last executing test programs: 4m9.067029733s ago: executing program 2 (id=18): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount(0x0, 0x0, 0x0, 0x1, 0x0) fsopen(0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000540)={{}, "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"}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, 0x0}, 0x61) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000300)='\xf1\x81\xb0\xbf\xc0\x01Ef\xf9\t\x18\xd3\xd6(\x18\x1f\x13\x1axt\t\x00\x00\x00\xfa\xe6}\x90\xd6\xd43\xf5\x8f\xd9\x95gB\xdf\x9c\xee\x1cL\xef\xa9\xf4\xfa\xdd\x01\vd\x82\x11e\x00\xaa\xee\xa3\xfe\xdc\xea\xe8\x19\xc1K\xd1\xa5\xd4Z\xad\xdc\xa8\x93/k\x10\xe3\xdaTI\xced4\xafYy\x03EZK\xdc\xc4\xec\xac2\b\x00\x00\x00\x00\x00\x00\x005_1\xaa\x02\xb6\xeb4P\xafrC\bn-\xed\xcc\\Q\x0e', &(0x7f0000000700)="6f9a526b4c09fdd90d5bac6a9620f4f9c3ec22790e1c771cd8b907a9fdb304b48f29d2720e55d910aa0b8bc08babff2cd3daec1318124b5da50cd7d978916fe81a2ad52880e26050e4c8a31f4af13cdecd9dbffa83b5da7a5bc1b9ca5999b4cf2fb7173065a69e3f63fc3acb14ce038f0cff6b5fd55b95d31073214387daa9f0ea110d7b649b52457f794cd8137d5cf5b4ec94e7c5cbe5a626cc7302f1f40ad50269faf5401b13c5e52a4f9cedd541dd01738b75895f02b2d68349a10a38aac88ac4c28172d3b9a9ca9f", 0x54) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) 4m9.012358057s ago: executing program 2 (id=19): r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x2) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m8.788706225s ago: executing program 2 (id=21): r0 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000040f200000000"], 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000500)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x100, 0x10500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xef6b, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r4}, 0x18) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r1) lstat(&(0x7f0000000600)='./file1\x00', &(0x7f00000003c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)={[{0x2d, 'hugetlb'}, {0x2b, 'freezer'}]}, 0x12) 4m7.470088562s ago: executing program 2 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000006660000000000000006d0c86b805b6bfff2ac6c038e1d8bfa913d25376f70f26ffd00ea490a96199b1c43611c0358bac3f42217eac1d03e415e288ed4c7fe883f960c8a55f1416c6fef936ed8e1777d72ebcd4b6082569be2cb29d6f7b4df1102453726f28f4b9c7044f613c7fa19d430a9331c6b5dc02910e59af1ddcd09b1e1d968396bb2c946e951f8a638b470c9a9584fab991fd3ed78b1006c8483e464813d1e246a947314adfdcbbd2412b"], 0x48) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001200)={r4, 0xc}, &(0x7f0000001240)=0x8) open(0x0, 0x64842, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2d4655fb674a40df, 0xd, 0x5b, 0x5e, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x1, 0x8}}) r7 = socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 4m6.375041891s ago: executing program 2 (id=44): r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x2) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m4.808962638s ago: executing program 2 (id=62): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2.116025217s ago: executing program 0 (id=5620): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40090) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(0xffffffffffffffff, r2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) bind$can_raw(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000005d40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0xc354f66ca1e3ef5f, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000800", @ANYRES16=r11, @ANYBLOB="01002cbd7000ffdbdb2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 2.104050728s ago: executing program 0 (id=5621): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000240)={'b', ' *:* ', 'rwm\x00'}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x44f0) 1.994620067s ago: executing program 5 (id=5624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x8d, &(0x7f0000000680)=""/141}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a0302000000000000000002000000090002007379"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x4000000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000019ffffff0000000000000000180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0xfe4, &(0x7f0000001e00)=""/4068, 0x40f00, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "cc2f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000101000000010000", @ANYRES32, @ANYRESHEX=r2], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.930798412s ago: executing program 5 (id=5625): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000079bfc532a9410ead88c38a546cb97d43bd890bfae8e31623aa58edf7e5fb9512942db4698c3190c1104945b5a3b86c9c7febf550e415e431b44bdf16d9482e01422e1674ceac3aff01eaccbb70f334b29a174520a08c84c32d6d177f892a4874531b2db2be77048c45ca6642dd05a914a9eabb87d5ddc83aafd0d2db5460f2bfe7bf156fd0a81065f96301000000000000003dfc30cc55f03fb65d5efff71b3646f9695052d4aecb9aeedbfbf2b57944c90935f2fda391ec"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.733615298s ago: executing program 3 (id=5627): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4b0, 0x80) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000500)={0x20000000000001a3, &(0x7f0000000b00)}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000aca5fb0c0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1a, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000035504000100010018110000", @ANYRES32, @ANYBLOB="00000000c4bfb057b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="01000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) 1.682729673s ago: executing program 5 (id=5628): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "abb99279fd89da307583e654afb42af2dc91b30b60e83d50", "66eb64f2e8a3742962ae5b2fb03f495701288cf603c82fce6302900c99be5aab"}}}}}}, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140), &(0x7f00000003c0)=0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bind$vsock_stream(r6, &(0x7f0000000940), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 1.654793255s ago: executing program 5 (id=5629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@s}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x5d) write$ppp(r1, &(0x7f0000000480)="ac4a1769f6", 0x5) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r3, 0x80000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x2e4, 0x30, 0x4, 0xfffffffe, 0x0, {}, [{0x118, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0xfffffffe, {0x81, 0x1, 0x0, 0xd85}, {0x7}, 0x4, 0x8}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xa8, 0x2, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x5, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d66, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xffffff15, 0x1, 0x80000005, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0xe, 0x8, 0x7f, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xbd6e98a, 0x4, 0x4, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a02}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1b8, 0x1, [@m_gact={0xf8, 0x1c, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xa31, 0xffffffffffffffff}}]}, {0xbf, 0x6, "f8b49a58794d6ea075309f0775fcab19d8349986bc04110d61a9791f4576a1e04a46f665d4123b5279847c7bda35baae3ac61afd0139dcd5f469e99269c2ddf84ffe3fddc1f03b75c5da3c3b3a1e4a509401dd39ba537f2da22ec571830725fd1e8de62e1f0c0bc0157adc4a207493f0d2bb9a86b698dd9a63068c005c73e8bbb83322078c92f96dc149060711daee6d01cad705acfa08c6bf0f0f9df77c187b8c649acab82373b153446bf4cdb45fd53bd899e3f87d4463e30b5d"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x88, 0x6, "60ba186447266f61bd578d19178c242abbe983693765f643e35f4ad4e970445b392840cad0102b70d8a4c9cb5b6369d8120df5e60b06215a0ea0e57c5e4cff0faafce9682f955fca2977980949e765e8fce4d11766e882c7c5b924ba11dca6f49d0c323fcfc6f816147d00c7e9e403ab0d9046147a8442d4dbdcf1ea8294b777d1fa5d3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x24084041}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) 1.415880664s ago: executing program 5 (id=5633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) pause() r3 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1.34671557s ago: executing program 4 (id=5635): capget(0x0, 0x0) 1.3415241s ago: executing program 1 (id=5636): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.333022251s ago: executing program 4 (id=5637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) pause() r3 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1.295636324s ago: executing program 5 (id=5638): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf25170000007e3667021905445f929ea48ef60650baceeeb011aebbf5425ede15384e12eedca4160be9d40a4998a26c07f215ac5705bf0a35960040e78be19df6d40201d2301434371a0428f993cd58e12dcb3659a0adc31d512e77280f6cbddb17bc3ea2f3dd58aebd88c5a25e3fd417d840b3ff716e33c228bf4a229df2573cf0a8db9fc18645e0b434f02a38d3d0f663705a25e6c19c17a8"], 0x14}}, 0x10) 1.244975828s ago: executing program 0 (id=5639): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18009e093c933c285c8b000000000000181200000af8f86aa290a029cf40c4143d290a0c65f21ddfdc5201b3e88757edafc9de9a6a8fb515958594052fb81b2a0d6cdb5b93", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c14"], 0x24}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r7, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) socket$key(0xf, 0x3, 0x2) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@noload}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x108) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000600, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 927.261764ms ago: executing program 3 (id=5640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 901.143966ms ago: executing program 3 (id=5641): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x10, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x7, 0x8d, &(0x7f0000000680)=""/141}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "cc2f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000101000000010000", @ANYRES32, @ANYRESHEX=r3], 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) close_range(r2, 0xffffffffffffffff, 0x0) 869.166489ms ago: executing program 3 (id=5642): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40090) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(0xffffffffffffffff, r2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) bind$can_raw(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000005d40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0xc354f66ca1e3ef5f, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000800", @ANYRES16=r11, @ANYBLOB="01002cbd7000ffdbdb2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 479.831461ms ago: executing program 4 (id=5644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@s}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x5d) write$ppp(r1, &(0x7f0000000480)="ac4a1769f6", 0x5) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r3, 0x80000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x2e4, 0x30, 0x4, 0xfffffffe, 0x0, {}, [{0x118, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0xfffffffe, {0x81, 0x1, 0x0, 0xd85}, {0x7}, 0x4, 0x8}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xa8, 0x2, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x5, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d66, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xffffff15, 0x1, 0x80000005, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0xe, 0x8, 0x7f, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xbd6e98a, 0x4, 0x4, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a02}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1b8, 0x1, [@m_gact={0xf8, 0x1c, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xa31, 0xffffffffffffffff}}]}, {0xbf, 0x6, "f8b49a58794d6ea075309f0775fcab19d8349986bc04110d61a9791f4576a1e04a46f665d4123b5279847c7bda35baae3ac61afd0139dcd5f469e99269c2ddf84ffe3fddc1f03b75c5da3c3b3a1e4a509401dd39ba537f2da22ec571830725fd1e8de62e1f0c0bc0157adc4a207493f0d2bb9a86b698dd9a63068c005c73e8bbb83322078c92f96dc149060711daee6d01cad705acfa08c6bf0f0f9df77c187b8c649acab82373b153446bf4cdb45fd53bd899e3f87d4463e30b5d"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x88, 0x6, "60ba186447266f61bd578d19178c242abbe983693765f643e35f4ad4e970445b392840cad0102b70d8a4c9cb5b6369d8120df5e60b06215a0ea0e57c5e4cff0faafce9682f955fca2977980949e765e8fce4d11766e882c7c5b924ba11dca6f49d0c323fcfc6f816147d00c7e9e403ab0d9046147a8442d4dbdcf1ea8294b777d1fa5d3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x24084041}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) 422.686875ms ago: executing program 1 (id=5645): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000079bfc532a9410ead88c38a546cb97d43bd890bfae8e31623aa58edf7e5fb9512942db4698c3190c1104945b5a3b86c9c7febf550e415e431b44bdf16d9482e01422e1674ceac3aff01eaccbb70f334b29a174520a08c84c32d6d177f892a4874531b2db2be77048c45ca6642dd05a914a9eabb87d5ddc83aafd0d2db5460f2bfe7bf156fd0a81065f96301000000000000003dfc30cc55f03fb65d5efff71b3646f9695052d4aecb9aeedbfbf2b57944c90935f2fda391ec"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x2000c011) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000002000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 387.961198ms ago: executing program 0 (id=5646): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 309.687034ms ago: executing program 4 (id=5647): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r2 = open(&(0x7f0000000180)='./bus\x00', 0x14923e, 0x18) pwritev2(r2, 0x0, 0x0, 0x33000, 0x7, 0x3) 234.397381ms ago: executing program 1 (id=5648): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@s}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x5d) write$ppp(r0, &(0x7f0000000480)="ac4a1769f6", 0x5) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r2, 0x80000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x2e4, 0x30, 0x4, 0xfffffffe, 0x0, {}, [{0x118, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0xfffffffe, {0x81, 0x1, 0x0, 0xd85}, {0x7}, 0x4, 0x8}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xa8, 0x2, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x5, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d66, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xffffff15, 0x1, 0x80000005, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0xe, 0x8, 0x7f, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xbd6e98a, 0x4, 0x4, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a02}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1b8, 0x1, [@m_gact={0xf8, 0x1c, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xa31, 0xffffffffffffffff}}]}, {0xbf, 0x6, "f8b49a58794d6ea075309f0775fcab19d8349986bc04110d61a9791f4576a1e04a46f665d4123b5279847c7bda35baae3ac61afd0139dcd5f469e99269c2ddf84ffe3fddc1f03b75c5da3c3b3a1e4a509401dd39ba537f2da22ec571830725fd1e8de62e1f0c0bc0157adc4a207493f0d2bb9a86b698dd9a63068c005c73e8bbb83322078c92f96dc149060711daee6d01cad705acfa08c6bf0f0f9df77c187b8c649acab82373b153446bf4cdb45fd53bd899e3f87d4463e30b5d"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x88, 0x6, "60ba186447266f61bd578d19178c242abbe983693765f643e35f4ad4e970445b392840cad0102b70d8a4c9cb5b6369d8120df5e60b06215a0ea0e57c5e4cff0faafce9682f955fca2977980949e765e8fce4d11766e882c7c5b924ba11dca6f49d0c323fcfc6f816147d00c7e9e403ab0d9046147a8442d4dbdcf1ea8294b777d1fa5d3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x24084041}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) 234.093221ms ago: executing program 4 (id=5649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000007cc0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000780)=0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000680)={'tunl0\x00', r8, 0x700, 0x10, 0xffff, 0x9, {{0x33, 0x4, 0x1, 0x7, 0xcc, 0x65, 0x0, 0x20, 0x29, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xe, 0x3, 0x4, [{@multicast2, 0x3}]}, @lsrr={0x83, 0x2b, 0xe0, [@rand_addr=0x64010100, @remote, @remote, @multicast1, @broadcast, @remote, @empty, @broadcast, @empty, @remote]}, @noop, @generic={0x89, 0xb, "434ae7ad40d8d389a3"}, @cipso={0x86, 0x52, 0x3, [{0x0, 0xc, "90f69becca5926bb4ddc"}, {0x1, 0x8, "16f619012266"}, {0x6, 0x7, "3a150e661b"}, {0x2, 0x12, "5be1420b323d5a6cc4a28e70277ca78f"}, {0x6, 0xa, "526ef306ec370e11"}, {0x6, 0x6, "8523bd61"}, {0x5, 0xf, "3e80387eeec6a500eac25420cb"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0x75, [@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @rand_addr=0x64010102, @empty, @broadcast, @broadcast, @loopback]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x14040080) 233.865611ms ago: executing program 0 (id=5658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 145.532938ms ago: executing program 4 (id=5650): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000240)={'b', ' *:* ', 'rwm\x00'}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x44f0) 131.096439ms ago: executing program 0 (id=5651): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4b0, 0x80) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000500)={0x20000000000001a3, &(0x7f0000000b00)}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000aca5fb0c0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1a, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000035504000100010018110000", @ANYRES32, @ANYBLOB="00000000c4bfb057b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="01000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) 63.603105ms ago: executing program 1 (id=5652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 49.540806ms ago: executing program 1 (id=5653): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x10, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x7, 0x8d, &(0x7f0000000680)=""/141}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "cc2f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000101000000010000", @ANYRES32, @ANYRESHEX=r3], 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) close_range(r2, 0xffffffffffffffff, 0x0) 34.814517ms ago: executing program 1 (id=5654): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00\x00'}}}}}, 0x0) 0s ago: executing program 3 (id=5655): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES64], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x12, 0x0, &(0x7f0000001780)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0||!') kernel console output (not intermixed with test programs): 14822] RAX: ffffffffffffffda RBX: 00007f2d18fa5fa0 RCX: 00007f2d18d7ebe9 [ 237.015565][T14822] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000003 [ 237.015576][T14822] RBP: 00007f2d177e7090 R08: 000000000000005c R09: 0000000000000000 [ 237.015586][T14822] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.015597][T14822] R13: 00007f2d18fa6038 R14: 00007f2d18fa5fa0 R15: 00007ffc010b7308 [ 237.015617][T14822] [ 237.272271][T14828] loop5: detected capacity change from 0 to 764 [ 237.289798][T14828] rock: directory entry would overflow storage [ 237.296003][T14828] rock: sig=0x5245, size=8, remaining=5 [ 237.315558][T14833] siw: device registration error -23 [ 237.316735][T14832] 9pnet: Could not find request transport: fd0x0000000000000004 [ 237.445777][T14852] FAULT_INJECTION: forcing a failure. [ 237.445777][T14852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.458963][T14852] CPU: 1 UID: 0 PID: 14852 Comm: syz.5.4297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.459018][T14852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.459034][T14852] Call Trace: [ 237.459042][T14852] [ 237.459051][T14852] __dump_stack+0x1d/0x30 [ 237.459075][T14852] dump_stack_lvl+0xe8/0x140 [ 237.459101][T14852] dump_stack+0x15/0x1b [ 237.459121][T14852] should_fail_ex+0x265/0x280 [ 237.459142][T14852] should_fail+0xb/0x20 [ 237.459220][T14852] should_fail_usercopy+0x1a/0x20 [ 237.459247][T14852] _copy_from_user+0x1c/0xb0 [ 237.459281][T14852] ipv6_set_opt_hdr+0x286/0x600 [ 237.459306][T14852] do_ipv6_setsockopt+0x10b9/0x2160 [ 237.459399][T14852] ? kstrtoull+0x111/0x140 [ 237.459421][T14852] ? avc_has_perm_noaudit+0x1b1/0x200 [ 237.459527][T14852] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 237.459604][T14852] ipv6_setsockopt+0x59/0x130 [ 237.459629][T14852] udpv6_setsockopt+0x99/0xb0 [ 237.459664][T14852] sock_common_setsockopt+0x69/0x80 [ 237.459743][T14852] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 237.459771][T14852] __sys_setsockopt+0x184/0x200 [ 237.459838][T14852] __x64_sys_setsockopt+0x64/0x80 [ 237.459857][T14852] x64_sys_call+0x20ec/0x2ff0 [ 237.459876][T14852] do_syscall_64+0xd2/0x200 [ 237.459943][T14852] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 237.459966][T14852] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.459989][T14852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.460013][T14852] RIP: 0033:0x7f2d18d7ebe9 [ 237.460030][T14852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.460076][T14852] RSP: 002b:00007f2d177e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.460131][T14852] RAX: ffffffffffffffda RBX: 00007f2d18fa5fa0 RCX: 00007f2d18d7ebe9 [ 237.460146][T14852] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000004 [ 237.460161][T14852] RBP: 00007f2d177e7090 R08: 0000000000000018 R09: 0000000000000000 [ 237.460176][T14852] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 237.460191][T14852] R13: 00007f2d18fa6038 R14: 00007f2d18fa5fa0 R15: 00007ffc010b7308 [ 237.460213][T14852] [ 237.746095][T14861] loop5: detected capacity change from 0 to 764 [ 237.766401][T14861] rock: directory entry would overflow storage [ 237.772643][T14861] rock: sig=0x5245, size=8, remaining=5 [ 237.802001][T14865] 9pnet: Could not find request transport: fd0x0000000000000004 [ 237.971945][T14884] siw: device registration error -23 [ 238.060756][T14890] loop3: detected capacity change from 0 to 256 [ 238.062817][T14892] loop5: detected capacity change from 0 to 764 [ 238.088296][T14892] rock: directory entry would overflow storage [ 238.094605][T14892] rock: sig=0x5245, size=8, remaining=5 [ 238.108994][T14894] 9pnet_fd: Insufficient options for proto=fd [ 238.488126][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 238.513578][T14945] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 238.690060][T14956] netlink: 'syz.3.4337': attribute type 12 has an invalid length. [ 238.743523][T14960] loop3: detected capacity change from 0 to 1024 [ 238.773331][T14960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.796798][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.950216][T14972] FAULT_INJECTION: forcing a failure. [ 238.950216][T14972] name failslab, interval 1, probability 0, space 0, times 0 [ 238.962889][T14972] CPU: 1 UID: 0 PID: 14972 Comm: syz.1.4344 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.962917][T14972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.962941][T14972] Call Trace: [ 238.962948][T14972] [ 238.962954][T14972] __dump_stack+0x1d/0x30 [ 238.962973][T14972] dump_stack_lvl+0xe8/0x140 [ 238.963012][T14972] dump_stack+0x15/0x1b [ 238.963031][T14972] should_fail_ex+0x265/0x280 [ 238.963054][T14972] should_failslab+0x8c/0xb0 [ 238.963105][T14972] kmem_cache_alloc_node_noprof+0x57/0x320 [ 238.963130][T14972] ? __alloc_skb+0x101/0x320 [ 238.963166][T14972] __alloc_skb+0x101/0x320 [ 238.963214][T14972] ? audit_log_start+0x365/0x6c0 [ 238.963244][T14972] audit_log_start+0x380/0x6c0 [ 238.963354][T14972] audit_seccomp+0x48/0x100 [ 238.963377][T14972] ? __seccomp_filter+0x68c/0x10d0 [ 238.963395][T14972] __seccomp_filter+0x69d/0x10d0 [ 238.963415][T14972] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 238.963488][T14972] ? vfs_write+0x7e8/0x960 [ 238.963518][T14972] __secure_computing+0x82/0x150 [ 238.963541][T14972] syscall_trace_enter+0xcf/0x1e0 [ 238.963633][T14972] do_syscall_64+0xac/0x200 [ 238.963666][T14972] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 238.963694][T14972] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 238.963724][T14972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.963743][T14972] RIP: 0033:0x7feeb6f4ebe9 [ 238.963757][T14972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.963775][T14972] RSP: 002b:00007feeb59b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 238.963796][T14972] RAX: ffffffffffffffda RBX: 00007feeb7175fa0 RCX: 00007feeb6f4ebe9 [ 238.963853][T14972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 238.963871][T14972] RBP: 00007feeb59b7090 R08: 0000000000000000 R09: 0000000000000000 [ 238.963882][T14972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.963930][T14972] R13: 00007feeb7176038 R14: 00007feeb7175fa0 R15: 00007ffc44e0bb58 [ 238.963947][T14972] [ 239.266317][T14987] netlink: 'syz.4.4351': attribute type 10 has an invalid length. [ 239.274343][T14988] netlink: 'syz.4.4351': attribute type 10 has an invalid length. [ 239.285868][T14987] syz_tun: entered promiscuous mode [ 239.302441][T14987] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 239.325121][T14994] netlink: 'syz.4.4351': attribute type 10 has an invalid length. [ 239.355948][T14994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.364077][T14994] team0: Port device bond0 added [ 239.418817][T15006] netlink: 'syz.4.4357': attribute type 1 has an invalid length. [ 239.437737][T15006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.472575][T15006] bond1 (unregistering): Released all slaves [ 239.489152][T15009] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 239.507427][T15009] 0ªî{X¹¦: entered allmulticast mode [ 239.513901][T15009] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 239.539994][T15023] bridge_slave_1: left allmulticast mode [ 239.545702][T15023] bridge_slave_1: left promiscuous mode [ 239.551530][T15023] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.647051][T15043] loop5: detected capacity change from 0 to 764 [ 239.657374][T15043] rock: directory entry would overflow storage [ 239.663878][T15043] rock: sig=0x5245, size=8, remaining=5 [ 239.664059][T15046] FAULT_INJECTION: forcing a failure. [ 239.664059][T15046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.682651][T15046] CPU: 1 UID: 0 PID: 15046 Comm: syz.0.4369 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.682675][T15046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.682686][T15046] Call Trace: [ 239.682691][T15046] [ 239.682732][T15046] __dump_stack+0x1d/0x30 [ 239.682757][T15046] dump_stack_lvl+0xe8/0x140 [ 239.682826][T15046] dump_stack+0x15/0x1b [ 239.682845][T15046] should_fail_ex+0x265/0x280 [ 239.682876][T15046] should_fail+0xb/0x20 [ 239.682897][T15046] should_fail_usercopy+0x1a/0x20 [ 239.682935][T15046] strncpy_from_user+0x25/0x230 [ 239.682968][T15046] ? kmem_cache_alloc_noprof+0x186/0x310 [ 239.683022][T15046] ? getname_flags+0x80/0x3b0 [ 239.683055][T15046] getname_flags+0xae/0x3b0 [ 239.683085][T15046] do_mq_open+0xd9/0x4f0 [ 239.683108][T15046] ? __rcu_read_unlock+0x4f/0x70 [ 239.683140][T15046] ? __fget_files+0x184/0x1c0 [ 239.683165][T15046] ? should_fail_ex+0xdb/0x280 [ 239.683190][T15046] __x64_sys_mq_open+0xcb/0x100 [ 239.683217][T15046] x64_sys_call+0x8c6/0x2ff0 [ 239.683240][T15046] do_syscall_64+0xd2/0x200 [ 239.683304][T15046] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.683329][T15046] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 239.683356][T15046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.683382][T15046] RIP: 0033:0x7faea59aebe9 [ 239.683398][T15046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.683416][T15046] RSP: 002b:00007faea440f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 239.683436][T15046] RAX: ffffffffffffffda RBX: 00007faea5bd5fa0 RCX: 00007faea59aebe9 [ 239.683450][T15046] RDX: 0000000000000129 RSI: 0000000000000040 RDI: 0000200000000200 [ 239.683463][T15046] RBP: 00007faea440f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.683542][T15046] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 239.683556][T15046] R13: 00007faea5bd6038 R14: 00007faea5bd5fa0 R15: 00007fffb3412718 [ 239.683579][T15046] [ 239.700202][T15023] bridge_slave_0: left allmulticast mode [ 239.797750][T15050] hub 8-0:1.0: USB hub found [ 239.802122][T15023] bridge_slave_0: left promiscuous mode [ 239.802320][T15023] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.812597][T15050] hub 8-0:1.0: 8 ports detected [ 239.972200][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 239.972216][ T29] audit: type=1326 audit(1755855924.857:11908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15024 comm="syz.1.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 239.983301][T15041] lo speed is unknown, defaulting to 1000 [ 240.002220][ T29] audit: type=1326 audit(1755855924.857:11909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15024 comm="syz.1.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 240.097942][T15073] loop3: detected capacity change from 0 to 2048 [ 240.114389][T15073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.133339][T15073] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 240.145750][T15073] EXT4-fs (loop3): This should not happen!! Data will be lost [ 240.145750][T15073] [ 240.155420][T15073] EXT4-fs (loop3): Total free blocks count 0 [ 240.155926][ T29] audit: type=1326 audit(1755855925.017:11910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15079 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 240.161529][T15073] EXT4-fs (loop3): Free/Dirty block details [ 240.161555][T15073] EXT4-fs (loop3): free_blocks=0 [ 240.185112][ T29] audit: type=1326 audit(1755855925.017:11911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15079 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 240.191012][T15073] EXT4-fs (loop3): dirty_blocks=0 [ 240.195943][ T29] audit: type=1326 audit(1755855925.017:11912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15079 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 240.219502][T15073] EXT4-fs (loop3): Block reservation details [ 240.224548][ T29] audit: type=1326 audit(1755855925.017:11913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15079 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 240.248130][T15073] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 240.254062][ T29] audit: type=1326 audit(1755855925.017:11914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15079 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 240.307086][ T29] audit: type=1326 audit(1755855925.017:11915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15079 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 240.307115][ T29] audit: type=1326 audit(1755855925.017:11916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15079 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 240.307139][ T29] audit: type=1326 audit(1755855925.017:11917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15079 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 240.390606][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.513639][T15101] FAULT_INJECTION: forcing a failure. [ 240.513639][T15101] name failslab, interval 1, probability 0, space 0, times 0 [ 240.526383][T15101] CPU: 1 UID: 0 PID: 15101 Comm: syz.1.4391 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.526556][T15101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.526570][T15101] Call Trace: [ 240.526576][T15101] [ 240.526624][T15101] __dump_stack+0x1d/0x30 [ 240.526653][T15101] dump_stack_lvl+0xe8/0x140 [ 240.526753][T15101] dump_stack+0x15/0x1b [ 240.526770][T15101] should_fail_ex+0x265/0x280 [ 240.526792][T15101] should_failslab+0x8c/0xb0 [ 240.526819][T15101] kmem_cache_alloc_noprof+0x50/0x310 [ 240.526849][T15101] ? prepare_creds+0x37/0x4c0 [ 240.526928][T15101] prepare_creds+0x37/0x4c0 [ 240.526995][T15101] io_submit_one+0x8e5/0x11d0 [ 240.527032][T15101] __se_sys_io_submit+0xfb/0x280 [ 240.527062][T15101] __x64_sys_io_submit+0x43/0x50 [ 240.527087][T15101] x64_sys_call+0x2d5d/0x2ff0 [ 240.527144][T15101] do_syscall_64+0xd2/0x200 [ 240.527182][T15101] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 240.527205][T15101] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 240.527268][T15101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.527288][T15101] RIP: 0033:0x7feeb6f4ebe9 [ 240.527303][T15101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.527321][T15101] RSP: 002b:00007feeb59b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 240.527338][T15101] RAX: ffffffffffffffda RBX: 00007feeb7175fa0 RCX: 00007feeb6f4ebe9 [ 240.527396][T15101] RDX: 0000200000000200 RSI: 0000000000000002 RDI: 00007feeb714d000 [ 240.527409][T15101] RBP: 00007feeb59b7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.527488][T15101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.527499][T15101] R13: 00007feeb7176038 R14: 00007feeb7175fa0 R15: 00007ffc44e0bb58 [ 240.527517][T15101] [ 240.747907][T15106] netlink: 'syz.4.4394': attribute type 1 has an invalid length. [ 240.757333][T15110] __nla_validate_parse: 26 callbacks suppressed [ 240.757361][T15110] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4395'. [ 240.772714][T15110] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4395'. [ 240.779061][T15106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.799050][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4394'. [ 240.813701][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4397'. [ 240.823962][T15106] bond1 (unregistering): Released all slaves [ 240.880452][T15122] loop4: detected capacity change from 0 to 128 [ 240.887079][T15122] EXT4-fs: Ignoring removed nobh option [ 240.896843][T15122] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.913027][T15122] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.139572][T11903] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.171269][T15145] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4409'. [ 241.180363][T15145] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4409'. [ 241.190080][T15146] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4409'. [ 241.199087][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4409'. [ 241.273302][T15156] netlink: 'syz.5.4413': attribute type 1 has an invalid length. [ 241.292197][T15156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.312495][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4413'. [ 241.336433][T15156] bond1 (unregistering): Released all slaves [ 241.399335][T15168] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 241.472977][T15178] loop4: detected capacity change from 0 to 128 [ 241.479724][T15178] EXT4-fs: Ignoring removed nobh option [ 241.487005][T15178] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.505345][T15178] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.554530][T15174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4419'. [ 241.682260][T11903] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.703109][T15198] sd 0:0:1:0: device reset [ 241.739273][T15201] loop4: detected capacity change from 0 to 764 [ 241.747057][T15201] rock: directory entry would overflow storage [ 241.753408][T15201] rock: sig=0x5245, size=8, remaining=5 [ 242.379225][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 242.561592][T15251] netlink: 'syz.0.4451': attribute type 1 has an invalid length. [ 242.575148][T15251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.589142][T15251] bond1 (unregistering): Released all slaves [ 242.654487][T15258] FAULT_INJECTION: forcing a failure. [ 242.654487][T15258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.667600][T15258] CPU: 1 UID: 0 PID: 15258 Comm: syz.0.4454 Not tainted syzkaller #0 PREEMPT(voluntary) [ 242.667681][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.667694][T15258] Call Trace: [ 242.667701][T15258] [ 242.667709][T15258] __dump_stack+0x1d/0x30 [ 242.667733][T15258] dump_stack_lvl+0xe8/0x140 [ 242.667826][T15258] dump_stack+0x15/0x1b [ 242.667845][T15258] should_fail_ex+0x265/0x280 [ 242.667869][T15258] should_fail+0xb/0x20 [ 242.667964][T15258] should_fail_usercopy+0x1a/0x20 [ 242.667984][T15258] _copy_to_user+0x20/0xa0 [ 242.668009][T15258] simple_read_from_buffer+0xb5/0x130 [ 242.668031][T15258] proc_fail_nth_read+0x10e/0x150 [ 242.668114][T15258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.668142][T15258] vfs_read+0x1a8/0x770 [ 242.668160][T15258] ? __rcu_read_unlock+0x4f/0x70 [ 242.668180][T15258] ? __fget_files+0x184/0x1c0 [ 242.668285][T15258] ksys_read+0xda/0x1a0 [ 242.668308][T15258] __x64_sys_read+0x40/0x50 [ 242.668331][T15258] x64_sys_call+0x27bc/0x2ff0 [ 242.668386][T15258] do_syscall_64+0xd2/0x200 [ 242.668468][T15258] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 242.668555][T15258] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 242.668581][T15258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.668636][T15258] RIP: 0033:0x7faea59ad5fc [ 242.668734][T15258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 242.668753][T15258] RSP: 002b:00007faea440f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.668774][T15258] RAX: ffffffffffffffda RBX: 00007faea5bd5fa0 RCX: 00007faea59ad5fc [ 242.668789][T15258] RDX: 000000000000000f RSI: 00007faea440f0a0 RDI: 0000000000000004 [ 242.668799][T15258] RBP: 00007faea440f090 R08: 0000000000000000 R09: 0000000000000000 [ 242.668809][T15258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.668880][T15258] R13: 00007faea5bd6038 R14: 00007faea5bd5fa0 R15: 00007fffb3412718 [ 242.668896][T15258] [ 242.885807][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 242.907891][T15266] netlink: 'syz.0.4458': attribute type 1 has an invalid length. [ 242.915782][T15266] netlink: 'syz.0.4458': attribute type 2 has an invalid length. [ 243.340425][T15281] netem: incorrect ge model size [ 243.345430][T15281] netem: change failed [ 243.913141][T15293] sch_fq: defrate 0 ignored. [ 243.920165][T15296] FAULT_INJECTION: forcing a failure. [ 243.920165][T15296] name failslab, interval 1, probability 0, space 0, times 0 [ 243.932840][T15296] CPU: 0 UID: 0 PID: 15296 Comm: syz.3.4467 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.932866][T15296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.932877][T15296] Call Trace: [ 243.932883][T15296] [ 243.932890][T15296] __dump_stack+0x1d/0x30 [ 243.932914][T15296] dump_stack_lvl+0xe8/0x140 [ 243.932958][T15296] dump_stack+0x15/0x1b [ 243.932977][T15296] should_fail_ex+0x265/0x280 [ 243.932997][T15296] should_failslab+0x8c/0xb0 [ 243.933021][T15296] kmem_cache_alloc_node_noprof+0x57/0x320 [ 243.933098][T15296] ? __alloc_skb+0x101/0x320 [ 243.933152][T15296] __alloc_skb+0x101/0x320 [ 243.933186][T15296] netlink_alloc_large_skb+0xba/0xf0 [ 243.933304][T15296] netlink_sendmsg+0x3cf/0x6b0 [ 243.933352][T15296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.933378][T15296] __sock_sendmsg+0x145/0x180 [ 243.933422][T15296] ____sys_sendmsg+0x31e/0x4e0 [ 243.933451][T15296] ___sys_sendmsg+0x17b/0x1d0 [ 243.933501][T15296] __x64_sys_sendmsg+0xd4/0x160 [ 243.933530][T15296] x64_sys_call+0x191e/0x2ff0 [ 243.933555][T15296] do_syscall_64+0xd2/0x200 [ 243.933638][T15296] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.933659][T15296] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 243.933684][T15296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.933708][T15296] RIP: 0033:0x7fd28e0aebe9 [ 243.933725][T15296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.933806][T15296] RSP: 002b:00007fd28cb0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.933825][T15296] RAX: ffffffffffffffda RBX: 00007fd28e2d5fa0 RCX: 00007fd28e0aebe9 [ 243.933889][T15296] RDX: 0000000000000000 RSI: 0000200000005a80 RDI: 0000000000000003 [ 243.933903][T15296] RBP: 00007fd28cb0f090 R08: 0000000000000000 R09: 0000000000000000 [ 243.933917][T15296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.933931][T15296] R13: 00007fd28e2d6038 R14: 00007fd28e2d5fa0 R15: 00007ffd84787538 [ 243.934023][T15296] [ 244.367404][T15327] loop4: detected capacity change from 0 to 764 [ 244.375182][T15327] rock: directory entry would overflow storage [ 244.381492][T15327] rock: sig=0x5245, size=8, remaining=5 [ 245.056020][T15334] netlink: 'syz.0.4481': attribute type 1 has an invalid length. [ 245.088342][T15334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.127617][T15334] bond1 (unregistering): Released all slaves [ 245.262326][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 245.262421][ T29] audit: type=1107 audit(1755855930.146:12122): pid=15353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 245.315149][T15358] loop5: detected capacity change from 0 to 764 [ 245.322770][T15358] rock: directory entry would overflow storage [ 245.328956][T15358] rock: sig=0x5245, size=8, remaining=5 [ 245.363600][ T29] audit: type=1326 audit(1755855930.246:12123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.0.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 245.387254][ T29] audit: type=1326 audit(1755855930.246:12124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.0.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 245.467382][ T29] audit: type=1326 audit(1755855930.296:12125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.0.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 245.491089][ T29] audit: type=1326 audit(1755855930.296:12126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.0.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 245.514699][ T29] audit: type=1326 audit(1755855930.296:12127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.0.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 245.523715][T15369] FAULT_INJECTION: forcing a failure. [ 245.523715][T15369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.538525][ T29] audit: type=1326 audit(1755855930.296:12128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.0.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 245.551534][T15369] CPU: 0 UID: 0 PID: 15369 Comm: syz.4.4497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.551604][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.551621][T15369] Call Trace: [ 245.551633][T15369] [ 245.551644][T15369] __dump_stack+0x1d/0x30 [ 245.551735][T15369] dump_stack_lvl+0xe8/0x140 [ 245.551774][T15369] dump_stack+0x15/0x1b [ 245.551796][T15369] should_fail_ex+0x265/0x280 [ 245.551840][T15369] should_fail+0xb/0x20 [ 245.551865][T15369] should_fail_usercopy+0x1a/0x20 [ 245.551915][T15369] _copy_from_iter+0xcf/0xe40 [ 245.551967][T15369] ? __build_skb_around+0x1a0/0x200 [ 245.552038][T15369] ? __alloc_skb+0x223/0x320 [ 245.552084][T15369] netlink_sendmsg+0x471/0x6b0 [ 245.552117][T15369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.552147][T15369] __sock_sendmsg+0x145/0x180 [ 245.552196][T15369] ____sys_sendmsg+0x31e/0x4e0 [ 245.552261][T15369] ___sys_sendmsg+0x17b/0x1d0 [ 245.552312][T15369] __x64_sys_sendmsg+0xd4/0x160 [ 245.552347][T15369] x64_sys_call+0x191e/0x2ff0 [ 245.552412][T15369] do_syscall_64+0xd2/0x200 [ 245.552478][T15369] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 245.552510][T15369] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 245.552543][T15369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.552569][T15369] RIP: 0033:0x7f6b6755ebe9 [ 245.552590][T15369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.552613][T15369] RSP: 002b:00007f6b65fbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.552688][T15369] RAX: ffffffffffffffda RBX: 00007f6b67785fa0 RCX: 00007f6b6755ebe9 [ 245.552777][T15369] RDX: 000000002000c800 RSI: 0000200000000380 RDI: 0000000000000006 [ 245.552793][T15369] RBP: 00007f6b65fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 245.552819][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.552834][T15369] R13: 00007f6b67786038 R14: 00007f6b67785fa0 R15: 00007ffd74b159f8 [ 245.552855][T15369] [ 245.774580][ T29] audit: type=1326 audit(1755855930.296:12129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.0.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 245.798223][ T29] audit: type=1326 audit(1755855930.296:12130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.0.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 245.821831][ T29] audit: type=1326 audit(1755855930.296:12131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.0.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 245.850098][T15367] __nla_validate_parse: 13 callbacks suppressed [ 245.850116][T15367] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4495'. [ 245.914670][T15391] loop4: detected capacity change from 0 to 764 [ 245.925585][T15391] rock: directory entry would overflow storage [ 245.931818][T15391] rock: sig=0x5245, size=8, remaining=5 [ 245.970960][T15399] netlink: 'syz.4.4510': attribute type 1 has an invalid length. [ 245.979243][T15401] loop3: detected capacity change from 0 to 2048 [ 245.984320][T15404] netlink: 'syz.5.4512': attribute type 1 has an invalid length. [ 245.999192][T15399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.007765][T15401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.027637][T15404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.032380][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4510'. [ 246.046238][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4512'. [ 246.060288][T15404] bond1 (unregistering): Released all slaves [ 246.087488][T15399] bond1 (unregistering): Released all slaves [ 246.117846][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.138798][T15412] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4515'. [ 246.267775][T15432] loop4: detected capacity change from 0 to 764 [ 246.278950][T15432] rock: directory entry would overflow storage [ 246.285246][T15432] rock: sig=0x5245, size=8, remaining=5 [ 246.359539][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 246.372307][T15447] bond_slave_0: entered promiscuous mode [ 246.377972][T15447] bond_slave_1: entered promiscuous mode [ 246.384139][T15447] macsec1: entered allmulticast mode [ 246.389429][T15447] bond0: entered allmulticast mode [ 246.394778][T15447] bond_slave_0: entered allmulticast mode [ 246.400796][T15447] bond_slave_1: entered allmulticast mode [ 246.420831][T15447] bond0: left allmulticast mode [ 246.425742][T15447] bond_slave_0: left allmulticast mode [ 246.431264][T15447] bond_slave_1: left allmulticast mode [ 246.436922][T15447] bond_slave_0: left promiscuous mode [ 246.442325][T15447] bond_slave_1: left promiscuous mode [ 246.627022][T15471] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4538'. [ 247.212819][T15494] 9pnet_fd: Insufficient options for proto=fd [ 247.240183][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4546'. [ 247.445051][T15510] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4553'. [ 247.682839][T15540] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4566'. [ 247.739888][T15554] 9pnet_fd: Insufficient options for proto=fd [ 247.837933][T15570] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4582'. [ 247.909096][T15580] 9pnet_fd: Insufficient options for proto=fd [ 248.004150][T15592] team0 (unregistering): Port device team_slave_0 removed [ 248.022248][T15592] team0 (unregistering): Port device team_slave_1 removed [ 248.039735][T15592] team0 (unregistering): Port device bond0 removed [ 248.349191][T15626] netlink: 'syz.1.4608': attribute type 1 has an invalid length. [ 248.366680][T15626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.383359][T15626] bond1 (unregistering): Released all slaves [ 248.560670][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 248.686947][T15669] loop4: detected capacity change from 0 to 764 [ 248.705780][T15669] rock: directory entry would overflow storage [ 248.712075][T15669] rock: sig=0x5245, size=8, remaining=5 [ 249.166809][T15712] loop5: detected capacity change from 0 to 2048 [ 249.183285][T15712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.215405][T12066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.238347][T15718] 9pnet_fd: Insufficient options for proto=fd [ 249.263184][T15720] loop5: detected capacity change from 0 to 128 [ 249.269969][T15720] EXT4-fs: Ignoring removed nobh option [ 249.277863][T15720] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.290409][T15720] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.465578][T12066] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.493917][T15728] loop5: detected capacity change from 0 to 2048 [ 249.523940][T15728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.562932][T12066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.605741][T15736] loop4: detected capacity change from 0 to 1024 [ 249.634230][T15736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.651086][T15736] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.693015][T11903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.702859][T15745] 9pnet_fd: Insufficient options for proto=fd [ 249.761003][T15749] netlink: 'syz.0.4661': attribute type 1 has an invalid length. [ 249.765764][T15751] loop4: detected capacity change from 0 to 764 [ 249.787547][T15751] rock: directory entry would overflow storage [ 249.793914][T15751] rock: sig=0x5245, size=8, remaining=5 [ 249.798612][T15749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.828813][T15749] bond1 (unregistering): Released all slaves [ 249.999070][T15770] FAULT_INJECTION: forcing a failure. [ 249.999070][T15770] name failslab, interval 1, probability 0, space 0, times 0 [ 250.011840][T15770] CPU: 0 UID: 0 PID: 15770 Comm: syz.4.4668 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.011962][T15770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.011977][T15770] Call Trace: [ 250.011985][T15770] [ 250.011994][T15770] __dump_stack+0x1d/0x30 [ 250.012013][T15770] dump_stack_lvl+0xe8/0x140 [ 250.012057][T15770] dump_stack+0x15/0x1b [ 250.012075][T15770] should_fail_ex+0x265/0x280 [ 250.012151][T15770] should_failslab+0x8c/0xb0 [ 250.012177][T15770] __kmalloc_noprof+0xa5/0x3e0 [ 250.012208][T15770] ? sk_prot_alloc+0xa8/0x190 [ 250.012250][T15770] ? should_fail_ex+0xdb/0x280 [ 250.012267][T15770] sk_prot_alloc+0xa8/0x190 [ 250.012285][T15770] sk_alloc+0x34/0x360 [ 250.012341][T15770] bpf_prog_test_run_skb+0x234/0xbd0 [ 250.012447][T15770] ? __rcu_read_unlock+0x4f/0x70 [ 250.012568][T15770] ? __fget_files+0x184/0x1c0 [ 250.012651][T15770] ? __rcu_read_unlock+0x4f/0x70 [ 250.012678][T15770] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 250.012707][T15770] bpf_prog_test_run+0x227/0x390 [ 250.012782][T15770] __sys_bpf+0x4b9/0x7b0 [ 250.012819][T15770] __x64_sys_bpf+0x41/0x50 [ 250.012920][T15770] x64_sys_call+0x2aea/0x2ff0 [ 250.012945][T15770] do_syscall_64+0xd2/0x200 [ 250.013047][T15770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 250.013075][T15770] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 250.013161][T15770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.013190][T15770] RIP: 0033:0x7f6b6755ebe9 [ 250.013209][T15770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.013234][T15770] RSP: 002b:00007f6b65fbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.013256][T15770] RAX: ffffffffffffffda RBX: 00007f6b67785fa0 RCX: 00007f6b6755ebe9 [ 250.013269][T15770] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 250.013280][T15770] RBP: 00007f6b65fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 250.013293][T15770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.013322][T15770] R13: 00007f6b67786038 R14: 00007f6b67785fa0 R15: 00007ffd74b159f8 [ 250.013340][T15770] [ 250.367892][T15781] 9pnet_fd: Insufficient options for proto=fd [ 250.407667][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 250.407683][ T29] audit: type=1107 audit(1755855935.286:12362): pid=15789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 250.437066][T15792] loop4: detected capacity change from 0 to 764 [ 250.450142][T15792] rock: directory entry would overflow storage [ 250.456446][T15792] rock: sig=0x5245, size=8, remaining=5 [ 250.462215][T15795] loop5: detected capacity change from 0 to 2048 [ 250.486168][T15795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.537172][T12066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.596716][ T29] audit: type=1107 audit(1755855935.476:12363): pid=15814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 250.659330][ T29] audit: type=1107 audit(1755855935.536:12364): pid=15823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 250.683505][T15826] loop4: detected capacity change from 0 to 2048 [ 250.703367][T15826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.724020][T15829] loop3: detected capacity change from 0 to 764 [ 250.742162][T15829] rock: directory entry would overflow storage [ 250.748378][T15829] rock: sig=0x5245, size=8, remaining=5 [ 250.762278][T11903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.803522][ T29] audit: type=1326 audit(1755855935.676:12365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15838 comm="syz.3.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 250.858302][ T29] audit: type=1326 audit(1755855935.676:12366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15838 comm="syz.3.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 250.881921][ T29] audit: type=1326 audit(1755855935.706:12367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15838 comm="syz.3.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 250.905559][ T29] audit: type=1326 audit(1755855935.706:12368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15838 comm="syz.3.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 250.929181][ T29] audit: type=1326 audit(1755855935.706:12369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15838 comm="syz.3.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 250.952846][ T29] audit: type=1326 audit(1755855935.706:12370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15838 comm="syz.3.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 250.976498][ T29] audit: type=1326 audit(1755855935.706:12371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15838 comm="syz.3.4696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 251.034428][T15853] netlink: 'syz.0.4702': attribute type 1 has an invalid length. [ 251.034551][T15851] __nla_validate_parse: 40 callbacks suppressed [ 251.034569][T15851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4701'. [ 251.064153][T15853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.075815][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4703'. [ 251.091312][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4702'. [ 251.117836][T15853] bond1 (unregistering): Released all slaves [ 251.128227][T15864] netlink: 'syz.5.4706': attribute type 1 has an invalid length. [ 251.141267][T15864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.156822][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4706'. [ 251.176894][T15864] bond1 (unregistering): Released all slaves [ 251.190094][T15869] FAULT_INJECTION: forcing a failure. [ 251.190094][T15869] name failslab, interval 1, probability 0, space 0, times 0 [ 251.202953][T15869] CPU: 0 UID: 0 PID: 15869 Comm: syz.1.4708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 251.203008][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.203022][T15869] Call Trace: [ 251.203029][T15869] [ 251.203037][T15869] __dump_stack+0x1d/0x30 [ 251.203192][T15869] dump_stack_lvl+0xe8/0x140 [ 251.203214][T15869] dump_stack+0x15/0x1b [ 251.203232][T15869] should_fail_ex+0x265/0x280 [ 251.203254][T15869] ? __se_sys_memfd_create+0x1cc/0x590 [ 251.203277][T15869] should_failslab+0x8c/0xb0 [ 251.203386][T15869] __kmalloc_cache_noprof+0x4c/0x320 [ 251.203420][T15869] ? fput+0x8f/0xc0 [ 251.203453][T15869] __se_sys_memfd_create+0x1cc/0x590 [ 251.203477][T15869] __x64_sys_memfd_create+0x31/0x40 [ 251.203548][T15869] x64_sys_call+0x2abe/0x2ff0 [ 251.203572][T15869] do_syscall_64+0xd2/0x200 [ 251.203602][T15869] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 251.203653][T15869] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 251.203681][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.203705][T15869] RIP: 0033:0x7feeb6f4ebe9 [ 251.203750][T15869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.203770][T15869] RSP: 002b:00007feeb59b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 251.203791][T15869] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007feeb6f4ebe9 [ 251.203841][T15869] RDX: 00007feeb59b6ef0 RSI: 0000000000000000 RDI: 00007feeb6fd27e8 [ 251.203855][T15869] RBP: 0000200000000600 R08: 00007feeb59b6bb7 R09: 00007feeb59b6e40 [ 251.203869][T15869] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 251.203908][T15869] R13: 00007feeb59b6ef0 R14: 00007feeb59b6eb0 R15: 00002000000002c0 [ 251.203930][T15869] [ 251.210031][T15872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4704'. [ 251.395874][T15872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4704'. [ 251.404866][T15872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4704'. [ 251.414833][T15872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4704'. [ 251.525236][T15878] netlink: 'syz.1.4711': attribute type 1 has an invalid length. [ 251.539058][T15878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.549393][T15885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4714'. [ 251.584172][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4716'. [ 251.649998][T15901] loop5: detected capacity change from 0 to 2048 [ 251.664585][T15901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.693133][T12066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.772995][T15916] netlink: 'syz.0.4728': attribute type 21 has an invalid length. [ 251.780861][T15916] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.953582][T15942] loop5: detected capacity change from 0 to 764 [ 251.973695][T15942] rock: directory entry would overflow storage [ 251.980030][T15942] rock: sig=0x5245, size=8, remaining=5 [ 252.055755][T15960] loop3: detected capacity change from 0 to 128 [ 252.065777][T15960] EXT4-fs: Ignoring removed nobh option [ 252.078332][T15960] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.092477][T15960] ext4 filesystem being mounted at /397/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.150174][T15969] netlink: 'syz.1.4752': attribute type 1 has an invalid length. [ 252.183509][T15969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.206131][T15969] bond2 (unregistering): Released all slaves [ 252.280283][T10788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.428499][T15999] loop4: detected capacity change from 0 to 128 [ 252.435340][T15999] EXT4-fs: Ignoring removed nobh option [ 252.448473][T15999] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.464219][T15999] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.643205][T11903] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.662406][T16017] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 252.662406][T16017] program syz.4.4771 not setting count and/or reply_len properly [ 252.680705][T16019] loop3: detected capacity change from 0 to 764 [ 252.688347][T16019] rock: directory entry would overflow storage [ 252.694633][T16019] rock: sig=0x5245, size=8, remaining=5 [ 252.724240][T16021] 9pnet: Could not find request transport: fd0x0000000000000006 [ 252.881140][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 252.925867][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 253.371724][T16059] block device autoloading is deprecated and will be removed. [ 253.444279][T16071] loop5: detected capacity change from 0 to 128 [ 253.446050][T16069] loop0: detected capacity change from 0 to 2048 [ 253.450935][T16071] EXT4-fs: Ignoring removed nobh option [ 253.464581][T16071] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.478180][T16069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.478275][T16071] ext4 filesystem being mounted at /297/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.520448][T10586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.653518][T16089] netlink: 'syz.0.4799': attribute type 1 has an invalid length. [ 253.687615][T12066] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.726163][T16098] loop4: detected capacity change from 0 to 764 [ 253.752217][T16098] rock: directory entry would overflow storage [ 253.758428][T16098] rock: sig=0x5245, size=8, remaining=5 [ 253.840392][T16113] loop0: detected capacity change from 0 to 2048 [ 253.854401][T16113] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.105507][T16120] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 254.105507][T16120] program syz.1.4810 not setting count and/or reply_len properly [ 254.241883][T16113] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4809: bg 0: block 120: padding at end of block bitmap is not set [ 254.259224][T16128] loop5: detected capacity change from 0 to 128 [ 254.265786][T16128] EXT4-fs: Ignoring removed nobh option [ 254.275338][T16128] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.288458][T16128] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.303129][T10586] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 254.331973][T16131] netlink: 'syz.0.4813': attribute type 1 has an invalid length. [ 254.383109][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 254.492218][T12066] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.571035][T16156] netlink: 'syz.5.4825': attribute type 1 has an invalid length. [ 254.794400][T16184] netlink: 'syz.5.4838': attribute type 1 has an invalid length. [ 254.829504][T16184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.045451][T16203] macvlan2: entered promiscuous mode [ 255.053014][T16203] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 255.074733][T16203] vlan2: entered allmulticast mode [ 255.079892][T16203] veth0_to_bond: entered allmulticast mode [ 255.217637][T16216] random: crng reseeded on system resumption [ 255.230619][T16226] loop3: detected capacity change from 0 to 512 [ 255.247977][T16226] EXT4-fs: Ignoring removed oldalloc option [ 255.266062][T16207] lo speed is unknown, defaulting to 1000 [ 255.283234][T16226] EXT4-fs (loop3): 1 truncate cleaned up [ 255.296845][T16226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.319386][T16226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.412980][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 255.412997][ T29] audit: type=1326 audit(1755855940.295:12548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 255.460142][ T29] audit: type=1326 audit(1755855940.295:12549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 255.483852][ T29] audit: type=1326 audit(1755855940.325:12550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 255.507531][ T29] audit: type=1326 audit(1755855940.325:12551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 255.531304][ T29] audit: type=1326 audit(1755855940.325:12552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 255.554972][ T29] audit: type=1326 audit(1755855940.325:12553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 255.578713][ T29] audit: type=1326 audit(1755855940.325:12554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 255.602450][ T29] audit: type=1326 audit(1755855940.325:12555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 255.626138][ T29] audit: type=1326 audit(1755855940.325:12556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb6f4ebe9 code=0x7ffc0000 [ 255.900626][ T29] audit: type=1400 audit(1755855940.775:12557): avc: denied { wake_alarm } for pid=16254 comm="syz.5.4865" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.004594][T16270] loop4: detected capacity change from 0 to 128 [ 256.011254][T16270] EXT4-fs: Ignoring removed nobh option [ 256.055929][T16270] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.074487][T16277] loop0: detected capacity change from 0 to 2048 [ 256.074749][T16280] __nla_validate_parse: 48 callbacks suppressed [ 256.074766][T16280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4877'. [ 256.096585][T16270] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.109859][T16277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.110302][T16286] FAULT_INJECTION: forcing a failure. [ 256.110302][T16286] name failslab, interval 1, probability 0, space 0, times 0 [ 256.134636][T16286] CPU: 1 UID: 0 PID: 16286 Comm: syz.5.4876 Not tainted syzkaller #0 PREEMPT(voluntary) [ 256.134685][T16286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.134700][T16286] Call Trace: [ 256.134709][T16286] [ 256.134718][T16286] __dump_stack+0x1d/0x30 [ 256.134742][T16286] dump_stack_lvl+0xe8/0x140 [ 256.134766][T16286] dump_stack+0x15/0x1b [ 256.134787][T16286] should_fail_ex+0x265/0x280 [ 256.134850][T16286] should_failslab+0x8c/0xb0 [ 256.134881][T16286] __kvmalloc_node_noprof+0x123/0x4e0 [ 256.134930][T16286] ? __se_sys_add_key+0x1e9/0x350 [ 256.134956][T16286] ? memdup_user+0x99/0xd0 [ 256.135119][T16286] __se_sys_add_key+0x1e9/0x350 [ 256.135223][T16286] __x64_sys_add_key+0x67/0x80 [ 256.135250][T16286] x64_sys_call+0x28c4/0x2ff0 [ 256.135277][T16286] do_syscall_64+0xd2/0x200 [ 256.135310][T16286] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 256.135372][T16286] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 256.135407][T16286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.135445][T16286] RIP: 0033:0x7f2d18d7ebe9 [ 256.135462][T16286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.135484][T16286] RSP: 002b:00007f2d177e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 256.135509][T16286] RAX: ffffffffffffffda RBX: 00007f2d18fa5fa0 RCX: 00007f2d18d7ebe9 [ 256.135524][T16286] RDX: 0000200000000240 RSI: 0000200000000140 RDI: 0000200000000080 [ 256.135539][T16286] RBP: 00007f2d177e7090 R08: 0000000033bcbf94 R09: 0000000000000000 [ 256.135554][T16286] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 256.135569][T16286] R13: 00007f2d18fa6038 R14: 00007f2d18fa5fa0 R15: 00007ffc010b7308 [ 256.135592][T16286] [ 256.319442][T10586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.335115][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4880'. [ 256.448410][T16303] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 256.448410][T16303] program syz.0.4885 not setting count and/or reply_len properly [ 256.526302][T16309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4888'. [ 256.652800][T16317] loop3: detected capacity change from 0 to 2048 [ 256.681647][T16317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.717803][T11903] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.728002][T16321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4892'. [ 256.754408][T16323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4891'. [ 256.775704][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.832114][T16328] netlink: 'syz.5.4894': attribute type 32 has an invalid length. [ 256.908246][T16338] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4899'. [ 257.003014][T16352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4906'. [ 257.016613][T16356] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4908'. [ 257.028587][T16358] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4909'. [ 257.067240][T16365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4913'. [ 257.099044][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 257.357762][T16403] loop4: detected capacity change from 0 to 2048 [ 257.436073][T16403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.508017][T11903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.692925][T16445] loop4: detected capacity change from 0 to 2048 [ 257.707016][T16445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.765897][T16459] loop5: detected capacity change from 0 to 128 [ 257.777861][T16459] EXT4-fs: Ignoring removed nobh option [ 257.784771][T11903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.795183][T16459] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.817698][T16459] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.866583][T16462] loop0: detected capacity change from 0 to 512 [ 257.884164][T16462] EXT4-fs: Ignoring removed oldalloc option [ 257.919707][T16462] EXT4-fs (loop0): 1 truncate cleaned up [ 257.926348][T16472] FAULT_INJECTION: forcing a failure. [ 257.926348][T16472] name failslab, interval 1, probability 0, space 0, times 0 [ 257.939042][T16472] CPU: 0 UID: 0 PID: 16472 Comm: syz.4.4960 Not tainted syzkaller #0 PREEMPT(voluntary) [ 257.939075][T16472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.939089][T16472] Call Trace: [ 257.939096][T16472] [ 257.939104][T16472] __dump_stack+0x1d/0x30 [ 257.939203][T16472] dump_stack_lvl+0xe8/0x140 [ 257.939234][T16472] dump_stack+0x15/0x1b [ 257.939345][T16472] should_fail_ex+0x265/0x280 [ 257.939372][T16472] should_failslab+0x8c/0xb0 [ 257.939400][T16472] __kmalloc_noprof+0xa5/0x3e0 [ 257.939495][T16472] ? alloc_port_data+0xc0/0x230 [ 257.939521][T16472] alloc_port_data+0xc0/0x230 [ 257.939546][T16472] ib_device_set_netdev+0xb1/0x450 [ 257.939582][T16472] ? device_initialize+0x1fe/0x210 [ 257.939630][T16472] ? __mutex_init+0x4c/0x60 [ 257.939650][T16472] ? ib_set_device_ops+0x2c7c/0x2ce0 [ 257.939701][T16472] siw_newlink+0x335/0x680 [ 257.939739][T16472] nldev_newlink+0x366/0x3f0 [ 257.939821][T16472] ? __pfx_nldev_newlink+0x10/0x10 [ 257.939853][T16472] rdma_nl_rcv+0x47c/0x5a0 [ 257.939888][T16472] ? selinux_nlmsg_lookup+0x99/0x890 [ 257.939982][T16472] netlink_unicast+0x5c0/0x690 [ 257.940044][T16472] netlink_sendmsg+0x58b/0x6b0 [ 257.940070][T16472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.940094][T16472] __sock_sendmsg+0x145/0x180 [ 257.940207][T16472] ____sys_sendmsg+0x31e/0x4e0 [ 257.940236][T16472] ___sys_sendmsg+0x17b/0x1d0 [ 257.940324][T16472] __x64_sys_sendmsg+0xd4/0x160 [ 257.940354][T16472] x64_sys_call+0x191e/0x2ff0 [ 257.940378][T16472] do_syscall_64+0xd2/0x200 [ 257.940484][T16472] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 257.940511][T16472] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 257.940582][T16472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.940607][T16472] RIP: 0033:0x7f6b6755ebe9 [ 257.940624][T16472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.940643][T16472] RSP: 002b:00007f6b65fbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.940741][T16472] RAX: ffffffffffffffda RBX: 00007f6b67785fa0 RCX: 00007f6b6755ebe9 [ 257.940752][T16472] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 257.940764][T16472] RBP: 00007f6b65fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 257.940776][T16472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.940787][T16472] R13: 00007f6b67786038 R14: 00007f6b67785fa0 R15: 00007ffd74b159f8 [ 257.940806][T16472] [ 258.189285][T16462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.221872][T16462] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.328277][T12066] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.829107][T16513] loop0: detected capacity change from 0 to 128 [ 258.858381][T16513] EXT4-fs: Ignoring removed nobh option [ 258.866285][T16513] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.879045][T16513] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.941073][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 258.951721][T16519] loop5: detected capacity change from 0 to 2048 [ 259.005353][T16519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.018276][T16527] netlink: 'syz.1.4984': attribute type 1 has an invalid length. [ 259.044991][T16527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.056598][T12066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.072506][T10586] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.173728][T16543] bridge_slave_1: left allmulticast mode [ 259.179426][T16543] bridge_slave_1: left promiscuous mode [ 259.185209][T16543] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.198163][T16543] bridge_slave_0: left promiscuous mode [ 259.204039][T16543] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.297190][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 259.387818][T16560] bridge_slave_1: left allmulticast mode [ 259.393636][T16560] bridge_slave_1: left promiscuous mode [ 259.399350][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.407241][T16566] netlink: 'syz.4.5000': attribute type 1 has an invalid length. [ 259.443633][T16560] bridge_slave_0: left promiscuous mode [ 259.449395][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.480364][T16569] loop3: detected capacity change from 0 to 512 [ 259.493767][T16569] EXT4-fs: Ignoring removed oldalloc option [ 259.506294][T16569] EXT4-fs (loop3): 1 truncate cleaned up [ 259.515605][T16569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.538302][T16569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.547665][T16566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.599977][T16578] loop0: detected capacity change from 0 to 164 [ 259.615221][T16579] netlink: 'syz.0.5003': attribute type 3 has an invalid length. [ 259.623643][T16586] netlink: 'syz.0.5003': attribute type 3 has an invalid length. [ 259.818637][T16608] netlink: 'syz.1.5015': attribute type 1 has an invalid length. [ 259.832654][T16608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.845873][T16610] loop0: detected capacity change from 0 to 512 [ 259.852602][T16610] EXT4-fs: Ignoring removed oldalloc option [ 259.877010][T16610] EXT4-fs (loop0): 1 truncate cleaned up [ 259.889058][T16610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.894040][T16615] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 259.894040][T16615] program syz.1.5017 not setting count and/or reply_len properly [ 259.923955][T16610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.004899][T16626] can0: slcan on ttyS3. [ 260.488244][T16632] loop4: detected capacity change from 0 to 512 [ 260.495342][T16632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 260.506150][T16632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 260.514306][T16632] System zones: 1-12 [ 260.518845][T16632] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.5023: iget: bogus i_mode (700) [ 260.531010][T16632] EXT4-fs (loop4): Remounting filesystem read-only [ 260.537637][T16632] EXT4-fs (loop4): 1 orphan inode deleted [ 260.563475][T16635] loop4: detected capacity change from 0 to 128 [ 260.569934][T16635] EXT4-fs: Ignoring removed nobh option [ 260.577341][T16635] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 260.751387][T16643] netlink: 'syz.4.5027': attribute type 1 has an invalid length. [ 260.765743][T16643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.830305][T16651] smc: net device bond0 applied user defined pnetid SYZ0 [ 260.857592][T16651] smc: net device bond0 erased user defined pnetid SYZ0 [ 260.872282][T16625] can0 (unregistered): slcan off ttyS3. [ 260.909941][T16651] loop3: detected capacity change from 0 to 164 [ 260.927045][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 260.927061][ T29] audit: type=1400 audit(1755855945.804:12675): avc: denied { execute } for pid=16650 comm="syz.3.5030" dev="tmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 260.963119][T16651] syz.3.5030: attempt to access beyond end of device [ 260.963119][T16651] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 260.989533][ T29] audit: type=1400 audit(1755855945.844:12676): avc: denied { execute_no_trans } for pid=16650 comm="syz.3.5030" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.034570][T16651] syz.3.5030: attempt to access beyond end of device [ 261.034570][T16651] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 261.087069][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 261.111779][ T29] audit: type=1107 audit(1755855945.984:12677): pid=16658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 261.272315][T16671] __nla_validate_parse: 51 callbacks suppressed [ 261.272347][T16671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5038'. [ 261.326111][T16675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5040'. [ 261.335133][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5040'. [ 261.344143][T16675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5040'. [ 261.353137][T16675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5040'. [ 261.688750][ T29] audit: type=1107 audit(1755855946.564:12678): pid=16699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 261.791215][T16709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5053'. [ 261.800388][T16709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5053'. [ 261.809425][T16709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5053'. [ 261.820767][T16709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5053'. [ 261.960625][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5056'. [ 262.386510][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 262.450840][T16729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.550578][ T29] audit: type=1107 audit(1755855947.424:12679): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 262.838760][ T29] audit: type=1107 audit(1755855947.714:12680): pid=16745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 262.919565][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 262.946477][T16755] smc: net device bond0 applied user defined pnetid SYZ0 [ 262.955997][T16755] smc: net device bond0 erased user defined pnetid SYZ0 [ 262.968726][T16755] loop5: detected capacity change from 0 to 164 [ 262.990994][T16755] syz.5.5072: attempt to access beyond end of device [ 262.990994][T16755] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 263.007321][T16755] syz.5.5072: attempt to access beyond end of device [ 263.007321][T16755] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 263.069471][ T29] audit: type=1326 audit(1755855947.944:12681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.3.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 263.133918][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 263.150732][ T29] audit: type=1326 audit(1755855947.974:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.3.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 263.174470][ T29] audit: type=1326 audit(1755855947.974:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.3.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 263.198077][ T29] audit: type=1326 audit(1755855947.974:12684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.3.5081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd28e0aebe9 code=0x7ffc0000 [ 263.239032][T16790] netlink: 'syz.5.5087': attribute type 1 has an invalid length. [ 263.272725][T16790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.343378][T16790] bond2 (unregistering): Released all slaves [ 263.437341][T16812] FAULT_INJECTION: forcing a failure. [ 263.437341][T16812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.450690][T16812] CPU: 1 UID: 0 PID: 16812 Comm: syz.0.5098 Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.450719][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.450730][T16812] Call Trace: [ 263.450735][T16812] [ 263.450741][T16812] __dump_stack+0x1d/0x30 [ 263.450759][T16812] dump_stack_lvl+0xe8/0x140 [ 263.450842][T16812] dump_stack+0x15/0x1b [ 263.450897][T16812] should_fail_ex+0x265/0x280 [ 263.451017][T16812] should_fail+0xb/0x20 [ 263.451036][T16812] should_fail_usercopy+0x1a/0x20 [ 263.451057][T16812] _copy_from_user+0x1c/0xb0 [ 263.451080][T16812] memdup_user+0x5e/0xd0 [ 263.451162][T16812] proc_pid_attr_write+0x15e/0x220 [ 263.451187][T16812] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 263.451219][T16812] vfs_write+0x269/0x960 [ 263.451243][T16812] ? __rcu_read_unlock+0x4f/0x70 [ 263.451331][T16812] ? __fget_files+0x184/0x1c0 [ 263.451356][T16812] ksys_write+0xda/0x1a0 [ 263.451413][T16812] __x64_sys_write+0x40/0x50 [ 263.451432][T16812] x64_sys_call+0x27fe/0x2ff0 [ 263.451486][T16812] do_syscall_64+0xd2/0x200 [ 263.451517][T16812] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 263.451545][T16812] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 263.451574][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.451654][T16812] RIP: 0033:0x7faea59aebe9 [ 263.451669][T16812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.451688][T16812] RSP: 002b:00007faea440f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.451778][T16812] RAX: ffffffffffffffda RBX: 00007faea5bd5fa0 RCX: 00007faea59aebe9 [ 263.451804][T16812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 263.451816][T16812] RBP: 00007faea440f090 R08: 0000000000000000 R09: 0000000000000000 [ 263.451830][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.451843][T16812] R13: 00007faea5bd6038 R14: 00007faea5bd5fa0 R15: 00007fffb3412718 [ 263.451864][T16812] [ 263.672410][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 263.695146][T16826] loop5: detected capacity change from 0 to 2048 [ 263.736703][T16828] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 263.736703][T16828] program syz.0.5105 not setting count and/or reply_len properly [ 263.879238][T16837] loop3: detected capacity change from 0 to 1024 [ 263.889523][T16837] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 263.901363][T16837] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 263.918958][T16837] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 263.930380][T16837] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: comm syz.3.5108: inode #1: comm syz.3.5108: iget: illegal inode # [ 263.930428][T16855] loop5: detected capacity change from 0 to 512 [ 263.966947][T16855] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 263.966981][T16837] EXT4-fs (loop3): no journal found [ 263.983390][T16837] EXT4-fs (loop3): can't get journal size [ 263.985852][T16855] EXT4-fs (loop5): orphan cleanup on readonly fs [ 264.000059][T16837] EXT4-fs (loop3): failed to initialize system zone (-22) [ 264.013920][T16837] EXT4-fs (loop3): mount failed [ 264.020483][T16855] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 264.036922][T16855] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 264.041076][T16865] lo speed is unknown, defaulting to 1000 [ 264.044273][T16855] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5114: bg 0: block 40: padding at end of block bitmap is not set [ 264.067025][T16855] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 264.088506][T16855] EXT4-fs (loop5): 1 truncate cleaned up [ 264.094397][T16866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16866 comm=syz.4.5117 [ 264.107065][T16866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16866 comm=syz.4.5117 [ 264.213943][T16868] netlink: 'syz.1.5118': attribute type 3 has an invalid length. [ 264.248739][T16884] FAULT_INJECTION: forcing a failure. [ 264.248739][T16884] name failslab, interval 1, probability 0, space 0, times 0 [ 264.261458][T16884] CPU: 0 UID: 0 PID: 16884 Comm: syz.1.5125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.261557][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.261573][T16884] Call Trace: [ 264.261580][T16884] [ 264.261589][T16884] __dump_stack+0x1d/0x30 [ 264.261665][T16884] dump_stack_lvl+0xe8/0x140 [ 264.261691][T16884] dump_stack+0x15/0x1b [ 264.261713][T16884] should_fail_ex+0x265/0x280 [ 264.261740][T16884] should_failslab+0x8c/0xb0 [ 264.261770][T16884] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 264.261835][T16884] ? __d_alloc+0x3d/0x340 [ 264.261890][T16884] __d_alloc+0x3d/0x340 [ 264.261913][T16884] ? _parse_integer_limit+0x170/0x190 [ 264.261933][T16884] d_alloc_parallel+0x53/0xc60 [ 264.261966][T16884] ? _parse_integer+0x27/0x40 [ 264.261997][T16884] ? kstrtoull+0x111/0x140 [ 264.262019][T16884] ? __rcu_read_unlock+0x4f/0x70 [ 264.262061][T16884] ? __d_lookup+0x316/0x340 [ 264.262087][T16884] ? should_fail_ex+0xdb/0x280 [ 264.262143][T16884] ? should_fail_ex+0xdb/0x280 [ 264.262168][T16884] __lookup_slow+0x8c/0x250 [ 264.262208][T16884] lookup_noperm+0xc9/0x180 [ 264.262245][T16884] do_mq_open+0x181/0x4f0 [ 264.262345][T16884] __x64_sys_mq_open+0xcb/0x100 [ 264.262374][T16884] x64_sys_call+0x8c6/0x2ff0 [ 264.262550][T16884] do_syscall_64+0xd2/0x200 [ 264.262578][T16884] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 264.262608][T16884] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 264.262638][T16884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.262708][T16884] RIP: 0033:0x7feeb6f4ebe9 [ 264.262726][T16884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.262758][T16884] RSP: 002b:00007feeb59b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 264.262781][T16884] RAX: ffffffffffffffda RBX: 00007feeb7175fa0 RCX: 00007feeb6f4ebe9 [ 264.262796][T16884] RDX: 0000000000000129 RSI: 0000000000000040 RDI: 0000200000000200 [ 264.262811][T16884] RBP: 00007feeb59b7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.262945][T16884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.262961][T16884] R13: 00007feeb7176038 R14: 00007feeb7175fa0 R15: 00007ffc44e0bb58 [ 264.262984][T16884] [ 264.922093][T16920] C: renamed from team_slave_0 (while UP) [ 264.950001][T16951] FAULT_INJECTION: forcing a failure. [ 264.950001][T16951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.963236][T16951] CPU: 1 UID: 0 PID: 16951 Comm: syz.5.5154 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.963270][T16951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.963285][T16951] Call Trace: [ 264.963293][T16951] [ 264.963302][T16951] __dump_stack+0x1d/0x30 [ 264.963377][T16951] dump_stack_lvl+0xe8/0x140 [ 264.963399][T16951] dump_stack+0x15/0x1b [ 264.963415][T16951] should_fail_ex+0x265/0x280 [ 264.963447][T16951] should_fail+0xb/0x20 [ 264.963475][T16951] should_fail_usercopy+0x1a/0x20 [ 264.963521][T16951] _copy_from_user+0x1c/0xb0 [ 264.963554][T16951] ___sys_sendmsg+0xc1/0x1d0 [ 264.963598][T16951] __x64_sys_sendmsg+0xd4/0x160 [ 264.963636][T16951] x64_sys_call+0x191e/0x2ff0 [ 264.963687][T16951] do_syscall_64+0xd2/0x200 [ 264.963715][T16951] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 264.963796][T16951] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 264.963831][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.963933][T16951] RIP: 0033:0x7f2d18d7ebe9 [ 264.963953][T16951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.963977][T16951] RSP: 002b:00007f2d177e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.964013][T16951] RAX: ffffffffffffffda RBX: 00007f2d18fa5fa0 RCX: 00007f2d18d7ebe9 [ 264.964029][T16951] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 264.964048][T16951] RBP: 00007f2d177e7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.964079][T16951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.964180][T16951] R13: 00007f2d18fa6038 R14: 00007f2d18fa5fa0 R15: 00007ffc010b7308 [ 264.964209][T16951] [ 264.991693][T16953] IPVS: Error joining to the multicast group [ 265.132006][T16948] loop0: detected capacity change from 0 to 32768 [ 265.198411][T16963] FAULT_INJECTION: forcing a failure. [ 265.198411][T16963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.211664][T16963] CPU: 0 UID: 0 PID: 16963 Comm: syz.5.5159 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.211708][T16963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.211721][T16963] Call Trace: [ 265.211727][T16963] [ 265.211734][T16963] __dump_stack+0x1d/0x30 [ 265.211756][T16963] dump_stack_lvl+0xe8/0x140 [ 265.211777][T16963] dump_stack+0x15/0x1b [ 265.211795][T16963] should_fail_ex+0x265/0x280 [ 265.211813][T16963] should_fail+0xb/0x20 [ 265.211828][T16963] should_fail_usercopy+0x1a/0x20 [ 265.211847][T16963] _copy_from_user+0x1c/0xb0 [ 265.211918][T16963] __sys_bpf+0x178/0x7b0 [ 265.211956][T16963] __x64_sys_bpf+0x41/0x50 [ 265.211982][T16963] x64_sys_call+0x2aea/0x2ff0 [ 265.212010][T16963] do_syscall_64+0xd2/0x200 [ 265.212107][T16963] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 265.212137][T16963] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.212208][T16963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.212234][T16963] RIP: 0033:0x7f2d18d7ebe9 [ 265.212255][T16963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.212277][T16963] RSP: 002b:00007f2d177e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.212353][T16963] RAX: ffffffffffffffda RBX: 00007f2d18fa5fa0 RCX: 00007f2d18d7ebe9 [ 265.212370][T16963] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000002 [ 265.212386][T16963] RBP: 00007f2d177e7090 R08: 0000000000000000 R09: 0000000000000000 [ 265.212402][T16963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.212413][T16963] R13: 00007f2d18fa6038 R14: 00007f2d18fa5fa0 R15: 00007ffc010b7308 [ 265.212430][T16963] [ 265.504419][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 265.696713][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 265.765688][T17020] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 265.785816][T17020] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 265.862998][T17036] loop0: detected capacity change from 0 to 512 [ 265.877431][T17036] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 265.885751][T17036] EXT4-fs (loop0): orphan cleanup on readonly fs [ 265.892487][T17036] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 265.910351][T17036] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 265.917785][T17036] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5192: bg 0: block 40: padding at end of block bitmap is not set [ 265.934609][T17036] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 265.943829][T17036] EXT4-fs (loop0): 1 truncate cleaned up [ 265.943896][T17042] lo speed is unknown, defaulting to 1000 [ 265.949915][T17036] EXT4-fs mount: 8 callbacks suppressed [ 265.949931][T17036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.979151][T17036] FAULT_INJECTION: forcing a failure. [ 265.979151][T17036] name failslab, interval 1, probability 0, space 0, times 0 [ 265.992307][T17036] CPU: 1 UID: 0 PID: 17036 Comm: syz.0.5192 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.992370][T17036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.992385][T17036] Call Trace: [ 265.992392][T17036] [ 265.992414][T17036] __dump_stack+0x1d/0x30 [ 265.992439][T17036] dump_stack_lvl+0xe8/0x140 [ 265.992462][T17036] dump_stack+0x15/0x1b [ 265.992523][T17036] should_fail_ex+0x265/0x280 [ 265.992548][T17036] should_failslab+0x8c/0xb0 [ 265.992600][T17036] __kmalloc_noprof+0xa5/0x3e0 [ 265.992631][T17036] ? ext4_find_extent+0x16b/0x7a0 [ 265.992681][T17036] ext4_find_extent+0x16b/0x7a0 [ 265.992726][T17036] ? vsnprintf+0x829/0x890 [ 265.992753][T17036] ext4_ext_map_blocks+0x11f/0x38a0 [ 265.992788][T17036] ? this_cpu_in_panic+0x2d/0x40 [ 265.992828][T17036] ? _prb_read_valid+0x8c1/0x920 [ 265.992870][T17036] ? __rcu_read_unlock+0x4f/0x70 [ 265.992896][T17036] ext4_map_query_blocks+0xa8/0x480 [ 265.992977][T17036] ext4_map_blocks+0x330/0xd00 [ 265.993088][T17036] ? try_charge_memcg+0x200/0x9e0 [ 265.993169][T17036] ? xas_load+0x413/0x430 [ 265.993226][T17036] ? xa_load+0xb1/0xe0 [ 265.993256][T17036] ext4_getblk+0x114/0x510 [ 265.993288][T17036] ext4_bread_batch+0x5c/0x320 [ 265.993320][T17036] __ext4_find_entry+0x840/0xf40 [ 265.993377][T17036] ? __d_lookup_rcu+0x251/0x2a0 [ 265.993414][T17036] ? d_alloc_parallel+0xba9/0xc60 [ 265.993451][T17036] ext4_lookup+0xbb/0x390 [ 265.993550][T17036] ? __pfx_ext4_lookup+0x10/0x10 [ 265.993573][T17036] path_openat+0xcf0/0x2170 [ 265.993606][T17036] do_filp_open+0x109/0x230 [ 265.993638][T17036] do_sys_openat2+0xa6/0x110 [ 265.993674][T17036] __x64_sys_open+0xe6/0x110 [ 265.993747][T17036] x64_sys_call+0x1457/0x2ff0 [ 265.993771][T17036] do_syscall_64+0xd2/0x200 [ 265.993835][T17036] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 265.993863][T17036] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.993892][T17036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.993917][T17036] RIP: 0033:0x7faea59aebe9 [ 265.993973][T17036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.993994][T17036] RSP: 002b:00007faea440f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 265.994038][T17036] RAX: ffffffffffffffda RBX: 00007faea5bd5fa0 RCX: 00007faea59aebe9 [ 265.994053][T17036] RDX: 0000000000000080 RSI: 0000000000143142 RDI: 0000200000000040 [ 265.994067][T17036] RBP: 00007faea440f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.994144][T17036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.994158][T17036] R13: 00007faea5bd6038 R14: 00007faea5bd5fa0 R15: 00007fffb3412718 [ 265.994182][T17036] [ 266.299097][T10586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.348703][T17044] loop3: detected capacity change from 0 to 32768 [ 266.422309][T17058] __nla_validate_parse: 17 callbacks suppressed [ 266.422328][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5198'. [ 266.429414][T17061] loop5: detected capacity change from 0 to 2048 [ 266.446217][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 266.471117][T17061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.485868][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 266.485884][ T29] audit: type=1107 audit(1755855951.364:12806): pid=17062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 266.513964][T12066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.544431][T17074] FAULT_INJECTION: forcing a failure. [ 266.544431][T17074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.557649][T17074] CPU: 1 UID: 0 PID: 17074 Comm: syz.5.5202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.557673][T17074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.557684][T17074] Call Trace: [ 266.557707][T17074] [ 266.557715][T17074] __dump_stack+0x1d/0x30 [ 266.557743][T17074] dump_stack_lvl+0xe8/0x140 [ 266.557760][T17074] dump_stack+0x15/0x1b [ 266.557774][T17074] should_fail_ex+0x265/0x280 [ 266.557794][T17074] should_fail+0xb/0x20 [ 266.557813][T17074] should_fail_usercopy+0x1a/0x20 [ 266.557909][T17074] _copy_from_user+0x1c/0xb0 [ 266.557941][T17074] ___sys_sendmsg+0xc1/0x1d0 [ 266.557986][T17074] __x64_sys_sendmsg+0xd4/0x160 [ 266.558018][T17074] x64_sys_call+0x191e/0x2ff0 [ 266.558037][T17074] do_syscall_64+0xd2/0x200 [ 266.558078][T17074] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.558099][T17074] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 266.558121][T17074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.558160][T17074] RIP: 0033:0x7f2d18d7ebe9 [ 266.558176][T17074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.558197][T17074] RSP: 002b:00007f2d177e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.558259][T17074] RAX: ffffffffffffffda RBX: 00007f2d18fa5fa0 RCX: 00007f2d18d7ebe9 [ 266.558331][T17074] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 266.558342][T17074] RBP: 00007f2d177e7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.558352][T17074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.558363][T17074] R13: 00007f2d18fa6038 R14: 00007f2d18fa5fa0 R15: 00007ffc010b7308 [ 266.558380][T17074] [ 266.737007][ T29] audit: type=1400 audit(1755855951.614:12807): avc: denied { block_suspend } for pid=17069 comm="syz.4.5203" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.762980][T17070] wg2: entered promiscuous mode [ 266.768003][T17070] wg2: entered allmulticast mode [ 266.845720][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5209'. [ 266.860964][T17088] loop4: detected capacity change from 0 to 512 [ 266.867626][T17088] EXT4-fs: Ignoring removed oldalloc option [ 266.881801][T17088] EXT4-fs (loop4): 1 truncate cleaned up [ 266.889115][T17088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.911769][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 266.923321][T17095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5208'. [ 266.932404][T17095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5208'. [ 266.941544][T17095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5208'. [ 266.955536][T17088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.969160][T17095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5208'. [ 266.988132][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5211'. [ 267.011055][ T29] audit: type=1326 audit(1755855951.884:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17098 comm="syz.1.5214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feeb6f4ebe9 code=0x0 [ 267.034964][T17100] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5209'. [ 267.060683][ T29] audit: type=1107 audit(1755855951.934:12809): pid=17101 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 267.124287][ T29] audit: type=1107 audit(1755855952.004:12810): pid=17108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 267.178448][ T29] audit: type=1400 audit(1755855952.054:12811): avc: denied { mount } for pid=17112 comm="syz.5.5221" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 267.211375][T17113] team0 (unregistering): Port device team_slave_0 removed [ 267.220763][T17113] team0 (unregistering): Port device team_slave_1 removed [ 267.261372][ T29] audit: type=1326 audit(1755855952.134:12812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 267.285673][ T29] audit: type=1326 audit(1755855952.134:12813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 267.309336][ T29] audit: type=1326 audit(1755855952.134:12814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 267.333193][ T29] audit: type=1326 audit(1755855952.134:12815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 267.455820][T17128] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5227'. [ 267.729405][T17142] netlink: 'syz.4.5232': attribute type 32 has an invalid length. [ 267.791194][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5243'. [ 267.805966][T17146] loop3: detected capacity change from 0 to 512 [ 267.812533][T17146] EXT4-fs: Ignoring removed oldalloc option [ 267.822540][T17146] EXT4-fs (loop3): 1 truncate cleaned up [ 267.835282][T17146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.892926][T17155] loop0: detected capacity change from 0 to 128 [ 267.920742][T17146] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.933137][T17155] EXT4-fs: Ignoring removed nobh option [ 267.953067][T17155] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.974150][T17155] ext4 filesystem being mounted at /515/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.172465][T17179] netlink: 'syz.1.5247': attribute type 32 has an invalid length. [ 268.267212][T10586] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.297989][T17185] netlink: 'syz.5.5259': attribute type 32 has an invalid length. [ 268.334423][T17195] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 268.334423][T17195] program syz.4.5252 not setting count and/or reply_len properly [ 268.408212][T17204] loop0: detected capacity change from 0 to 1024 [ 268.426233][T17204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.438937][T17204] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.457672][T17204] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 268.472850][T17204] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 268.485275][T17204] EXT4-fs (loop0): This should not happen!! Data will be lost [ 268.485275][T17204] [ 268.495018][T17204] EXT4-fs (loop0): Total free blocks count 0 [ 268.501018][T17204] EXT4-fs (loop0): Free/Dirty block details [ 268.507037][T17204] EXT4-fs (loop0): free_blocks=4293918720 [ 268.512843][T17204] EXT4-fs (loop0): dirty_blocks=16 [ 268.518072][T17204] EXT4-fs (loop0): Block reservation details [ 268.524090][T17204] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 268.565547][T10586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.657288][T17227] loop3: detected capacity change from 0 to 1024 [ 268.663997][T17227] EXT4-fs: Ignoring removed orlov option [ 268.675979][T17227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.804674][T17233] program syz.3.5266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.998477][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.034340][T17246] loop3: detected capacity change from 0 to 2048 [ 269.065818][T17246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.110941][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.153321][T17250] loop3: detected capacity change from 0 to 2048 [ 269.164597][T17250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.188883][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.348705][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 269.376564][T17278] random: crng reseeded on system resumption [ 269.402419][T17256] lo speed is unknown, defaulting to 1000 [ 269.433908][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 269.638885][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 269.975910][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 270.217425][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 270.305392][T17385] random: crng reseeded on system resumption [ 270.754065][T17435] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 270.754065][T17435] program syz.1.5355 not setting count and/or reply_len properly [ 270.835455][T17438] random: crng reseeded on system resumption [ 270.882872][T17433] lo speed is unknown, defaulting to 1000 [ 271.215242][T17469] loop5: detected capacity change from 0 to 1024 [ 271.228327][T17469] EXT4-fs: Ignoring removed orlov option [ 271.238070][T17469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.369838][T17478] program syz.5.5367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.552603][T12066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.585350][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 271.585366][ T29] audit: type=1107 audit(1755855956.463:12976): pid=17484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 271.606537][ T29] audit: type=1326 audit(1755855956.463:12977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 271.630232][ T29] audit: type=1326 audit(1755855956.463:12978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 271.653916][ T29] audit: type=1326 audit(1755855956.463:12979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 271.677753][ T29] audit: type=1326 audit(1755855956.463:12980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 271.701348][ T29] audit: type=1326 audit(1755855956.463:12981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 271.724990][ T29] audit: type=1326 audit(1755855956.463:12982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 271.748710][ T29] audit: type=1326 audit(1755855956.463:12983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 271.772347][ T29] audit: type=1326 audit(1755855956.463:12984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 271.796003][ T29] audit: type=1326 audit(1755855956.463:12985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d18d7ebe9 code=0x7ffc0000 [ 271.822456][T17492] __nla_validate_parse: 34 callbacks suppressed [ 271.822470][T17492] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5377'. [ 271.924273][T17504] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5382'. [ 271.942586][T17510] loop5: detected capacity change from 0 to 2048 [ 271.957643][T17510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.041019][T12066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.080776][T17532] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 272.080776][T17532] program syz.5.5390 not setting count and/or reply_len properly [ 272.155625][T17542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.174510][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5398'. [ 272.186606][T17542] bond1 (unregistering): Released all slaves [ 272.217739][T17548] loop0: detected capacity change from 0 to 2048 [ 272.236073][T17548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.277582][T10586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.297833][T17554] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5402'. [ 272.335546][T17554] loop3: detected capacity change from 0 to 512 [ 272.342370][T17554] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 272.357230][T17554] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5402: invalid indirect mapped block 4294967295 (level 0) [ 272.372095][T17554] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5402: invalid indirect mapped block 4294967295 (level 1) [ 272.391180][T17554] EXT4-fs (loop3): 1 orphan inode deleted [ 272.397011][T17554] EXT4-fs (loop3): 1 truncate cleaned up [ 272.403109][T17554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.442968][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.503211][T17565] loop3: detected capacity change from 0 to 2048 [ 272.528690][T17565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.557579][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.999879][T17602] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5420'. [ 273.265401][T17611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.280133][T17611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5424'. [ 273.291765][T17611] bond4 (unregistering): Released all slaves [ 273.485061][T17629] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5432'. [ 273.663915][T17644] lo speed is unknown, defaulting to 1000 [ 273.677531][T17648] random: crng reseeded on system resumption [ 273.763562][T17652] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 273.763562][T17652] program syz.5.5440 not setting count and/or reply_len properly [ 274.418632][T17681] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5452'. [ 274.556424][T17687] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5455'. [ 274.581613][T17687] loop4: detected capacity change from 0 to 512 [ 274.590066][T17687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.601191][T17687] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5455: invalid indirect mapped block 4294967295 (level 0) [ 274.617349][T17687] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5455: invalid indirect mapped block 4294967295 (level 1) [ 274.631897][T17687] EXT4-fs (loop4): 1 orphan inode deleted [ 274.637672][T17687] EXT4-fs (loop4): 1 truncate cleaned up [ 274.646327][T17687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.676711][T11903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.697417][T17699] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 274.697417][T17699] program syz.4.5460 not setting count and/or reply_len properly [ 274.738917][T17706] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5463'. [ 274.771047][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 274.792135][T17716] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 274.792135][T17716] program syz.0.5467 not setting count and/or reply_len properly [ 275.626408][T17740] loop4: detected capacity change from 0 to 1024 [ 275.633126][T17740] EXT4-fs: Ignoring removed orlov option [ 275.641395][T17740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.931034][T11903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.072735][T17774] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 276.072735][T17774] program syz.4.5488 not setting count and/or reply_len properly [ 276.129321][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 276.235850][T17783] lo speed is unknown, defaulting to 1000 [ 276.250189][T17788] random: crng reseeded on system resumption [ 276.362697][T17793] loop3: detected capacity change from 0 to 1024 [ 276.369622][T17793] EXT4-fs: Ignoring removed orlov option [ 276.378175][T17793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.589961][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.681908][T17815] loop3: detected capacity change from 0 to 2048 [ 276.688799][T17817] loop0: detected capacity change from 0 to 512 [ 276.704691][T17817] EXT4-fs: Ignoring removed oldalloc option [ 276.711899][T17815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.733614][T17817] EXT4-fs (loop0): 1 truncate cleaned up [ 276.751899][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.757402][T17817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.800600][T17817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.912502][T17830] __nla_validate_parse: 2 callbacks suppressed [ 276.912521][T17830] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5505'. [ 277.106626][T17837] netlink: 'syz.4.5510': attribute type 1 has an invalid length. [ 277.119999][T17837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.131215][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5510'. [ 277.144007][T17837] bond3 (unregistering): Released all slaves [ 277.255803][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 277.255819][ T29] audit: type=1107 audit(1755855962.142:13118): pid=17851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 277.314784][T17855] loop5: detected capacity change from 0 to 2048 [ 277.336983][T17855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.361361][T12066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.560563][T17868] loop0: detected capacity change from 0 to 2048 [ 277.576426][T17868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.602185][T10586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.702037][ T29] audit: type=1107 audit(1755855962.582:13119): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 277.737314][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5528'. [ 277.789233][T17887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5529'. [ 277.798284][T17887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5529'. [ 277.807374][T17887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5529'. [ 277.807852][T17889] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5528'. [ 277.826836][T17887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5529'. [ 277.848560][T17888] loop3: detected capacity change from 0 to 1024 [ 277.864747][T17888] EXT4-fs: Ignoring removed orlov option [ 277.906029][T17892] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5531'. [ 277.953666][T17892] loop0: detected capacity change from 0 to 512 [ 277.971781][T17892] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 277.988429][T17888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.003209][T17892] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.5531: invalid indirect mapped block 4294967295 (level 0) [ 278.019226][T17892] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.5531: invalid indirect mapped block 4294967295 (level 1) [ 278.033814][T17892] EXT4-fs (loop0): 1 orphan inode deleted [ 278.039653][T17892] EXT4-fs (loop0): 1 truncate cleaned up [ 278.048144][T17892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.126557][T10586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.161030][T17900] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5533'. [ 278.191778][ T29] audit: type=1326 audit(1755855963.072:13120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 278.215415][ T29] audit: type=1326 audit(1755855963.072:13121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 278.238993][ T29] audit: type=1326 audit(1755855963.072:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 278.262699][ T29] audit: type=1326 audit(1755855963.072:13123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 278.286396][ T29] audit: type=1326 audit(1755855963.072:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 278.310121][ T29] audit: type=1326 audit(1755855963.072:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 278.333999][ T29] audit: type=1326 audit(1755855963.072:13126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 278.357703][ T29] audit: type=1326 audit(1755855963.072:13127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea59aebe9 code=0x7ffc0000 [ 278.427903][T17910] loop5: detected capacity change from 0 to 512 [ 278.434658][T17910] EXT4-fs: Ignoring removed oldalloc option [ 278.445610][T17910] EXT4-fs (loop5): 1 truncate cleaned up [ 278.452887][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.452981][T17910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.478005][T17910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.497868][T17914] loop3: detected capacity change from 0 to 2048 [ 278.537571][T17914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.563537][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.677211][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 278.709808][T17930] random: crng reseeded on system resumption [ 278.883165][T17949] loop3: detected capacity change from 0 to 2048 [ 278.915634][T17949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.952385][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.991916][T17954] loop3: detected capacity change from 0 to 2048 [ 279.019551][T17954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.083685][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.113177][T17960] netlink: 'syz.3.5553': attribute type 1 has an invalid length. [ 279.128398][T17960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.143369][T17960] bond1 (unregistering): Released all slaves [ 279.184439][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 279.343849][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 279.443813][T17985] lo speed is unknown, defaulting to 1000 [ 279.507955][T17985] chnl_net:caif_netlink_parms(): no params data found [ 279.554320][T17985] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.561448][T17985] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.569264][T17985] bridge_slave_0: entered allmulticast mode [ 279.575881][T17985] bridge_slave_0: entered promiscuous mode [ 279.582952][T17985] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.590126][T17985] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.597402][T17985] bridge_slave_1: entered allmulticast mode [ 279.604136][T17985] bridge_slave_1: entered promiscuous mode [ 279.623727][T17985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.634267][T17985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.661741][T17985] team0: Port device team_slave_0 added [ 279.668609][T17985] team0: Port device team_slave_1 added [ 279.685914][T17985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.692947][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.718867][T17985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.730034][T17985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.737215][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.763220][T17985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.790067][T17985] hsr_slave_0: entered promiscuous mode [ 279.796227][T17985] hsr_slave_1: entered promiscuous mode [ 279.802116][T17985] debugfs: 'hsr0' already exists in 'hsr' [ 279.807869][T17985] Cannot create hsr debugfs directory [ 279.886930][T17985] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.927026][T17985] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.941741][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 279.976678][T17985] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.025828][T17985] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.050084][T18015] lo speed is unknown, defaulting to 1000 [ 280.067693][T18018] random: crng reseeded on system resumption [ 280.118006][T17985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.181858][T17985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.196159][T17985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.220444][T17985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.319702][T17985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.357251][T17985] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.372090][ T2692] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.379267][ T2692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.400415][ T2692] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.407556][ T2692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.431424][T17985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.452325][T18050] loop3: detected capacity change from 0 to 512 [ 280.454887][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 280.477522][T18050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 280.536068][T17985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.547136][T18050] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5580: invalid indirect mapped block 4294967295 (level 0) [ 280.589484][T18050] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5580: invalid indirect mapped block 4294967295 (level 1) [ 280.619227][T18060] random: crng reseeded on system resumption [ 280.628612][T18050] EXT4-fs (loop3): 1 orphan inode deleted [ 280.634365][T18050] EXT4-fs (loop3): 1 truncate cleaned up [ 280.638391][T18054] lo speed is unknown, defaulting to 1000 [ 280.671837][T18050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.749203][T17985] veth0_vlan: entered promiscuous mode [ 280.770306][T17985] veth1_vlan: entered promiscuous mode [ 280.795511][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.816720][T17985] veth0_macvtap: entered promiscuous mode [ 280.823984][T17985] veth1_macvtap: entered promiscuous mode [ 280.844088][T17985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.862786][T17985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.874393][ T2692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.886324][ T2692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.907625][ T2692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.928002][ T2692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.966898][T18078] loop3: detected capacity change from 0 to 512 [ 281.005316][T18078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.057179][T18078] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5587: invalid indirect mapped block 4294967295 (level 0) [ 281.095314][T18078] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.5587: invalid indirect mapped block 4294967295 (level 1) [ 281.114871][T18078] EXT4-fs (loop3): 1 orphan inode deleted [ 281.120732][T18078] EXT4-fs (loop3): 1 truncate cleaned up [ 281.133990][T18078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.168095][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.237956][T18095] loop3: detected capacity change from 0 to 2048 [ 281.244839][T18097] loop0: detected capacity change from 0 to 2048 [ 281.257218][T18095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.269954][T18097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.293944][T10788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.347902][T17985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.455155][T18106] lo speed is unknown, defaulting to 1000 [ 281.473049][T18115] random: crng reseeded on system resumption [ 281.615100][ T1091] bridge_slave_1: left allmulticast mode [ 281.620882][ T1091] bridge_slave_1: left promiscuous mode [ 281.626686][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.637050][ T1091] bridge_slave_0: left allmulticast mode [ 281.642872][ T1091] bridge_slave_0: left promiscuous mode [ 281.648673][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.797067][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.807425][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.818504][ T1091] bond0 (unregistering): Released all slaves [ 281.989637][ T1091] hsr_slave_0: left promiscuous mode [ 281.995825][ T1091] hsr_slave_1: left promiscuous mode [ 282.001654][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.009144][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.018490][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.026018][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.049155][ T1091] veth0_macvtap: left promiscuous mode [ 282.057164][ T1091] veth1_vlan: left promiscuous mode [ 282.062438][ T1091] veth0_vlan: left promiscuous mode [ 282.106585][T18152] __nla_validate_parse: 37 callbacks suppressed [ 282.106602][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5612'. [ 282.150602][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 282.160595][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 282.392828][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 282.392844][ T29] audit: type=1107 audit(1755855967.272:13229): pid=18160 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 282.451252][ T29] audit: type=1326 audit(1755855967.332:13230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.4.5618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6755ebe9 code=0x7ffc0000 [ 282.481080][ T29] audit: type=1326 audit(1755855967.362:13231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.4.5618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b6755ebe9 code=0x7ffc0000 [ 282.504868][ T29] audit: type=1326 audit(1755855967.362:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.4.5618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6755ebe9 code=0x7ffc0000 [ 282.528502][ T29] audit: type=1326 audit(1755855967.362:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.4.5618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b6755ebe9 code=0x7ffc0000 [ 282.552174][ T29] audit: type=1326 audit(1755855967.362:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.4.5618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6755ebe9 code=0x7ffc0000 [ 282.575806][ T29] audit: type=1326 audit(1755855967.362:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.4.5618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b6755ebe9 code=0x7ffc0000 [ 282.599450][ T29] audit: type=1326 audit(1755855967.362:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.4.5618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6755ebe9 code=0x7ffc0000 [ 282.623184][ T29] audit: type=1326 audit(1755855967.362:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.4.5618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f6b6755ebe9 code=0x7ffc0000 [ 282.700783][T18172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5620'. [ 282.709794][T18172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5620'. [ 282.718875][T18172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5620'. [ 282.728128][T18172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5620'. [ 282.756723][ T29] audit: type=1326 audit(1755855967.532:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18164 comm="syz.4.5618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b67555ba7 code=0x7ffc0000 [ 282.878565][T18182] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5624'. [ 283.124116][T18186] random: crng reseeded on system resumption [ 283.179361][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5628'. [ 283.448711][T18207] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5643'. [ 283.457727][T18207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5643'. [ 283.466749][T18207] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5643'. [ 283.630969][T18222] loop0: detected capacity change from 0 to 512 [ 283.644550][T18222] EXT4-fs: Ignoring removed oldalloc option [ 283.663870][T18222] EXT4-fs (loop0): 1 truncate cleaned up [ 283.676040][T18222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.697542][T18222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.563398][T18243] loop4: detected capacity change from 0 to 2048 [ 284.949343][T18271] program syz.1.5654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.415169][T18270] ================================================================== [ 285.423276][T18270] BUG: KCSAN: data-race in touch_atime / touch_atime [ 285.429991][T18270] [ 285.432326][T18270] write to 0xffff88811a70bdf8 of 4 bytes by task 18267 on cpu 1: [ 285.440059][T18270] touch_atime+0x1e8/0x340 [ 285.444496][T18270] shmem_file_read_iter+0x477/0x540 [ 285.449702][T18270] copy_splice_read+0x442/0x660 [ 285.454569][T18270] splice_direct_to_actor+0x290/0x680 [ 285.459951][T18270] do_splice_direct+0xda/0x150 [ 285.464716][T18270] do_sendfile+0x380/0x650 [ 285.469152][T18270] __x64_sys_sendfile64+0x105/0x150 [ 285.474361][T18270] x64_sys_call+0x2bb0/0x2ff0 [ 285.479042][T18270] do_syscall_64+0xd2/0x200 [ 285.483581][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.489489][T18270] [ 285.491820][T18270] read to 0xffff88811a70bdf8 of 4 bytes by task 18270 on cpu 0: [ 285.499460][T18270] touch_atime+0x194/0x340 [ 285.503896][T18270] shmem_file_read_iter+0x477/0x540 [ 285.509107][T18270] copy_splice_read+0x442/0x660 [ 285.514001][T18270] splice_direct_to_actor+0x290/0x680 [ 285.519381][T18270] do_splice_direct+0xda/0x150 [ 285.524164][T18270] do_sendfile+0x380/0x650 [ 285.528599][T18270] __x64_sys_sendfile64+0x105/0x150 [ 285.533820][T18270] x64_sys_call+0x2bb0/0x2ff0 [ 285.538516][T18270] do_syscall_64+0xd2/0x200 [ 285.543032][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.548934][T18270] [ 285.551269][T18270] value changed: 0x1167545d -> 0x11ffe635 [ 285.556997][T18270] [ 285.559329][T18270] Reported by Kernel Concurrency Sanitizer on: [ 285.565482][T18270] CPU: 0 UID: 0 PID: 18270 Comm: syz.1.5654 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.575293][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.585364][T18270] ==================================================================