for pid=11248 comm="syz.5.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.672770][T11249] loop5: detected capacity change from 0 to 1024 [ 231.677671][ T29] audit: type=1400 audit(1755926208.548:4657): avc: denied { bind } for pid=11248 comm="syz.5.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.703971][T11249] EXT4-fs (loop5): filesystem is read-only [ 231.712083][ T29] audit: type=1400 audit(1755926208.548:4658): avc: denied { name_bind } for pid=11248 comm="syz.5.2565" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 231.735455][ T29] audit: type=1400 audit(1755926208.548:4659): avc: denied { node_bind } for pid=11248 comm="syz.5.2565" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 231.770995][T11249] vlan0: entered promiscuous mode [ 231.786427][T11249] team0: Port device vlan0 added [ 231.806448][ T29] audit: type=1400 audit(1755926208.658:4660): avc: denied { lock } for pid=11248 comm="syz.5.2565" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=28493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 232.096035][T11271] FAULT_INJECTION: forcing a failure. [ 232.096035][T11271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.109598][T11271] CPU: 1 UID: 0 PID: 11271 Comm: syz.5.2574 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.109634][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.109649][T11271] Call Trace: [ 232.109658][T11271] [ 232.109667][T11271] __dump_stack+0x1d/0x30 [ 232.109706][T11271] dump_stack_lvl+0xe8/0x140 [ 232.109798][T11271] dump_stack+0x15/0x1b [ 232.109815][T11271] should_fail_ex+0x265/0x280 [ 232.109914][T11271] should_fail+0xb/0x20 [ 232.109984][T11271] should_fail_usercopy+0x1a/0x20 [ 232.110011][T11271] _copy_from_user+0x1c/0xb0 [ 232.110037][T11271] ___sys_sendmsg+0xc1/0x1d0 [ 232.110079][T11271] __x64_sys_sendmsg+0xd4/0x160 [ 232.110142][T11271] x64_sys_call+0x191e/0x2ff0 [ 232.110165][T11271] do_syscall_64+0xd2/0x200 [ 232.110193][T11271] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 232.110297][T11271] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.110324][T11271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.110350][T11271] RIP: 0033:0x7fb9f7a2ebe9 [ 232.110381][T11271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.110398][T11271] RSP: 002b:00007fb9f6497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.110422][T11271] RAX: ffffffffffffffda RBX: 00007fb9f7c55fa0 RCX: 00007fb9f7a2ebe9 [ 232.110434][T11271] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 232.110446][T11271] RBP: 00007fb9f6497090 R08: 0000000000000000 R09: 0000000000000000 [ 232.110460][T11271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.110530][T11271] R13: 00007fb9f7c56038 R14: 00007fb9f7c55fa0 R15: 00007ffc392c2738 [ 232.110548][T11271] [ 232.380453][T11280] ------------[ cut here ]------------ [ 232.386522][T11280] verifier bug: REG INVARIANTS VIOLATION (alu): range bounds violation u64=[0xfffffffffffffffd, 0xfffffffffffffffc] s64=[0xfffffffffffffffd, 0xfffffffffffffffc] u32=[0xfffffffd, 0xfffffffc] s32=[0xfffffffd, 0xfffffffc] var_off=(0xfffffffffffffffc, 0x0)(1) [ 232.412003][T11280] WARNING: CPU: 0 PID: 11280 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 232.422657][T11280] Modules linked in: [ 232.427452][T11280] CPU: 0 UID: 0 PID: 11280 Comm: syz.5.2577 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.437661][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.448307][T11280] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 232.454962][T11280] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 72 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 232.475113][T11280] RSP: 0018:ffffc90004b9f550 EFLAGS: 00010296 [ 232.481621][T11280] RAX: 8049d9c82bd18300 RBX: ffff8881191fd1a8 RCX: 0000000000080000 [ 232.489706][T11280] RDX: ffffc9000f1fe000 RSI: 0000000000022d3f RDI: 0000000000022d40 [ 232.497836][T11280] RBP: fffffffffffffffc R08: 0001c90004b9f38f R09: 0000000000000000 [ 232.506206][T11280] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881191fd168 [ 232.514706][T11280] R13: ffff88811f7b8000 R14: ffff88811f7b8000 R15: ffff8881191fd1a0 [ 232.523097][T11280] FS: 00007fb9f64976c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 232.533012][T11280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.539919][T11280] CR2: 00007f0c05ee7f30 CR3: 0000000133daa000 CR4: 00000000003506f0 [ 232.548783][T11280] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.556885][T11280] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 232.565467][T11280] Call Trace: [ 232.568977][T11280] [ 232.571938][T11280] do_check+0x6ec9/0x7a10 [ 232.576405][T11280] do_check_common+0xc3a/0x12a0 [ 232.581446][T11280] bpf_check+0x942b/0xd9e0 [ 232.586024][T11280] ? __rcu_read_unlock+0x4f/0x70 [ 232.591040][T11280] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 232.597080][T11280] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 232.603066][T11280] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 232.609136][T11280] ? pcpu_block_update+0x232/0x3b0 [ 232.614554][T11280] ? pcpu_block_refresh_hint+0x157/0x170 [ 232.620560][T11280] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 232.627112][T11280] ? css_rstat_updated+0xb7/0x240 [ 232.628855][T11285] netlink: 'syz.5.2577': attribute type 4 has an invalid length. [ 232.632562][T11280] ? __rcu_read_unlock+0x4f/0x70 [ 232.646285][T11280] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 232.652487][T11280] ? should_fail_ex+0x30/0x280 [ 232.657407][T11280] ? selinux_bpf_prog_load+0x36/0xf0 [ 232.662849][T11280] ? should_failslab+0x8c/0xb0 [ 232.667869][T11280] ? __kmalloc_cache_noprof+0x189/0x320 [ 232.673577][T11280] ? selinux_bpf_prog_load+0xbf/0xf0 [ 232.678916][T11280] ? security_bpf_prog_load+0x2c/0xa0 [ 232.684524][T11280] bpf_prog_load+0xedd/0x1070 [ 232.689602][T11280] ? security_bpf+0x2b/0x90 [ 232.694356][T11280] __sys_bpf+0x462/0x7b0 [ 232.699070][T11280] __x64_sys_bpf+0x41/0x50 [ 232.703997][T11280] x64_sys_call+0x2aea/0x2ff0 [ 232.708866][T11280] do_syscall_64+0xd2/0x200 [ 232.713670][T11280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 232.720412][T11280] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.726649][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.733237][T11280] RIP: 0033:0x7fb9f7a2ebe9 [ 232.738094][T11280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.759009][T11280] RSP: 002b:00007fb9f6497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.768215][T11280] RAX: ffffffffffffffda RBX: 00007fb9f7c55fa0 RCX: 00007fb9f7a2ebe9 [ 232.776453][T11280] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 232.785720][T11280] RBP: 00007fb9f7ab1e19 R08: 0000000000000000 R09: 0000000000000000 [ 232.793831][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.802046][T11280] R13: 00007fb9f7c56038 R14: 00007fb9f7c55fa0 R15: 00007ffc392c2738 [ 232.810976][T11280] [ 232.814198][T11280] ---[ end trace 0000000000000000 ]--- [ 232.905478][T11298] loop5: detected capacity change from 0 to 1024 [ 232.919766][T11297] vhci_hcd: invalid port number 96 [ 232.923499][T11298] EXT4-fs: Ignoring removed orlov option [ 232.925048][T11297] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 232.930905][T11298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.942508][T11297] __nla_validate_parse: 3 callbacks suppressed [ 232.942527][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2582'. [ 232.986098][T11301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2587'. [ 233.050335][T11298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.091917][T10796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.131591][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2589'. [ 233.241464][T11314] loop5: detected capacity change from 0 to 1024 [ 233.261257][T11314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.297086][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2590'. [ 233.358082][T10796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.400378][T11319] loop5: detected capacity change from 0 to 512 [ 233.441736][T11319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.458776][T11319] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.479206][T11319] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2592: corrupted inode contents [ 233.494970][T11319] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2592: mark_inode_dirty error [ 233.507786][T11319] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2592: corrupted inode contents [ 233.524229][T11319] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2592: mark_inode_dirty error [ 233.547013][T11319] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2592: corrupted inode contents [ 233.564483][T11319] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2592: mark_inode_dirty error [ 233.582958][T11319] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2592: corrupted inode contents [ 233.616952][T11339] netlink: 'syz.0.2600': attribute type 298 has an invalid length. [ 233.640634][T10796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.783840][T11358] sd 0:0:1:0: device reset [ 233.801578][T11357] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 233.808250][T11357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.815842][T11357] vhci_hcd vhci_hcd.0: Device attached [ 233.841326][T11357] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 233.848185][T11357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.855745][T11357] vhci_hcd vhci_hcd.0: Device attached [ 233.880894][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 233.900541][T11357] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 233.907327][T11357] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 233.911264][T11364] team0: entered promiscuous mode [ 233.915140][T11357] vhci_hcd vhci_hcd.0: Device attached [ 233.920201][T11364] team0: entered allmulticast mode [ 233.937253][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 233.951108][T11357] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.953361][T11364] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2607'. [ 233.992356][T11371] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2608'. [ 234.001723][T11371] netem: unknown loss type 12 [ 234.006636][T11371] netem: change failed [ 234.108881][T11375] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 234.115808][T11375] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.123616][T11375] vhci_hcd vhci_hcd.0: Device attached [ 234.167808][T11383] 9pnet_fd: Insufficient options for proto=fd [ 234.206341][T11386] FAULT_INJECTION: forcing a failure. [ 234.206341][T11386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.220011][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.0.2611 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.220106][T11386] Tainted: [W]=WARN [ 234.220113][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.220128][T11386] Call Trace: [ 234.220138][T11386] [ 234.220180][T11386] __dump_stack+0x1d/0x30 [ 234.220208][T11386] dump_stack_lvl+0xe8/0x140 [ 234.220228][T11386] dump_stack+0x15/0x1b [ 234.220316][T11386] should_fail_ex+0x265/0x280 [ 234.220341][T11386] should_fail+0xb/0x20 [ 234.220357][T11386] should_fail_usercopy+0x1a/0x20 [ 234.220379][T11386] _copy_from_user+0x1c/0xb0 [ 234.220407][T11386] __ia32_sys_rt_sigreturn+0x128/0x350 [ 234.220455][T11386] x64_sys_call+0x2d3c/0x2ff0 [ 234.220544][T11386] do_syscall_64+0xd2/0x200 [ 234.220570][T11386] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.220594][T11386] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.220674][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.220776][T11386] RIP: 0033:0x7ff16179ade9 [ 234.220792][T11386] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 234.220814][T11386] RSP: 002b:00007ff160245a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 234.220839][T11386] RAX: ffffffffffffffda RBX: 00007ff161a26090 RCX: 00007ff16179ade9 [ 234.220875][T11386] RDX: 00007ff160245a80 RSI: 00007ff160245bb0 RDI: 0000000000000021 [ 234.220890][T11386] RBP: 00007ff160246090 R08: 0000200000048000 R09: 0000000000000000 [ 234.220904][T11386] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 234.220918][T11386] R13: 00007ff161a26128 R14: 00007ff161a26090 R15: 00007fff168603e8 [ 234.220939][T11386] [ 234.222869][T11372] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(19) [ 234.404697][T11372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.413355][T11372] vhci_hcd vhci_hcd.0: Device attached [ 234.450762][T11387] vhci_hcd: connection closed [ 234.451007][T11376] vhci_hcd: connection closed [ 234.451290][T11361] vhci_hcd: connection closed [ 234.460926][T11359] vhci_hcd: connection closed [ 234.461609][T11392] FAULT_INJECTION: forcing a failure. [ 234.461609][T11392] name failslab, interval 1, probability 0, space 0, times 0 [ 234.465925][T11366] vhci_hcd: connection closed [ 234.470847][T11392] CPU: 1 UID: 0 PID: 11392 Comm: syz.0.2615 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.470883][T11392] Tainted: [W]=WARN [ 234.470947][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.470999][T11392] Call Trace: [ 234.471006][T11392] [ 234.471016][T11392] __dump_stack+0x1d/0x30 [ 234.471041][T11392] dump_stack_lvl+0xe8/0x140 [ 234.471061][T11392] dump_stack+0x15/0x1b [ 234.471078][T11392] should_fail_ex+0x265/0x280 [ 234.471100][T11392] ? __tcf_chain_get+0x91/0x280 [ 234.471166][T11392] should_failslab+0x8c/0xb0 [ 234.471190][T11392] __kmalloc_cache_noprof+0x4c/0x320 [ 234.471240][T11392] __tcf_chain_get+0x91/0x280 [ 234.471333][T11392] ? __tcf_block_find+0x11a/0x1a0 [ 234.471431][T11392] tc_new_tfilter+0x5ac/0x10a0 [ 234.471452][T11392] ? __rcu_read_unlock+0x4f/0x70 [ 234.471500][T11392] ? avc_has_perm_noaudit+0x1b1/0x200 [ 234.471534][T11392] ? ns_capable+0x7d/0xb0 [ 234.471555][T11392] ? __pfx_tc_new_tfilter+0x10/0x10 [ 234.471594][T11392] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 234.471679][T11392] ? avc_has_perm_noaudit+0x1b1/0x200 [ 234.471706][T11392] netlink_rcv_skb+0x123/0x220 [ 234.471726][T11392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.471806][T11392] rtnetlink_rcv+0x1c/0x30 [ 234.471830][T11392] netlink_unicast+0x5bd/0x690 [ 234.471916][T11392] netlink_sendmsg+0x58b/0x6b0 [ 234.471939][T11392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.471962][T11392] __sock_sendmsg+0x145/0x180 [ 234.472024][T11392] ____sys_sendmsg+0x31e/0x4e0 [ 234.472114][T11392] ___sys_sendmsg+0x17b/0x1d0 [ 234.472147][T11392] __x64_sys_sendmsg+0xd4/0x160 [ 234.472172][T11392] x64_sys_call+0x191e/0x2ff0 [ 234.472209][T11392] do_syscall_64+0xd2/0x200 [ 234.472237][T11392] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.472261][T11392] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.472346][T11392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.472369][T11392] RIP: 0033:0x7ff1617febe9 [ 234.472388][T11392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.472449][T11392] RSP: 002b:00007ff160267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.472511][T11392] RAX: ffffffffffffffda RBX: 00007ff161a25fa0 RCX: 00007ff1617febe9 [ 234.472524][T11392] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000007 [ 234.472576][T11392] RBP: 00007ff160267090 R08: 0000000000000000 R09: 0000000000000000 [ 234.472589][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.472601][T11392] R13: 00007ff161a26038 R14: 00007ff161a25fa0 R15: 00007fff168603e8 [ 234.472620][T11392] [ 234.508909][ T8288] vhci_hcd: stop threads [ 234.522109][ T3360] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 234.526095][ T8288] vhci_hcd: release socket [ 234.526118][ T8288] vhci_hcd: disconnect device [ 234.558856][T11360] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 234.573242][T11396] rdma_op ffff888105780180 conn xmit_rdma 0000000000000000 [ 234.618373][T11400] loop7: detected capacity change from 0 to 7 [ 234.706413][ T8288] vhci_hcd: stop threads [ 234.806294][T11397] rdma_op ffff88810547b180 conn xmit_rdma 0000000000000000 [ 234.810168][ T8288] vhci_hcd: release socket [ 234.810189][ T8288] vhci_hcd: disconnect device [ 234.847585][ T8288] vhci_hcd: stop threads [ 234.852057][ T8288] vhci_hcd: release socket [ 234.856517][ T8288] vhci_hcd: disconnect device [ 234.879030][ T8288] vhci_hcd: stop threads [ 234.883586][ T8288] vhci_hcd: release socket [ 234.888081][ T8288] vhci_hcd: disconnect device [ 234.918740][ T8288] vhci_hcd: stop threads [ 234.923083][ T8288] vhci_hcd: release socket [ 234.927643][ T8288] vhci_hcd: disconnect device [ 234.972677][T11418] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2621'. [ 234.981970][T11418] netem: unknown loss type 12 [ 234.985918][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 234.996899][ C0] buffer_io_error: 4198 callbacks suppressed [ 234.996935][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 235.128465][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 235.128486][ T29] audit: type=1400 audit(1755926212.018:4754): avc: denied { ioctl } for pid=11395 comm="syz.3.2616" path="socket:[29805]" dev="sockfs" ino=29805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.175024][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'. [ 235.227572][T11446] FAULT_INJECTION: forcing a failure. [ 235.227572][T11446] name failslab, interval 1, probability 0, space 0, times 0 [ 235.241046][T11446] CPU: 0 UID: 0 PID: 11446 Comm: syz.1.2627 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.241152][T11446] Tainted: [W]=WARN [ 235.241202][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.241217][T11446] Call Trace: [ 235.241227][T11446] [ 235.241248][T11446] __dump_stack+0x1d/0x30 [ 235.241275][T11446] dump_stack_lvl+0xe8/0x140 [ 235.241293][T11446] dump_stack+0x15/0x1b [ 235.241357][T11446] should_fail_ex+0x265/0x280 [ 235.241378][T11446] should_failslab+0x8c/0xb0 [ 235.241476][T11446] __kmalloc_noprof+0xa5/0x3e0 [ 235.241501][T11446] ? sk_prot_alloc+0xa8/0x190 [ 235.241525][T11446] ? should_fail_ex+0xdb/0x280 [ 235.241547][T11446] sk_prot_alloc+0xa8/0x190 [ 235.241648][T11446] sk_alloc+0x34/0x360 [ 235.241671][T11446] bpf_prog_test_run_skb+0x234/0xbd0 [ 235.241696][T11446] ? __rcu_read_unlock+0x4f/0x70 [ 235.241785][T11446] ? __fget_files+0x184/0x1c0 [ 235.241809][T11446] ? __rcu_read_unlock+0x4f/0x70 [ 235.241837][T11446] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 235.241860][T11446] bpf_prog_test_run+0x227/0x390 [ 235.241919][T11446] __sys_bpf+0x4b9/0x7b0 [ 235.241952][T11446] __x64_sys_bpf+0x41/0x50 [ 235.241980][T11446] x64_sys_call+0x2aea/0x2ff0 [ 235.242002][T11446] do_syscall_64+0xd2/0x200 [ 235.242032][T11446] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 235.242132][T11446] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 235.242155][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.242179][T11446] RIP: 0033:0x7f065001ebe9 [ 235.242200][T11446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.242225][T11446] RSP: 002b:00007f064ea7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.242250][T11446] RAX: ffffffffffffffda RBX: 00007f0650245fa0 RCX: 00007f065001ebe9 [ 235.242265][T11446] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 235.242281][T11446] RBP: 00007f064ea7f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.242353][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.242367][T11446] R13: 00007f0650246038 R14: 00007f0650245fa0 R15: 00007fff82c8b358 [ 235.242390][T11446] [ 235.537338][ T29] audit: type=1400 audit(1755926212.418:4755): avc: denied { write } for pid=11458 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 235.556674][ T29] audit: type=1326 audit(1755926212.418:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065001ebe9 code=0x7ffc0000 [ 235.580313][ T29] audit: type=1326 audit(1755926212.418:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f065001ebe9 code=0x7ffc0000 [ 235.604998][ T29] audit: type=1326 audit(1755926212.418:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065001ebe9 code=0x7ffc0000 [ 235.628993][ T29] audit: type=1326 audit(1755926212.418:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f065001ebe9 code=0x7ffc0000 [ 235.652826][ T29] audit: type=1326 audit(1755926212.418:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065001ebe9 code=0x7ffc0000 [ 235.677016][ T29] audit: type=1326 audit(1755926212.418:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f065001ebe9 code=0x7ffc0000 [ 235.700911][ T29] audit: type=1326 audit(1755926212.418:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065001ebe9 code=0x7ffc0000 [ 235.724835][ T29] audit: type=1326 audit(1755926212.418:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065001ebe9 code=0x7ffc0000 [ 235.813076][T11459] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 235.832894][T11471] loop5: detected capacity change from 0 to 1024 [ 235.861277][T11471] EXT4-fs: Ignoring removed orlov option [ 235.867476][T11471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.892159][T11471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.907787][T11474] netem: unknown loss type 12 [ 235.955136][T10796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.010653][T11486] random: crng reseeded on system resumption [ 236.026561][T11486] Restarting kernel threads ... [ 236.065036][T11486] Done restarting kernel threads. [ 236.182081][T11478] lo speed is unknown, defaulting to 1000 [ 236.224992][T11502] netem: unknown loss type 12 [ 236.230252][T11502] netem: change failed [ 237.026177][T11536] netem: unknown loss type 12 [ 237.081645][ T6110] hid_parser_main: 26 callbacks suppressed [ 237.081665][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.095077][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.102733][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.110257][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.117683][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.125239][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.133194][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.140769][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.148352][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.156159][ T6110] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.233370][T11544] netem: change failed [ 237.243352][ T6110] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 237.300115][T11551] fido_id[11551]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 237.400401][T11562] netlink: 'syz.2.2654': attribute type 4 has an invalid length. [ 238.619288][T11574] lo speed is unknown, defaulting to 1000 [ 238.780274][ T8289] bond0 (unregistering): Released all slaves [ 238.850177][ T8289] tipc: Left network mode [ 238.865644][ T8289] hsr_slave_0: left promiscuous mode [ 238.889835][ T8289] hsr_slave_1: left promiscuous mode [ 238.905642][ T8289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.937433][ T8289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.993320][ T8289] pim6reg (unregistering): left allmulticast mode [ 239.077217][ T8289] team0 (unregistering): Port device team_slave_1 removed [ 239.103315][ T8289] team0 (unregistering): Port device team_slave_0 removed [ 239.191425][T11606] FAULT_INJECTION: forcing a failure. [ 239.191425][T11606] name failslab, interval 1, probability 0, space 0, times 0 [ 239.204417][T11606] CPU: 1 UID: 0 PID: 11606 Comm: syz.3.2662 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 239.204452][T11606] Tainted: [W]=WARN [ 239.204459][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.204480][T11606] Call Trace: [ 239.204491][T11606] [ 239.204525][T11606] __dump_stack+0x1d/0x30 [ 239.204604][T11606] dump_stack_lvl+0xe8/0x140 [ 239.204622][T11606] dump_stack+0x15/0x1b [ 239.204673][T11606] should_fail_ex+0x265/0x280 [ 239.204697][T11606] should_failslab+0x8c/0xb0 [ 239.204749][T11606] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 239.204840][T11606] ? proc_alloc_inode+0x34/0x90 [ 239.204965][T11606] ? __pfx_proc_alloc_inode+0x10/0x10 [ 239.205010][T11606] proc_alloc_inode+0x34/0x90 [ 239.205067][T11606] alloc_inode+0x40/0x170 [ 239.205091][T11606] new_inode+0x1d/0xe0 [ 239.205116][T11606] proc_pid_make_inode+0x1f/0xd0 [ 239.205141][T11606] proc_map_files_instantiate+0x81/0x120 [ 239.205197][T11606] proc_fill_cache+0x1c1/0x240 [ 239.205215][T11606] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 239.205245][T11606] proc_map_files_readdir+0x4fa/0x690 [ 239.205289][T11606] iterate_dir+0x111/0x330 [ 239.205331][T11606] ? mutex_lock+0xd/0x30 [ 239.205355][T11606] __se_sys_getdents+0x88/0x1b0 [ 239.205377][T11606] ? __pfx_filldir+0x10/0x10 [ 239.205402][T11606] __x64_sys_getdents+0x43/0x50 [ 239.205425][T11606] x64_sys_call+0xee7/0x2ff0 [ 239.205509][T11606] do_syscall_64+0xd2/0x200 [ 239.205620][T11606] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.205708][T11606] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 239.205737][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.205759][T11606] RIP: 0033:0x7fe6a6efebe9 [ 239.205779][T11606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.205801][T11606] RSP: 002b:00007fe6a595f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 239.205866][T11606] RAX: ffffffffffffffda RBX: 00007fe6a7125fa0 RCX: 00007fe6a6efebe9 [ 239.205882][T11606] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 239.205899][T11606] RBP: 00007fe6a595f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.205914][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.205935][T11606] R13: 00007fe6a7126038 R14: 00007fe6a7125fa0 R15: 00007fff1dbdd2b8 [ 239.205967][T11606] [ 239.506125][T11574] chnl_net:caif_netlink_parms(): no params data found [ 239.568843][ T3360] usb 3-1: enqueue for inactive port 0 [ 239.576835][T11574] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.577011][ T3360] usb 3-1: enqueue for inactive port 0 [ 239.584082][T11574] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.597283][T11574] bridge_slave_0: entered allmulticast mode [ 239.604274][T11574] bridge_slave_0: entered promiscuous mode [ 239.611394][T11574] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.618864][T11574] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.626513][T11574] bridge_slave_1: entered allmulticast mode [ 239.638164][T11574] bridge_slave_1: entered promiscuous mode [ 239.670739][T11574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.690274][ T8289] IPVS: stop unused estimator thread 0... [ 239.700294][T11574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.709667][ T3360] vhci_hcd: vhci_device speed not set [ 239.714351][T11614] __nla_validate_parse: 9 callbacks suppressed [ 239.714435][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 239.745236][T11614] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2663'. [ 239.757742][T11574] team0: Port device team_slave_0 added [ 239.774971][T11574] team0: Port device team_slave_1 added [ 239.831150][T11574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.838413][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.865078][T11574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.925397][T11574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.932859][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.960153][T11574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.082243][T11574] hsr_slave_0: entered promiscuous mode [ 240.096626][T11574] hsr_slave_1: entered promiscuous mode [ 240.106009][T11574] debugfs: 'hsr0' already exists in 'hsr' [ 240.111964][T11574] Cannot create hsr debugfs directory [ 240.173651][T11643] sd 0:0:1:0: device reset [ 240.228204][T11646] loop5: detected capacity change from 0 to 512 [ 240.269628][T11646] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.319384][T11646] __quota_error: 114 callbacks suppressed [ 240.319404][T11646] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 240.335654][T11646] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 240.418512][T10796] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 240.506737][T11574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.529932][T11574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.549603][T11574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.565433][T11664] netlink: 'syz.5.2669': attribute type 4 has an invalid length. [ 240.591614][T11574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.692200][T11574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.718231][T11574] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.742181][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.749812][ T8267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.784816][T11574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.795709][T11574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.834040][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.841206][ T8267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.006777][T11574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.238079][T11574] veth0_vlan: entered promiscuous mode [ 241.383784][T11574] veth1_vlan: entered promiscuous mode [ 241.402920][T11574] veth0_macvtap: entered promiscuous mode [ 241.415966][T11574] veth1_macvtap: entered promiscuous mode [ 241.431758][T11574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.443576][T11574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.455828][ T8289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.465727][ T8289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.487166][ T8289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.683412][ T8289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.745443][T11730] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2659'. [ 241.754814][T11730] netem: unknown loss type 12 [ 241.759672][T11730] netem: change failed [ 241.783930][T11732] loop5: detected capacity change from 0 to 1024 [ 241.810836][T11732] EXT4-fs: Ignoring removed orlov option [ 241.816611][T11732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.852774][T11732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.856665][ T29] audit: type=1326 audit(1755926218.748:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6eb3ebe9 code=0x7ffc0000 [ 241.902621][ T29] audit: type=1326 audit(1755926218.798:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6eb3ebe9 code=0x7ffc0000 [ 241.926656][ T29] audit: type=1326 audit(1755926218.798:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6eb3ebe9 code=0x7ffc0000 [ 241.950964][ T29] audit: type=1326 audit(1755926218.798:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6eb3ebe9 code=0x7ffc0000 [ 241.975187][ T29] audit: type=1326 audit(1755926218.798:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab6eb3ebe9 code=0x7ffc0000 [ 241.999472][ T29] audit: type=1326 audit(1755926218.798:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6eb3ebe9 code=0x7ffc0000 [ 242.023557][ T29] audit: type=1326 audit(1755926218.798:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6eb3ebe9 code=0x7ffc0000 [ 242.048500][ T29] audit: type=1326 audit(1755926218.798:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab6eb3ebe9 code=0x7ffc0000 [ 242.073086][ T29] audit: type=1326 audit(1755926218.798:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6eb3ebe9 code=0x7ffc0000 [ 242.099014][T10796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.124327][ T2994] ================================================================== [ 242.132835][ T2994] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 242.139814][ T2994] [ 242.142535][ T2994] read-write to 0xffff888107286c00 of 4 bytes by task 3242 on cpu 1: [ 242.150732][ T2994] __dentry_kill+0x230/0x4b0 [ 242.155461][ T2994] dput+0x5e/0xd0 [ 242.159119][ T2994] do_unlinkat+0x259/0x480 [ 242.163565][ T2994] __x64_sys_unlink+0x2e/0x40 [ 242.168281][ T2994] x64_sys_call+0x2dc0/0x2ff0 [ 242.173180][ T2994] do_syscall_64+0xd2/0x200 [ 242.178232][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.184429][ T2994] [ 242.186817][ T2994] read to 0xffff888107286c00 of 4 bytes by task 2994 on cpu 0: [ 242.194390][ T2994] lookup_fast+0xf0/0x320 [ 242.198949][ T2994] walk_component+0x3f/0x220 [ 242.203789][ T2994] path_lookupat+0xfe/0x2a0 [ 242.208439][ T2994] filename_lookup+0x147/0x340 [ 242.213323][ T2994] do_readlinkat+0x7d/0x320 [ 242.218267][ T2994] __x64_sys_readlink+0x47/0x60 [ 242.223470][ T2994] x64_sys_call+0x28da/0x2ff0 [ 242.228363][ T2994] do_syscall_64+0xd2/0x200 [ 242.233103][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.239286][ T2994] [ 242.242016][ T2994] value changed: 0x00300080 -> 0x00004080 [ 242.248015][ T2994] [ 242.250472][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 242.256683][ T2994] CPU: 0 UID: 0 PID: 2994 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.267933][ T2994] Tainted: [W]=WARN [ 242.271835][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.282478][ T2994] ================================================================== [ 242.329310][T11740] syzkaller0: entered allmulticast mode [ 242.341818][T11740] syzkaller0 (unregistering): left allmulticast mode