last executing test programs: 21.484180514s ago: executing program 3 (id=3929): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 21.447063138s ago: executing program 3 (id=3931): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 21.236207959s ago: executing program 3 (id=3934): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 21.180310515s ago: executing program 3 (id=3939): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x8, 0x200, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==") listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) r4 = getgid() r5 = fsopen(&(0x7f0000000240)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) r8 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7, {0xffffffffffffffff, r8}}, './file0\x00'}) r9 = msgget$private(0x0, 0x0) r10 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$ARCH_SET_GS(0x1e, r12, 0x0, 0x1001) msgctl$IPC_SET(r9, 0x1, &(0x7f0000000180)={{0x0, 0x0, r10, r11, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1, r12}) lstat(&(0x7f0000000780)='./file2/file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000b40)={{}, {}, [{0x2, 0x4, 0xee00}, {}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x0, 0xee01}], {0x4, 0x5}, [{0x8, 0x2}, {0x8, 0x5, r4}, {0x8, 0x7, r8}, {0x8, 0x4, r10}, {0x8, 0x2, r13}], {0x10, 0x4}, {0x20, 0x1}}, 0x8c, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 21.009469143s ago: executing program 3 (id=3945): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$eJzs3U1sHOUZAOB3HJsEI6WIVimKQpgEKgUJzHoNpi4HWNZje2C9a+2uq0RVRSNwkBUHKBS15AJRJWirVlVPPVKu3HqjqtRKPbQ9VSqHXnpD4lRRqX+iqpBczew6/v9JcEIgz2PF3+zsO9/3zmY978za+20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUJyuV0SQa+bfnT6fbq0+2W7M73L/S32/XNes8vm7ciKT4F4cOxUf/6q370urdR4pvJ+NY79axOFQ0h+LibUduf/SLgwMr2++Q0NU6sce4JOL1IqnzZ5eWFl66BolcRz/69RVv8t/l4vt01sw7rXy2Np2leaeVToyPVx6cmeqkU3kj65zpdLPZtN7Oat1WOz1Vvy8dnZgYS7ORM6355vRkrZGtrHzkgWqlMp4+OTKX1dqdVvPBJ6NTn8kbjbw5XcZUK9+NIuaR4on4VN5Nu1ltNk3PLS4tjK3JKtkq1SJodKs7DvSeP8fuvf2DV97/5+JC8YTcbn+T/hOzOjparY6OPzzx8COVymC1Ul2/orJBXI6IgYgi4po8afkM2d8DOHwCA/36H43IoxnzcTrSDV9DETEU9ZiMdrRitlj3l6FNUX0r9f8rD/79TzuNu7b+r1T5O1fvPhpl/T/eu3V8u/q/KYsdv4auKHpPXy/Hq3ExzsfZWIqlWIiX9rf/g/ue8cAn7SFZd2s6smhGHp1oRR6zUSvXpP01aUzEeIxHJZ6OmZiKTqQxFXk0IotOnIlOdCMrn1H1aEcWtehGK9qRxqmox32RxmhMxESMRRpZjMSZaMV8NGM6Hoha2cu5WCwf97ENWR65NX713J8/eKtYvhw0utNuFSdzRdA/dgjaVO53rP/Ly8X5wsYI9f9mdw2O4nB1llfqPwAAAPC5lZSvviflS/x3lUtTeSP7xh627A5eh/QAAACAfVD+5v9Y0QwVS3dFUlz/V7aIfO+65wYAAADsj6R8j10SEcNxd2/pXCzG67EQW70IAAAAAHwGlb//P140wxGvlStWpktx/Q8AAACfEz/Ybo7991fm2O3MHUx+U84BnFyaO31vcqFWxNUuHOht12++frnH7tTR5HC/k7IZH7x4WxIRg/XsWLIy++XHB3vth+X3o6tzCWw313/Sbu+YQOycQHkrfhwnejEnnu21z/bvSXqjDE/ljWyk3mo8Wk6JWPzrvvL84vciitF/2Jw9nMS5xaWFkWdeWHq2zOVS0culC/0JFNfNo7j8hR1zWe4/AnHX1ns8VL4Roz/ucG/cytr9Hyi3/t9yOc/stvufrB3zjTjZizk53GuHV+7pjXmoGHN05NHRqNUOD3Sz091XltfsfT+L0d32fJf/hTfinl7MPafu6TVbZFFdl8Xzm7Oors2i91jEwD5l8daJ107/5/etJBvbLYuxK8hi+UDExiwAPi3nyll/VqvQrWUVKopKoaj/G+rurStb7uFY++/VUXpnGR/3u42INbVuMDZW99W+91bdl6N3RD/ViznVO58YPLpFXalscUR/cfHFP/SP6A+98/NffPP4H39ZjntV1e2duK8X02/ijt9tU2OLff7Jhqr6drHF21uOW5yDdRrVJC5FHPjOhRfjyMuvXnxg8cLZ5xaeW3i+Wh0brzxUqTxcjaHyVKHf7JApADev3T9jZ9uIW/pdJA9td1Xdr3h3XP6TgpF4Jl6IpSjOAO7uxd69edx3iyvxNX+GcP8uV63Daz7h5f5dri1XY6ubY5PYJnZszSP25Z+VzUfX5L8DAK6LkzvU4V3q/+VX5u/f5bp7fS3fcHUc29fyrXz1mj4aAHBzyNofJsPdN5N2O597enRiYrTWncnSdqv+VNrOJ6ezNG92s3Z9ptacztK5dqvbqq+8cDyZddLO/Nxcq91Np1rtNAY6+enyk9/T/ke/d7LZWrOb1ztzjazWydJ6q9mt1bvpZN6pp3PzTzTyzkzWLjfuzGX1fCqv17p5q5l2WvPtejaSpp0sWxOYT2bNbj6VF4vNdK6dz9balyKiMT+bpZNZp97O57qtXocrY+XNqVZ7tux2ZPPu/+16P94AcCN4+dWL588uLS28dHULf91L8Ke9jwDAeqo0AAAAAAAAAAAAAADc+Da/Xa9Y+wneEXhlCwfjmg9xEy18rT8lY29NsXSDJPbpLXzrscfObxfzxGt3zuytn61/UrZ6q+ubhyNuefenvTWPbx/8/f7P3/7s6XsRcRWbLyc7xKw7TNxynQ9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCl/wcAAP//ez9qPw==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 19.608048664s ago: executing program 3 (id=3967): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000020000d0000ffffff0e002c00"/28], 0x50) r0 = syz_open_procfs(0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x40, 0x1) linkat(r0, 0x0, r1, 0x0, 0x3bf9b369339f69a4) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd7e67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000811000002c00128008000100736974002000028014000b00fe88000000000000000000000000010108000300ac"], 0x4c}}, 0x8000) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b02000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYBLOB="60b80000", @ANYRES16=r7], 0x60}, 0x1, 0x0, 0x0, 0x4040410}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 1) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x1c, &(0x7f00000001c0)=ANY=[@ANYRES16=r9, @ANYRES8=r10, @ANYRES32=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 19.607629824s ago: executing program 32 (id=3967): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000020000d0000ffffff0e002c00"/28], 0x50) r0 = syz_open_procfs(0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x40, 0x1) linkat(r0, 0x0, r1, 0x0, 0x3bf9b369339f69a4) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd7e67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000811000002c00128008000100736974002000028014000b00fe88000000000000000000000000010108000300ac"], 0x4c}}, 0x8000) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b02000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYBLOB="60b80000", @ANYRES16=r7], 0x60}, 0x1, 0x0, 0x0, 0x4040410}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 1) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x1c, &(0x7f00000001c0)=ANY=[@ANYRES16=r9, @ANYRES8=r10, @ANYRES32=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 8.949190764s ago: executing program 4 (id=4213): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000008000000000000000080000000000000", @ANYRES32, @ANYBLOB="0600000000000000000000000900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="ca00000000000000001cf9ffffffffffffff000000000018000000b1a37957f376abb88c225719c77c5b1a5439a5eef54ece3a1ceaee37cbe0b3ec7812d8dc168545b2fc3df250e7d5010017cae9f30f095c6cb993ec26039d7e47ec7c92d9b1dd1c01c3cb1ae5757ec15b0e76686a2e9a4053d49f8c28956cc2e142a71e4735e6010bf0933307920a9d1900804cfcc958787df1b69264842df260ff8579327d2dc49bac6172c40ecf6aac1dff0b5a048b4eb8a4b4dfa8a51e6ccb6f08bad15517965d107544e2082ba0d635fc28a83a7d3ab8cba1951fef5c68560dc46068246a1c35cae378aa031952c06c58e64009bb6e633bb604b2ab", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = getpgrp(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x649adcb5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f00000004c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ftruncate(0xffffffffffffffff, 0xc17a) clock_gettime(0x0, &(0x7f0000000380)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x8, &(0x7f00000001c0)=[{0xf, 0x4d, 0x20, 0x2}, {0x7, 0x8, 0x9, 0x6}, {0x2d, 0x7, 0x7b, 0x1ff}, {0x6, 0x5, 0x0, 0x7fff}, {0x9, 0x7, 0x6, 0xfffffffc}, {0x8, 0x0, 0x9, 0x7}, {0x8, 0x3, 0x7, 0x7}, {0x3, 0xfe, 0x1, 0xc38f}]}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b70200ac62e29b0000", @ANYRES32=r4, @ANYRESHEX=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r14}, 0x18) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000ac0)=ANY=[@ANYRES32=r13, @ANYRES32=r7, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES32=r6, @ANYBLOB="ab3b215019b465682c0445c9e3393dbfccec1a3bfda16ca5da1cbef993bb29f9cf348ece887cc022e4bdf3e85eebbf14c190ac4136c819e7e720ed9396c7db2cc399580cf08c07160f0af9716b4757dc72eb87daa41323c3c0cd9db3fb0b465eafbefd259fcb1337a9b112d9b55b6573a09804d885b46a074387138c5fa6fb17c664c2cdbec08b668d3ad53de0d562dee7e410e20d92a6923a1ca6ddddc30d887723a9"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0xfffffffffffffd94, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r5, @ANYRES8=r9, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x845}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@empty, 0x4e21, 0x2, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x0, r12, r16}, {0xaa61, 0x8000000002, 0x100000001, 0x5, 0x0, 0x8a, 0xd532}, {0x6, 0x6, 0x3ff, 0x1}, 0xffffffff, 0x6e6bb0, 0x1, 0x0, 0x2, 0x1}, {{@in=@local, 0x4d2, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80003501, 0x3, 0x1, 0x3, 0x40100, 0xffff8001, 0x10000}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x40000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 8.830945686s ago: executing program 4 (id=4217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}}, 0x0) 8.809458118s ago: executing program 4 (id=4219): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x25, 0xf, 0x4, 0x3, 0xb, 0xac, 0x5, 0x2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x2, &(0x7f0000000340)=[{0x109, 0x6, 0x5, 0xfffffffd}, {0x3, 0x7, 0x6, 0x4}]}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, 0xffffffffffffffff, 0x43) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x1, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) fsync(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r7}, 0x10) syz_io_uring_setup(0x371d, &(0x7f00000004c0)={0x0, 0x10ea, 0x4000, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)=0xc7, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@private=0xa010100, 0x4, 0x33}, 0xa, @in6=@mcast1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 8.29729037s ago: executing program 4 (id=4231): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 8.167326773s ago: executing program 4 (id=4237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x40000000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x2}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400000000000200"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 7.976129232s ago: executing program 4 (id=4244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7}]}]}, 0xfc}}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000482a995dfca08f3ad6529a308fba753762da5fd086633ded6a6048962712028a926b27b2144a4be64071f55bd16e644b030000008eb4cc13031f6371e12842c9f26d4d2d6144d949eb2bcfd2018c88d93635facb31644e83971e57acbade4adcfdb473d6ee226d3ab421f98979eae017bfc9a6ab5ce9759ac9ea61c9b63a3acf97bbbac2864468a14b6f20b5aee216709dc74bafdc03c9fa0b81a6506dab582ad513e36cff7bf200"/187, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000000640)=""/194, 0xc2}], 0x4, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2065) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40060480) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r9 = dup(r8) unshare(0x22020400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 1.922234145s ago: executing program 2 (id=4356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f200850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x100000100, 'team0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x29, 0x2, 0x40}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@set2={{0x28}, {{0x2, 0x1, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (fail_nth: 4) 1.851970463s ago: executing program 5 (id=4358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x44014) 1.628061305s ago: executing program 5 (id=4359): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.627675605s ago: executing program 2 (id=4360): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = getpgid(0x0) capset(&(0x7f00000005c0)={0x20080522, r1}, &(0x7f0000000600)={0x46, 0x101, 0xffffffff, 0x8335, 0xe1be}) listen(r0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) r4 = syz_clone(0x81888000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000680)={0x6f, 0x1, 0x4}) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r8, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f00000003c0)={0x7, 0x8, 0xa02a}) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r9 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) 1.523406036s ago: executing program 2 (id=4362): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2509000000840004801300010062726f6164636173742d6c696e6b00004c00078008000400070000000800020082b00000080001000200000008000400d5"], 0x98}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x7) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00'}, 0x62) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 1.426664986s ago: executing program 1 (id=4365): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$eJzs3U1sHOUZAOB3HJsEI6WIVimKQpgEKgUJzHoNpi4HWNZje2C9a+2uq0RVRSNwkBUHKBS15AJRJWirVlVPPVKu3HqjqtRKPbQ9VSqHXnpD4lRRqX+iqpBczew6/v9JcEIgz2PF3+zsO9/3zmY978za+20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUJyuV0SQa+bfnT6fbq0+2W7M73L/S32/XNes8vm7ciKT4F4cOxUf/6q370urdR4pvJ+NY79axOFQ0h+LibUduf/SLgwMr2++Q0NU6sce4JOL1IqnzZ5eWFl66BolcRz/69RVv8t/l4vt01sw7rXy2Np2leaeVToyPVx6cmeqkU3kj65zpdLPZtN7Oat1WOz1Vvy8dnZgYS7ORM6355vRkrZGtrHzkgWqlMp4+OTKX1dqdVvPBJ6NTn8kbjbw5XcZUK9+NIuaR4on4VN5Nu1ltNk3PLS4tjK3JKtkq1SJodKs7DvSeP8fuvf2DV97/5+JC8YTcbn+T/hOzOjparY6OPzzx8COVymC1Ul2/orJBXI6IgYgi4po8afkM2d8DOHwCA/36H43IoxnzcTrSDV9DETEU9ZiMdrRitlj3l6FNUX0r9f8rD/79TzuNu7b+r1T5O1fvPhpl/T/eu3V8u/q/KYsdv4auKHpPXy/Hq3ExzsfZWIqlWIiX9rf/g/ue8cAn7SFZd2s6smhGHp1oRR6zUSvXpP01aUzEeIxHJZ6OmZiKTqQxFXk0IotOnIlOdCMrn1H1aEcWtehGK9qRxqmox32RxmhMxESMRRpZjMSZaMV8NGM6Hoha2cu5WCwf97ENWR65NX713J8/eKtYvhw0utNuFSdzRdA/dgjaVO53rP/Ly8X5wsYI9f9mdw2O4nB1llfqPwAAAPC5lZSvviflS/x3lUtTeSP7xh627A5eh/QAAACAfVD+5v9Y0QwVS3dFUlz/V7aIfO+65wYAAADsj6R8j10SEcNxd2/pXCzG67EQW70IAAAAAHwGlb//P140wxGvlStWpktx/Q8AAACfEz/Ybo7991fm2O3MHUx+U84BnFyaO31vcqFWxNUuHOht12++frnH7tTR5HC/k7IZH7x4WxIRg/XsWLIy++XHB3vth+X3o6tzCWw313/Sbu+YQOycQHkrfhwnejEnnu21z/bvSXqjDE/ljWyk3mo8Wk6JWPzrvvL84vciitF/2Jw9nMS5xaWFkWdeWHq2zOVS0culC/0JFNfNo7j8hR1zWe4/AnHX1ns8VL4Roz/ucG/cytr9Hyi3/t9yOc/stvufrB3zjTjZizk53GuHV+7pjXmoGHN05NHRqNUOD3Sz091XltfsfT+L0d32fJf/hTfinl7MPafu6TVbZFFdl8Xzm7Oors2i91jEwD5l8daJ107/5/etJBvbLYuxK8hi+UDExiwAPi3nyll/VqvQrWUVKopKoaj/G+rurStb7uFY++/VUXpnGR/3u42INbVuMDZW99W+91bdl6N3RD/ViznVO58YPLpFXalscUR/cfHFP/SP6A+98/NffPP4H39ZjntV1e2duK8X02/ijt9tU2OLff7Jhqr6drHF21uOW5yDdRrVJC5FHPjOhRfjyMuvXnxg8cLZ5xaeW3i+Wh0brzxUqTxcjaHyVKHf7JApADev3T9jZ9uIW/pdJA9td1Xdr3h3XP6TgpF4Jl6IpSjOAO7uxd69edx3iyvxNX+GcP8uV63Daz7h5f5dri1XY6ubY5PYJnZszSP25Z+VzUfX5L8DAK6LkzvU4V3q/+VX5u/f5bp7fS3fcHUc29fyrXz1mj4aAHBzyNofJsPdN5N2O597enRiYrTWncnSdqv+VNrOJ6ezNG92s3Z9ptacztK5dqvbqq+8cDyZddLO/Nxcq91Np1rtNAY6+enyk9/T/ke/d7LZWrOb1ztzjazWydJ6q9mt1bvpZN6pp3PzTzTyzkzWLjfuzGX1fCqv17p5q5l2WvPtejaSpp0sWxOYT2bNbj6VF4vNdK6dz9balyKiMT+bpZNZp97O57qtXocrY+XNqVZ7tux2ZPPu/+16P94AcCN4+dWL588uLS28dHULf91L8Ke9jwDAeqo0AAAAAAAAAAAAAADc+Da/Xa9Y+wneEXhlCwfjmg9xEy18rT8lY29NsXSDJPbpLXzrscfObxfzxGt3zuytn61/UrZ6q+ubhyNuefenvTWPbx/8/f7P3/7s6XsRcRWbLyc7xKw7TNxynQ9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCl/wcAAP//ez9qPw==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.426377076s ago: executing program 5 (id=4366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173"], 0x5c}}, 0x0) 1.402759118s ago: executing program 2 (id=4368): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a190", 0x32}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="9a91a5a3a592bafb94ffece9d27c1c575d6c718de75e6815e3362fad71091ef0b4d831be0f31d33cfd5786a337da031adcc6aabcf77d403c9704c4024b72ff31e30211aeab913360da7d845e34350b569a0487e4f670be55ed44400835754aeddfc79546890cab813647b69c8ce61d428fcdad9face3c716afb3ffb974efa9736f21d7195ec28d"], 0x3, 0x23e, &(0x7f0000000bc0)="$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") mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.364713772s ago: executing program 1 (id=4369): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.361127422s ago: executing program 5 (id=4370): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x40, 0x0, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c89ec7c178d3d401a0657e948c1e50e9f29438946924347e8c9a7f1d228cf082056214904d6e39350c2d1bf5443d0ef0296b0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000dd77150ae342b678cf23dc910efed8299cb025cb1a6c91b5ade8965b097a853e3185a4ed0cd0b4e4b42f4ce209a1c8d0ca0533a25b5888f5fe69f8df8fa657c466cfa3cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r9}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000002000900020073797a31000000000900010073797a30000000000800054000970020100011800c000100636f756e74657200400000000c0a010100000000000000000700000008000440000000020900010073797a30000000001800038014000080040001800c0005400000000000010001140000001000010000000000000000000384000a"], 0xd4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009140000001100010000000000e70000000000000a"], 0x64}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="00000000000600000000000000000000b7030000000000001400000083000000bf090000000000005509010000000000950000000008000000b7020000010000008500000085000000b7000000000000009500"/96], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x18) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r13, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000015c0)=ANY=[@ANYBLOB="500000000301010100000000000000000a000006180002801400018003000000ffffffff080002000a010102100001800c000280050001003a000000140019"], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x14) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@init_itable}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x16f) socket$nl_xfrm(0x10, 0x3, 0x6) 1.312271507s ago: executing program 1 (id=4372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000280), &(0x7f0000000480)=@udp6=r3, 0x2}, 0x20) 1.233177526s ago: executing program 1 (id=4374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0xe329, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0xfffd, 0xc0000001}, {0x3, 0x0, 0xa, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 1.079236391s ago: executing program 1 (id=4376): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x9, 0x500b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20044004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 995.91934ms ago: executing program 0 (id=4377): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x2000000, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) 938.759735ms ago: executing program 0 (id=4378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x40000000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00", @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x3c}}, 0x24000840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r6, 0x1, 0x0, 0x3, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) 938.065945ms ago: executing program 0 (id=4379): r0 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x230000, &(0x7f0000000180), 0xfa, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), 0x0}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x18) r5 = gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) umount2(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) r9 = dup(r8) ioctl$GIO_UNISCRNMAP(r9, 0x43403d0e, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) 802.786559ms ago: executing program 5 (id=4380): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, 0x0) 728.509426ms ago: executing program 0 (id=4381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173"], 0x5c}}, 0x0) 653.345824ms ago: executing program 5 (id=4382): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) stat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x3d}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000003c0)) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='tran3=rdma,port=0x0000000000004e23,access=', @ANYRESDEC=r0, @ANYBLOB=',rq=0x0000000000000009,timeout=0x0000000000000007,func=FIRMWARE_CHECK,\x00']) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r8}, 0x18) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) ioctl$BLKTRACESTART(r4, 0x1274, 0xfffffdfd) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./bus\x00', r4, &(0x7f0000000640)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 652.842134ms ago: executing program 0 (id=4383): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2509000000840004801300010062726f6164636173742d6c696e6b00004c00078008000400070000000800020082b00000080001000200000008000400d5"], 0x98}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x7) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00'}, 0x62) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 515.932098ms ago: executing program 0 (id=4384): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="440000001000010400894e934fb2a0e22f709030", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32=r3], 0x44}}, 0x40000c0) syz_usbip_server_init(0x6) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) syz_usbip_server_init(0x5) 427.557417ms ago: executing program 2 (id=4385): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = getpgid(0x0) capset(&(0x7f00000005c0)={0x20080522, r1}, &(0x7f0000000600)={0x46, 0x101, 0xffffffff, 0x8335, 0xe1be}) listen(r0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) r4 = syz_clone(0x81888000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000680)={0x6f, 0x1, 0x4}) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r8, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f00000003c0)={0x7, 0x8, 0xa02a}) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r9 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) 426.96µs ago: executing program 1 (id=4386): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000580)=[{0x200000000006, 0x0, 0x28, 0x7ffc1ffe}, {0x14f8, 0xf7, 0x15}, {0x2, 0x4, 0x40, 0x3}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0x8}, r2, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000500)=0x6, 0x0, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x5, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 0s ago: executing program 2 (id=4387): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) kernel console output (not intermixed with test programs): 9p: Bad value for 'rfdno' [ 248.345758][ T29] kauditd_printk_skb: 1724 callbacks suppressed [ 248.345777][ T29] audit: type=1326 audit(257.197:57043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.375160][ T29] audit: type=1326 audit(257.197:57044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.490796][ T29] audit: type=1326 audit(257.197:57045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.513979][ T29] audit: type=1326 audit(257.197:57046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.537032][ T29] audit: type=1326 audit(257.197:57047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.560055][ T29] audit: type=1326 audit(257.197:57048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.583277][ T29] audit: type=1326 audit(257.207:57049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.606330][ T29] audit: type=1326 audit(257.207:57050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.0.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.629484][ T29] audit: type=1326 audit(257.207:57051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.652146][ T29] audit: type=1326 audit(257.207:57052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 248.685927][T13732] netlink: 'syz.3.3542': attribute type 10 has an invalid length. [ 248.693843][T13732] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3542'. [ 249.023755][T13747] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 249.276124][T13755] can0: slcan on ttyS3. [ 249.311319][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3554'. [ 249.341399][T13758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3554'. [ 249.379582][T13755] can0 (unregistered): slcan off ttyS3. [ 249.422918][T13765] loop3: detected capacity change from 0 to 764 [ 249.603840][T13775] EXT4-fs: Ignoring removed orlov option [ 249.658701][T13775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.762153][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.832136][T13787] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.839657][T13787] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.930645][T13801] FAULT_INJECTION: forcing a failure. [ 249.930645][T13801] name failslab, interval 1, probability 0, space 0, times 0 [ 249.943583][T13801] CPU: 0 UID: 0 PID: 13801 Comm: syz.2.3570 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.943669][T13801] Tainted: [W]=WARN [ 249.943677][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.943690][T13801] Call Trace: [ 249.943697][T13801] [ 249.943706][T13801] __dump_stack+0x1d/0x30 [ 249.943732][T13801] dump_stack_lvl+0x95/0xd0 [ 249.943756][T13801] dump_stack+0x15/0x1b [ 249.943857][T13801] should_fail_ex+0x265/0x280 [ 249.943888][T13801] should_failslab+0x8c/0xb0 [ 249.943928][T13801] __kvmalloc_node_noprof+0x149/0x6b0 [ 249.944035][T13801] ? nf_hook_entries_grow+0x1c1/0x460 [ 249.944077][T13801] ? should_fail_ex+0x30/0x280 [ 249.944105][T13801] nf_hook_entries_grow+0x1c1/0x460 [ 249.944167][T13801] __nf_register_net_hook+0x18e/0x480 [ 249.944206][T13801] ? __rcu_read_unlock+0x4f/0x70 [ 249.944227][T13801] nf_register_net_hook+0x88/0x130 [ 249.944264][T13801] nf_register_net_hooks+0x44/0x150 [ 249.944337][T13801] ip_vs_register_hooks+0x9b/0xe0 [ 249.944361][T13801] ip_vs_add_service+0x244/0xa70 [ 249.944471][T13801] ? selinux_capable+0x31/0x40 [ 249.944495][T13801] ? should_fail_ex+0xdb/0x280 [ 249.944527][T13801] do_ip_vs_set_ctl+0x6ec/0x8c0 [ 249.944576][T13801] nf_setsockopt+0x199/0x1b0 [ 249.944620][T13801] ip_setsockopt+0x102/0x110 [ 249.944657][T13801] sctp_setsockopt+0x116/0xe30 [ 249.944699][T13801] sock_common_setsockopt+0x69/0x80 [ 249.944802][T13801] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 249.944838][T13801] __sys_setsockopt+0x184/0x200 [ 249.944929][T13801] __x64_sys_setsockopt+0x64/0x80 [ 249.944961][T13801] x64_sys_call+0x21d5/0x3000 [ 249.945017][T13801] do_syscall_64+0xca/0x2b0 [ 249.945057][T13801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.945079][T13801] RIP: 0033:0x7f152459f749 [ 249.945170][T13801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.945195][T13801] RSP: 002b:00007f1523007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.945235][T13801] RAX: ffffffffffffffda RBX: 00007f15247f5fa0 RCX: 00007f152459f749 [ 249.945252][T13801] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 249.945267][T13801] RBP: 00007f1523007090 R08: 000000000000002c R09: 0000000000000000 [ 249.945280][T13801] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 249.945292][T13801] R13: 00007f15247f6038 R14: 00007f15247f5fa0 R15: 00007fff0a291f08 [ 249.945312][T13801] [ 249.961915][T13803] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 250.210623][T13803] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 250.221254][T13803] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #32: comm syz.3.3569: iget: special inode unallocated [ 250.235338][T13803] EXT4-fs (loop3): Remounting filesystem read-only [ 250.242044][T13803] EXT4-fs (loop3): no journal found [ 250.247321][T13803] EXT4-fs (loop3): can't get journal size [ 250.261184][T13803] EXT4-fs (loop3): filesystem is read-only [ 250.273567][T13805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3566'. [ 250.335961][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.377610][T13787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.520946][ T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.546300][ T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.592456][ T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.630739][ T52] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.646120][T13818] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 250.674652][T13822] netlink: 24 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 250.705970][T13822] FAULT_INJECTION: forcing a failure. [ 250.705970][T13822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.719146][T13822] CPU: 1 UID: 0 PID: 13822 Comm: wÞ£ÿ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 250.719217][T13822] Tainted: [W]=WARN [ 250.719225][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.719238][T13822] Call Trace: [ 250.719247][T13822] [ 250.719257][T13822] __dump_stack+0x1d/0x30 [ 250.719289][T13822] dump_stack_lvl+0x95/0xd0 [ 250.719319][T13822] dump_stack+0x15/0x1b [ 250.719408][T13822] should_fail_ex+0x265/0x280 [ 250.719433][T13822] should_fail+0xb/0x20 [ 250.719464][T13822] should_fail_usercopy+0x1a/0x20 [ 250.719557][T13822] _copy_from_user+0x1c/0xb0 [ 250.719595][T13822] ___sys_sendmsg+0xc1/0x1d0 [ 250.719680][T13822] __x64_sys_sendmsg+0xd4/0x160 [ 250.719723][T13822] x64_sys_call+0x17ba/0x3000 [ 250.719763][T13822] do_syscall_64+0xca/0x2b0 [ 250.719835][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.719869][T13822] RIP: 0033:0x7f152459f749 [ 250.719890][T13822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.719910][T13822] RSP: 002b:00007f1523007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.720010][T13822] RAX: ffffffffffffffda RBX: 00007f15247f5fa0 RCX: 00007f152459f749 [ 250.720031][T13822] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 250.720044][T13822] RBP: 00007f1523007090 R08: 0000000000000000 R09: 0000000000000000 [ 250.720067][T13822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.720094][T13822] R13: 00007f15247f6038 R14: 00007f15247f5fa0 R15: 00007fff0a291f08 [ 250.720145][T13822] [ 250.901286][T13824] EXT4-fs: Ignoring removed orlov option [ 251.174160][T13845] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 251.193998][T13845] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 251.212833][T13845] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: inode #32: comm syz.1.3585: iget: special inode unallocated [ 251.233832][T13853] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 251.246206][T13845] EXT4-fs (loop1): Remounting filesystem read-only [ 251.253100][T13845] EXT4-fs (loop1): no journal found [ 251.258399][T13845] EXT4-fs (loop1): can't get journal size [ 251.282413][T13845] EXT4-fs (loop1): filesystem is read-only [ 251.313719][T13856] SELinux: failed to load policy [ 251.474282][T13871] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 251.555007][T13879] netlink: 'syz.2.3599': attribute type 7 has an invalid length. [ 251.605034][T13884] __nla_validate_parse: 2 callbacks suppressed [ 251.605052][T13884] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3601'. [ 251.612656][T13886] set_capacity_and_notify: 8 callbacks suppressed [ 251.612711][T13886] loop3: detected capacity change from 0 to 1024 [ 251.620599][T13884] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 251.629506][T13886] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 251.652539][T13886] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 251.663804][T13886] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #32: comm syz.3.3602: iget: special inode unallocated [ 251.676805][T13886] EXT4-fs (loop3): Remounting filesystem read-only [ 251.685489][T13886] EXT4-fs (loop3): no journal found [ 251.690795][T13886] EXT4-fs (loop3): can't get journal size [ 251.701326][T13886] EXT4-fs (loop3): filesystem is read-only [ 251.710747][T13892] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 251.738089][T13894] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3605'. [ 251.831512][T13902] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3609'. [ 251.840850][T13903] loop2: detected capacity change from 0 to 764 [ 251.945324][T13913] netlink: 'syz.2.3613': attribute type 10 has an invalid length. [ 251.953388][T13913] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3613'. [ 252.086909][T13920] loop2: detected capacity change from 0 to 764 [ 252.142630][T13926] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=13926 comm=syz.2.3619 [ 252.176691][T13926] loop2: detected capacity change from 0 to 512 [ 252.191537][T13926] EXT4-fs: Ignoring removed oldalloc option [ 252.209266][T13926] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.3619: Parent and EA inode have the same ino 15 [ 252.223146][T13926] EXT4-fs (loop2): 1 orphan inode deleted [ 252.230416][T13930] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3620'. [ 252.239545][T13930] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 252.248934][T13926] EXT4-fs mount: 8 callbacks suppressed [ 252.248954][T13926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.296394][T13934] loop1: detected capacity change from 0 to 764 [ 252.312380][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.399368][T13941] loop2: detected capacity change from 0 to 1024 [ 252.404664][T13942] loop1: detected capacity change from 0 to 1024 [ 252.408796][T13941] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 252.422019][T13941] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 252.422995][T13942] EXT4-fs: Ignoring removed orlov option [ 252.435786][T13941] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: inode #32: comm syz.2.3624: iget: special inode unallocated [ 252.450725][T13941] EXT4-fs (loop2): Remounting filesystem read-only [ 252.457505][T13941] EXT4-fs (loop2): no journal found [ 252.462399][T13942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.462771][T13941] EXT4-fs (loop2): can't get journal size [ 252.482264][T13941] EXT4-fs (loop2): filesystem is read-only [ 252.488747][T13941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 252.513236][T13003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.523804][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.557276][T13949] loop2: detected capacity change from 0 to 764 [ 252.581571][T13947] loop1: detected capacity change from 0 to 4096 [ 252.599242][T13947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.622289][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3626'. [ 252.638313][T13958] loop4: detected capacity change from 0 to 764 [ 252.695708][T13962] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3632'. [ 252.704988][T13962] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 252.737656][T13003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.748092][T13968] EXT4-fs (loop4): failed to initialize system zone (-117) [ 252.764839][T13968] EXT4-fs (loop4): mount failed [ 252.850677][T13980] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3638'. [ 252.926881][T13984] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 253.113397][ T29] kauditd_printk_skb: 849 callbacks suppressed [ 253.113415][ T29] audit: type=1326 audit(262.205:57902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13983 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8b9f3cf749 code=0x7ffc0000 [ 253.328473][T14013] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 253.355936][T14013] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 253.370252][ T29] audit: type=1400 audit(262.467:57903): avc: denied { append } for pid=14016 comm="syz.0.3655" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 253.408540][T14013] EXT4-fs (loop1): orphan cleanup on readonly fs [ 253.415479][T14019] EXT4-fs: Ignoring removed orlov option [ 253.425522][T14013] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 253.447438][T14019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.479498][T14013] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 253.484364][ T29] audit: type=1400 audit(262.509:57904): avc: denied { ioctl } for pid=14016 comm="syz.0.3655" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 253.492181][T14013] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3652: Failed to acquire dquot type 0 [ 253.514046][ T29] audit: type=1326 audit(262.509:57905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.0.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 253.514083][ T29] audit: type=1326 audit(262.509:57906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.0.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 253.514117][ T29] audit: type=1326 audit(262.509:57907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.0.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 253.514208][ T29] audit: type=1326 audit(262.509:57908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.0.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 253.514244][ T29] audit: type=1326 audit(262.509:57909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.0.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 253.679210][T14013] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3652: Failed to acquire dquot type 0 [ 253.703837][T14013] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.3652: Freeing blocks not in datazone - block = 0, count = 4096 [ 253.718901][T12303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.759742][T14013] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3652: Failed to acquire dquot type 0 [ 253.808173][T14013] EXT4-fs (loop1): 1 orphan inode deleted [ 253.832227][T14013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.846281][T14037] netlink: 'syz.3.3662': attribute type 10 has an invalid length. [ 253.854200][T14037] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3662'. [ 253.906757][T14013] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.3652: iget: bad extended attribute block 6 [ 254.142128][T14059] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.173893][T14057] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 254.200864][T14057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.214970][T14057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.265638][T14062] wireguard0: entered promiscuous mode [ 254.271183][T14062] wireguard0: entered allmulticast mode [ 254.307654][T14066] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 254.316403][T14066] FAT-fs (loop2): Filesystem has been set read-only [ 254.427791][T14013] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.476579][T14072] syz!: rxe_newlink: already configured on team_slave_0 [ 254.754519][T14068] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3673: EA inode hash validation failed [ 254.759732][T14081] netlink: 'syz.4.3677': attribute type 10 has an invalid length. [ 254.775112][T14081] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3677'. [ 254.778180][T14068] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3673: corrupted inode contents [ 254.818197][T14068] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.3673: mark_inode_dirty error [ 254.837406][T14068] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.3673: corrupted inode contents [ 254.861604][T14068] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.3673: mark_inode_dirty error [ 254.906979][T14088] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 254.933955][T14068] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.3673: mark inode dirty (error -117) [ 254.991055][T14068] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 255.006651][T14095] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 255.024450][T14068] EXT4-fs (loop3): 1 orphan inode deleted [ 255.037680][T14068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.171551][T12303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.344716][T14120] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 255.377007][T14122] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 255.392872][T14125] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 255.535424][T14125] vhci_hcd vhci_hcd.2: invalid port number 96 [ 255.541747][T14125] vhci_hcd vhci_hcd.2: default hub control req: 8011 v0005 i0060 l7 [ 255.557228][T14130] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 255.576155][T14127] Process accounting resumed [ 255.619956][T14128] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 255.945301][T14167] EXT4-fs: Ignoring removed orlov option [ 256.008406][T14167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.109185][T14188] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 256.160980][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.253828][T14195] FAULT_INJECTION: forcing a failure. [ 256.253828][T14195] name failslab, interval 1, probability 0, space 0, times 0 [ 256.266621][T14195] CPU: 1 UID: 0 PID: 14195 Comm: syz.4.3723 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 256.266666][T14195] Tainted: [W]=WARN [ 256.266722][T14195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.266740][T14195] Call Trace: [ 256.266750][T14195] [ 256.266760][T14195] __dump_stack+0x1d/0x30 [ 256.266786][T14195] dump_stack_lvl+0x95/0xd0 [ 256.266808][T14195] dump_stack+0x15/0x1b [ 256.266844][T14195] should_fail_ex+0x265/0x280 [ 256.266875][T14195] should_failslab+0x8c/0xb0 [ 256.266904][T14195] __kmalloc_cache_noprof+0x65/0x4c0 [ 256.266932][T14195] ? kernfs_get_tree+0x56/0x4a0 [ 256.266969][T14195] kernfs_get_tree+0x56/0x4a0 [ 256.266991][T14195] ? selinux_capable+0x31/0x40 [ 256.267022][T14195] sysfs_get_tree+0x26/0xa0 [ 256.267122][T14195] vfs_get_tree+0x57/0x1d0 [ 256.267182][T14195] do_new_mount+0x24d/0x6a0 [ 256.267201][T14195] ? security_capable+0x83/0x90 [ 256.267244][T14195] path_mount+0x4ab/0xb80 [ 256.267274][T14195] ? user_path_at+0xbf/0x130 [ 256.267315][T14195] __se_sys_mount+0x28c/0x2e0 [ 256.267409][T14195] ? fput+0x8f/0xc0 [ 256.267524][T14195] __x64_sys_mount+0x67/0x80 [ 256.267577][T14195] x64_sys_call+0x2cca/0x3000 [ 256.267653][T14195] do_syscall_64+0xca/0x2b0 [ 256.267758][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.267788][T14195] RIP: 0033:0x7f9ff5aef749 [ 256.267820][T14195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.267852][T14195] RSP: 002b:00007f9ff454f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.267878][T14195] RAX: ffffffffffffffda RBX: 00007f9ff5d45fa0 RCX: 00007f9ff5aef749 [ 256.267896][T14195] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 256.267913][T14195] RBP: 00007f9ff454f090 R08: 0000000000000000 R09: 0000000000000000 [ 256.267930][T14195] R10: 0000000002800008 R11: 0000000000000246 R12: 0000000000000001 [ 256.267964][T14195] R13: 00007f9ff5d46038 R14: 00007f9ff5d45fa0 R15: 00007ffe3f23ddb8 [ 256.267984][T14195] [ 256.481396][T14193] __nla_validate_parse: 2 callbacks suppressed [ 256.481417][T14193] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3722'. [ 256.496706][T14193] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 256.778496][T14224] set_capacity_and_notify: 15 callbacks suppressed [ 256.778518][T14224] loop2: detected capacity change from 0 to 764 [ 256.938306][T14240] loop2: detected capacity change from 0 to 1024 [ 257.002937][T14243] loop3: detected capacity change from 0 to 256 [ 257.123257][T14250] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3739'. [ 257.276555][T14239] lo speed is unknown, defaulting to 1000 [ 257.636394][T14268] FAULT_INJECTION: forcing a failure. [ 257.636394][T14268] name failslab, interval 1, probability 0, space 0, times 0 [ 257.649293][T14268] CPU: 0 UID: 0 PID: 14268 Comm: syz.2.3749 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.649375][T14268] Tainted: [W]=WARN [ 257.649384][T14268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.649399][T14268] Call Trace: [ 257.649407][T14268] [ 257.649415][T14268] __dump_stack+0x1d/0x30 [ 257.649441][T14268] dump_stack_lvl+0x95/0xd0 [ 257.649465][T14268] dump_stack+0x15/0x1b [ 257.649496][T14268] should_fail_ex+0x265/0x280 [ 257.649528][T14268] should_failslab+0x8c/0xb0 [ 257.649554][T14268] __kmalloc_cache_noprof+0x65/0x4c0 [ 257.649579][T14268] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 257.649672][T14268] ? mutex_unlock+0x4f/0x90 [ 257.649710][T14268] __se_sys_memfd_create+0x1d6/0x6b0 [ 257.649822][T14268] __x64_sys_memfd_create+0x31/0x40 [ 257.649866][T14268] x64_sys_call+0x28cb/0x3000 [ 257.649930][T14268] do_syscall_64+0xca/0x2b0 [ 257.649970][T14268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.649996][T14268] RIP: 0033:0x7f152459f749 [ 257.650027][T14268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.650124][T14268] RSP: 002b:00007f1523006e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 257.650147][T14268] RAX: ffffffffffffffda RBX: 0000000000000556 RCX: 00007f152459f749 [ 257.650165][T14268] RDX: 00007f1523006ef0 RSI: 0000000000000000 RDI: 00007f1524624960 [ 257.650181][T14268] RBP: 0000200000000840 R08: 00007f1523006bb7 R09: 00007f1523006e40 [ 257.650198][T14268] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 257.650214][T14268] R13: 00007f1523006ef0 R14: 00007f1523006eb0 R15: 0000200000000000 [ 257.650241][T14268] [ 257.937851][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 257.938003][ T29] audit: type=1326 audit(267.266:58306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.2.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 258.069971][T14275] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 258.076392][T14273] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 258.094202][ T29] audit: type=1326 audit(267.297:58307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.2.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 258.117277][ T29] audit: type=1326 audit(267.297:58308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.2.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 258.140339][ T29] audit: type=1326 audit(267.318:58309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.2.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 258.163377][ T29] audit: type=1326 audit(267.318:58310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.2.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 258.186567][ T29] audit: type=1326 audit(267.318:58311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.2.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 258.209615][ T29] audit: type=1326 audit(267.318:58312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.2.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 258.413800][T14282] loop3: detected capacity change from 0 to 764 [ 258.589466][ T29] audit: type=1326 audit(267.717:58313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.0.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 258.612537][ T29] audit: type=1326 audit(267.717:58314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.0.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 258.635561][ T29] audit: type=1326 audit(267.717:58315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.0.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 258.847346][T14309] loop4: detected capacity change from 0 to 764 [ 258.913243][T14313] loop3: detected capacity change from 0 to 2048 [ 258.952892][T14313] EXT4-fs (loop3): failed to initialize system zone (-117) [ 258.960167][T14313] EXT4-fs (loop3): mount failed [ 258.999789][T14321] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 259.025236][T14313] FAULT_INJECTION: forcing a failure. [ 259.025236][T14313] name failslab, interval 1, probability 0, space 0, times 0 [ 259.038039][T14313] CPU: 0 UID: 0 PID: 14313 Comm: syz.3.3767 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 259.038073][T14313] Tainted: [W]=WARN [ 259.038080][T14313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.038093][T14313] Call Trace: [ 259.038102][T14313] [ 259.038112][T14313] __dump_stack+0x1d/0x30 [ 259.038162][T14313] dump_stack_lvl+0x95/0xd0 [ 259.038192][T14313] dump_stack+0x15/0x1b [ 259.038298][T14313] should_fail_ex+0x265/0x280 [ 259.038322][T14313] should_failslab+0x8c/0xb0 [ 259.038396][T14313] __kmalloc_cache_noprof+0x65/0x4c0 [ 259.038429][T14313] ? alloc_fs_context+0x46/0x590 [ 259.038460][T14313] alloc_fs_context+0x46/0x590 [ 259.038531][T14313] fs_context_for_mount+0x22/0x30 [ 259.038560][T14313] do_new_mount+0xea/0x6a0 [ 259.038586][T14313] ? security_capable+0x83/0x90 [ 259.038657][T14313] path_mount+0x4ab/0xb80 [ 259.038681][T14313] ? user_path_at+0xbf/0x130 [ 259.038737][T14313] __se_sys_mount+0x28c/0x2e0 [ 259.038769][T14313] __x64_sys_mount+0x67/0x80 [ 259.038797][T14313] x64_sys_call+0x2cca/0x3000 [ 259.038901][T14313] do_syscall_64+0xca/0x2b0 [ 259.038950][T14313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.038977][T14313] RIP: 0033:0x7f9d02a7f749 [ 259.038993][T14313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.039083][T14313] RSP: 002b:00007f9d014df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 259.039109][T14313] RAX: ffffffffffffffda RBX: 00007f9d02cd5fa0 RCX: 00007f9d02a7f749 [ 259.039127][T14313] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 259.039144][T14313] RBP: 00007f9d014df090 R08: 0000200000000000 R09: 0000000000000000 [ 259.039160][T14313] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000001 [ 259.039177][T14313] R13: 00007f9d02cd6038 R14: 00007f9d02cd5fa0 R15: 00007ffc1bc40a58 [ 259.039255][T14313] [ 259.201801][T14320] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3769'. [ 259.248755][T14320] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 259.300703][T14324] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 259.496820][T14339] loop3: detected capacity change from 0 to 1024 [ 259.542495][T14339] EXT4-fs: Ignoring removed orlov option [ 259.618859][T14339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.699409][T14352] loop2: detected capacity change from 0 to 764 [ 259.729515][T12303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.792626][T14357] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 259.813750][T14359] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 259.832690][T14361] netlink: 'syz.3.3781': attribute type 10 has an invalid length. [ 259.840639][T14361] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3781'. [ 259.928732][T14366] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3785'. [ 259.938051][T14366] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 260.012013][T14372] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3787'. [ 260.345250][T14393] loop4: detected capacity change from 0 to 764 [ 260.481512][T14401] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 260.600381][T14403] loop2: detected capacity change from 0 to 256 [ 260.982659][T14419] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 261.548707][T14440] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3811'. [ 261.714021][T14453] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 261.771527][T14459] FAULT_INJECTION: forcing a failure. [ 261.771527][T14459] name failslab, interval 1, probability 0, space 0, times 0 [ 261.784296][T14459] CPU: 0 UID: 0 PID: 14459 Comm: syz.0.3817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 261.784363][T14459] Tainted: [W]=WARN [ 261.784374][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.784391][T14459] Call Trace: [ 261.784399][T14459] [ 261.784461][T14459] __dump_stack+0x1d/0x30 [ 261.784491][T14459] dump_stack_lvl+0x95/0xd0 [ 261.784589][T14459] dump_stack+0x15/0x1b [ 261.784616][T14459] should_fail_ex+0x265/0x280 [ 261.784643][T14459] should_failslab+0x8c/0xb0 [ 261.784684][T14459] __kvmalloc_node_noprof+0x149/0x6b0 [ 261.784722][T14459] ? alloc_netdev_mqs+0x54f/0xa40 [ 261.784767][T14459] alloc_netdev_mqs+0x54f/0xa40 [ 261.784856][T14459] rtnl_create_link+0x239/0x6e0 [ 261.784921][T14459] rtnl_newlink_create+0x14c/0x620 [ 261.784961][T14459] ? security_capable+0x83/0x90 [ 261.785007][T14459] ? netlink_ns_capable+0x86/0xa0 [ 261.785105][T14459] rtnl_newlink+0xf5b/0x1360 [ 261.785141][T14459] ? xas_load+0x413/0x430 [ 261.785192][T14459] ? try_charge_memcg+0x215/0xa10 [ 261.785229][T14459] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 261.785256][T14459] ? __list_del_entry_valid_or_report+0x65/0x130 [ 261.785346][T14459] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 261.785379][T14459] ? __rcu_read_unlock+0x4f/0x70 [ 261.785405][T14459] ? avc_has_perm_noaudit+0xab/0x130 [ 261.785445][T14459] ? cred_has_capability+0x210/0x280 [ 261.785550][T14459] ? selinux_capable+0x31/0x40 [ 261.785572][T14459] ? security_capable+0x83/0x90 [ 261.785692][T14459] ? ns_capable+0x7d/0xb0 [ 261.785732][T14459] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.785758][T14459] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 261.785786][T14459] ? avc_has_perm_noaudit+0xab/0x130 [ 261.785918][T14459] netlink_rcv_skb+0x123/0x220 [ 261.785959][T14459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.785989][T14459] rtnetlink_rcv+0x1c/0x30 [ 261.786006][T14459] netlink_unicast+0x5c0/0x690 [ 261.786119][T14459] netlink_sendmsg+0x58b/0x6b0 [ 261.786165][T14459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.786210][T14459] __sock_sendmsg+0x145/0x180 [ 261.786286][T14459] ____sys_sendmsg+0x31e/0x4a0 [ 261.786331][T14459] ___sys_sendmsg+0x17b/0x1d0 [ 261.786388][T14459] __x64_sys_sendmsg+0xd4/0x160 [ 261.786505][T14459] x64_sys_call+0x17ba/0x3000 [ 261.786532][T14459] do_syscall_64+0xca/0x2b0 [ 261.786606][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.786635][T14459] RIP: 0033:0x7fd67d69f749 [ 261.786652][T14459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.786678][T14459] RSP: 002b:00007fd67c107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.786707][T14459] RAX: ffffffffffffffda RBX: 00007fd67d8f5fa0 RCX: 00007fd67d69f749 [ 261.786790][T14459] RDX: 0000000024000800 RSI: 0000200000000280 RDI: 0000000000000006 [ 261.786820][T14459] RBP: 00007fd67c107090 R08: 0000000000000000 R09: 0000000000000000 [ 261.786838][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.786856][T14459] R13: 00007fd67d8f6038 R14: 00007fd67d8f5fa0 R15: 00007ffc2a32b348 [ 261.786887][T14459] [ 262.149447][T14463] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 262.689553][T14489] netlink: 'syz.1.3827': attribute type 10 has an invalid length. [ 262.697488][T14489] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3827'. [ 262.698582][T14487] set_capacity_and_notify: 2 callbacks suppressed [ 262.698631][T14487] loop2: detected capacity change from 0 to 1024 [ 262.719696][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 262.719762][ T29] audit: type=1326 audit(272.295:59100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.752326][T14487] EXT4-fs: Ignoring removed orlov option [ 262.758652][ T29] audit: type=1326 audit(272.326:59101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.781770][ T29] audit: type=1326 audit(272.326:59102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.804934][ T29] audit: type=1326 audit(272.326:59103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.827943][ T29] audit: type=1326 audit(272.326:59104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.851411][ T29] audit: type=1326 audit(272.358:59105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.870387][T14497] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 262.874584][ T29] audit: type=1326 audit(272.358:59106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.904854][ T29] audit: type=1326 audit(272.358:59107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.927887][ T29] audit: type=1326 audit(272.358:59108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.928095][T14491] loop1: detected capacity change from 0 to 764 [ 262.950916][ T29] audit: type=1326 audit(272.358:59109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd67d6d2005 code=0x7ffc0000 [ 262.985026][T14500] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 263.010270][T14487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.110841][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.278135][T14526] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 263.428616][T14529] loop4: detected capacity change from 0 to 2048 [ 263.506229][T14529] loop4: p1 p2 p3 [ 263.549431][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3842'. [ 263.707120][T14520] lo speed is unknown, defaulting to 1000 [ 263.758190][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3836'. [ 263.803041][T14549] sctp: [Deprecated]: syz.3.3850 (pid 14549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.803041][T14549] Use struct sctp_sack_info instead [ 263.924194][T14554] loop4: detected capacity change from 0 to 764 [ 263.985294][T14564] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3856'. [ 263.994607][T14564] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 264.127605][T14575] loop2: detected capacity change from 0 to 764 [ 264.193461][T14582] netlink: 'syz.2.3864': attribute type 10 has an invalid length. [ 264.201421][T14582] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3864'. [ 264.443234][T14594] loop1: detected capacity change from 0 to 1024 [ 264.465069][T14594] EXT4-fs: Ignoring removed orlov option [ 264.500805][T14594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.649360][T13003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.718467][T14601] loop1: detected capacity change from 0 to 764 [ 264.849598][T14608] loop2: detected capacity change from 0 to 128 [ 264.926875][T14613] loop4: detected capacity change from 0 to 764 [ 265.003345][T14618] netlink: 'syz.4.3879': attribute type 10 has an invalid length. [ 265.011413][T14618] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3879'. [ 265.033135][T14622] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 265.167155][T14636] loop3: detected capacity change from 0 to 1024 [ 265.230457][T14650] netlink: 'syz.2.3892': attribute type 10 has an invalid length. [ 265.238447][T14650] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3892'. [ 265.260923][T14651] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3887'. [ 265.422976][T14672] netlink: 'syz.2.3902': attribute type 10 has an invalid length. [ 265.430936][T14672] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3902'. [ 265.454181][T14674] netlink: 'syz.0.3903': attribute type 10 has an invalid length. [ 265.823370][T14709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.836584][T14709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.859565][T14713] FAULT_INJECTION: forcing a failure. [ 265.859565][T14713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.872763][T14713] CPU: 0 UID: 0 PID: 14713 Comm: syz.3.3918 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 265.872802][T14713] Tainted: [W]=WARN [ 265.872809][T14713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.872850][T14713] Call Trace: [ 265.872859][T14713] [ 265.872869][T14713] __dump_stack+0x1d/0x30 [ 265.872902][T14713] dump_stack_lvl+0x95/0xd0 [ 265.872932][T14713] dump_stack+0x15/0x1b [ 265.872959][T14713] should_fail_ex+0x265/0x280 [ 265.873001][T14713] should_fail+0xb/0x20 [ 265.873021][T14713] should_fail_usercopy+0x1a/0x20 [ 265.873112][T14713] _copy_from_user+0x1c/0xb0 [ 265.873141][T14713] ___sys_sendmsg+0xc1/0x1d0 [ 265.873194][T14713] __x64_sys_sendmsg+0xd4/0x160 [ 265.873250][T14713] x64_sys_call+0x17ba/0x3000 [ 265.873281][T14713] do_syscall_64+0xca/0x2b0 [ 265.873319][T14713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.873353][T14713] RIP: 0033:0x7f9d02a7f749 [ 265.873374][T14713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.873400][T14713] RSP: 002b:00007f9d014df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.873425][T14713] RAX: ffffffffffffffda RBX: 00007f9d02cd5fa0 RCX: 00007f9d02a7f749 [ 265.873441][T14713] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 265.873456][T14713] RBP: 00007f9d014df090 R08: 0000000000000000 R09: 0000000000000000 [ 265.873498][T14713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.873511][T14713] R13: 00007f9d02cd6038 R14: 00007f9d02cd5fa0 R15: 00007ffc1bc40a58 [ 265.873599][T14713] [ 266.099249][T14723] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 266.115855][T14719] loop2: p1 p2 p3 [ 266.231406][T14740] FAULT_INJECTION: forcing a failure. [ 266.231406][T14740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.244635][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.2.3930 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 266.244676][T14740] Tainted: [W]=WARN [ 266.244685][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.244774][T14740] Call Trace: [ 266.244783][T14740] [ 266.244793][T14740] __dump_stack+0x1d/0x30 [ 266.244824][T14740] dump_stack_lvl+0x95/0xd0 [ 266.244868][T14740] dump_stack+0x15/0x1b [ 266.244896][T14740] should_fail_ex+0x265/0x280 [ 266.244937][T14740] should_fail+0xb/0x20 [ 266.244964][T14740] should_fail_usercopy+0x1a/0x20 [ 266.245002][T14740] _copy_from_user+0x1c/0xb0 [ 266.245051][T14740] __sys_connect+0xd0/0x2b0 [ 266.245093][T14740] __x64_sys_connect+0x3f/0x50 [ 266.245125][T14740] x64_sys_call+0x2e09/0x3000 [ 266.245160][T14740] do_syscall_64+0xca/0x2b0 [ 266.245352][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.245378][T14740] RIP: 0033:0x7f152459f749 [ 266.245399][T14740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.245425][T14740] RSP: 002b:00007f1523007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 266.245471][T14740] RAX: ffffffffffffffda RBX: 00007f15247f5fa0 RCX: 00007f152459f749 [ 266.245486][T14740] RDX: 000000000000006e RSI: 0000200000000540 RDI: 0000000000000006 [ 266.245500][T14740] RBP: 00007f1523007090 R08: 0000000000000000 R09: 0000000000000000 [ 266.245513][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.245525][T14740] R13: 00007f15247f6038 R14: 00007f15247f5fa0 R15: 00007fff0a291f08 [ 266.245589][T14740] [ 266.507592][T14756] netlink: 'syz.4.3936': attribute type 10 has an invalid length. [ 266.515530][T14756] __nla_validate_parse: 3 callbacks suppressed [ 266.515550][T14756] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3936'. [ 266.550412][T14760] vfat: Unknown parameter '0x0000000000000000ÿ' [ 266.577996][T14758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.646247][T12303] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /191/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 266.689517][T12303] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 266.709633][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 266.723089][T12303] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /191/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 266.747053][T12303] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 266.768391][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 266.780164][T12303] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /191/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 266.804777][T12303] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 266.824508][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 266.836894][T12303] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /191/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 266.860021][T12303] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 266.879653][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 266.991597][T14767] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 267.145075][T14775] lo speed is unknown, defaulting to 1000 [ 267.270570][T12303] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /191/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 267.294830][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 267.325631][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 267.342558][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 267.362183][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 267.392258][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 267.421510][T14798] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3954'. [ 267.433841][T12303] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 267.453070][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3944'. [ 267.470050][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3955'. [ 267.479128][T14771] hsr_slave_0: left promiscuous mode [ 267.485848][T14771] hsr_slave_1: left promiscuous mode [ 267.497437][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3955'. [ 267.506755][T14802] vlan0: entered promiscuous mode [ 267.526301][T14804] set_capacity_and_notify: 12 callbacks suppressed [ 267.526323][T14804] loop2: detected capacity change from 0 to 764 [ 267.555328][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 267.555347][ T29] audit: type=1326 audit(277.366:59784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14799 comm="syz.4.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ffc0000 [ 267.617940][ T29] audit: type=1326 audit(277.366:59785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14799 comm="syz.4.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ffc0000 [ 267.642569][ T29] audit: type=1400 audit(277.460:59786): avc: denied { audit_write } for pid=14805 comm="syz.0.3958" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 267.648906][T14806] netlink: 'syz.0.3958': attribute type 1 has an invalid length. [ 267.663496][ T29] audit: type=1107 audit(277.460:59787): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='fÍHþ¯' [ 267.704302][T14812] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 267.719806][T14078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.761496][T14806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=14806 comm=syz.0.3958 [ 267.775857][ T29] audit: type=1400 audit(277.597:59788): avc: denied { append } for pid=14805 comm="syz.0.3958" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 267.878488][ T29] audit: type=1326 audit(277.702:59789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.1.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9f3cf749 code=0x7ffc0000 [ 267.901903][ T29] audit: type=1326 audit(277.702:59790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.1.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b9f3cf749 code=0x7ffc0000 [ 267.925047][ T29] audit: type=1326 audit(277.702:59791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.1.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9f3cf749 code=0x7ffc0000 [ 267.948372][ T29] audit: type=1326 audit(277.702:59792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.1.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b9f3cf749 code=0x7ffc0000 [ 267.971828][ T29] audit: type=1326 audit(277.702:59793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.1.3965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9f3cf749 code=0x7ffc0000 [ 268.036605][ T4634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.065912][T14828] smc: net device bond0 applied user defined pnetid SYZ0 [ 268.074598][T14828] smc: net device bond0 erased user defined pnetid SYZ0 [ 268.088412][ T4634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.100824][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'. [ 268.109852][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 268.155958][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'. [ 268.157868][ T8507] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.165089][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 268.184875][ T4634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.224913][ T8507] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.247307][ T8507] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.263666][ T8507] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.275241][ T4634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.363708][ T4634] bridge_slave_1: left allmulticast mode [ 268.369417][ T4634] bridge_slave_1: left promiscuous mode [ 268.375140][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.383603][ T4634] bridge_slave_0: left allmulticast mode [ 268.389473][ T4634] bridge_slave_0: left promiscuous mode [ 268.395232][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.497123][T14848] loop1: detected capacity change from 0 to 1024 [ 268.536179][ T4634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.570421][ T4634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.584224][T14854] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3972'. [ 268.595172][ T4634] bond0 (unregistering): Released all slaves [ 268.781603][T14832] lo speed is unknown, defaulting to 1000 [ 268.926289][T14873] loop1: detected capacity change from 0 to 764 [ 268.958978][T14876] loop4: detected capacity change from 0 to 1024 [ 268.980177][T14876] EXT4-fs: Ignoring removed orlov option [ 268.986092][ T4634] hsr_slave_0: left promiscuous mode [ 269.006944][ T4634] hsr_slave_1: left promiscuous mode [ 269.008218][T14876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.029103][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.036597][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.076875][ T4634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.084315][ T4634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.092847][T12688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.120893][ T4634] veth1_macvtap: left promiscuous mode [ 269.148112][ T4634] veth0_macvtap: left promiscuous mode [ 269.157945][ T4634] veth1_vlan: left promiscuous mode [ 269.165657][ T4634] veth0_vlan: left promiscuous mode [ 269.210356][T14897] loop2: detected capacity change from 0 to 164 [ 269.244016][T14904] netlink: 'syz.4.3993': attribute type 10 has an invalid length. [ 269.294591][ T4634] team0 (unregistering): Port device team_slave_1 removed [ 269.305135][ T4634] team0 (unregistering): Port device team_slave_0 removed [ 269.341875][ T8507] smc: removing ib device sz1 [ 269.356349][T14897] team0: Device gtp0 is of different type [ 269.366323][T14907] loop1: detected capacity change from 0 to 2048 [ 269.372887][ T3502] lo speed is unknown, defaulting to 1000 [ 269.378908][ T3502] sz1: Port: 1 Link DOWN [ 269.413160][T14907] loop1: p1 p2 p3 [ 269.443985][T14912] loop4: detected capacity change from 0 to 2048 [ 269.492753][T14916] loop2: detected capacity change from 0 to 2048 [ 269.513190][T14912] loop4: p1 p2 p3 [ 269.566611][T14916] loop2: p1 p2 p3 [ 269.582168][T14832] chnl_net:caif_netlink_parms(): no params data found [ 269.633034][T14924] team0: Device gtp0 is of different type [ 269.763103][T14832] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.770406][T14832] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.785030][T14832] bridge_slave_0: entered allmulticast mode [ 269.792841][T14832] bridge_slave_0: entered promiscuous mode [ 269.829955][T14832] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.837087][T14832] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.853381][T14832] bridge_slave_1: entered allmulticast mode [ 269.861639][T14832] bridge_slave_1: entered promiscuous mode [ 269.874644][T14942] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 269.902402][T14946] loop2: detected capacity change from 0 to 764 [ 269.909385][T14832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.920156][T14945] loop4: detected capacity change from 0 to 1024 [ 269.934965][T14945] EXT4-fs: Ignoring removed orlov option [ 269.948103][T14832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.993774][T14945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.995682][T14832] team0: Port device team_slave_0 added [ 270.013535][T14832] team0: Port device team_slave_1 added [ 270.036208][T14832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.043297][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.069279][T14832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.080693][T14832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.087763][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.113763][T14832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.155580][T14832] hsr_slave_0: entered promiscuous mode [ 270.161951][T14832] hsr_slave_1: entered promiscuous mode [ 270.168248][T14832] debugfs: 'hsr0' already exists in 'hsr' [ 270.169907][T12688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.174032][T14832] Cannot create hsr debugfs directory [ 270.324967][T14966] loop4: p1 p2 p3 [ 270.329400][T14832] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.342918][T14832] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 270.356107][T14832] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 270.365949][T14832] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 270.387118][T14832] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.394318][T14832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.401904][T14832] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.408973][T14832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.468646][T14832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.482605][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.492288][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.504929][T14977] EXT4-fs: Ignoring removed orlov option [ 270.514684][T14832] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.523336][T14977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.539187][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.546389][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.560469][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.567627][ T4634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.594626][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.673463][T14988] netlink: 'syz.0.4019': attribute type 4 has an invalid length. [ 270.737266][T14832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.974107][T15027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.083826][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.097143][T15044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.158458][T14832] veth0_vlan: entered promiscuous mode [ 271.167122][T14832] veth1_vlan: entered promiscuous mode [ 271.178588][T15044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.231344][T14832] veth0_macvtap: entered promiscuous mode [ 271.256228][T14832] veth1_macvtap: entered promiscuous mode [ 271.276816][T15044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.291311][T15056] netlink: 'syz.2.4038': attribute type 10 has an invalid length. [ 271.299280][T15056] __nla_validate_parse: 4 callbacks suppressed [ 271.299298][T15056] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4038'. [ 271.321689][T14832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.356081][T14832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.372156][T15044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.403947][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.416364][T15042] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 271.425526][T15042] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 271.435738][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.459295][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.475247][T15042] System zones: 0-1, 15-15, 18-18, 34-34 [ 271.502634][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.520256][T15042] EXT4-fs (loop4): orphan cleanup on readonly fs [ 271.539160][T15042] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 271.551351][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.554642][T15042] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 271.586782][T15071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.593721][T15071] EXT4-fs: Ignoring removed oldalloc option [ 271.600746][T15042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4033: bg 0: block 40: padding at end of block bitmap is not set [ 271.618047][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.645877][T15071] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 271.647919][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.656957][T15042] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 271.676060][T15071] System zones: 0-1, 3-36 [ 271.682162][T15071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.697588][T15042] EXT4-fs (loop4): 1 truncate cleaned up [ 271.717387][T15042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.735351][T15070] EXT4-fs (loop5): shut down requested (0) [ 271.749825][T15032] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 271.761447][ T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.775022][T12688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.776862][T15080] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 271.817040][T15084] netlink: 'syz.0.4048': attribute type 10 has an invalid length. [ 271.824980][T15084] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4048'. [ 271.836510][T14832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.898521][T15098] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 271.907138][T15094] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4053'. [ 271.916285][T15094] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 271.948976][T15102] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 271.978256][T15106] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 272.007240][T15108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4059'. [ 272.064551][T15111] FAULT_INJECTION: forcing a failure. [ 272.064551][T15111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.078108][T15111] CPU: 1 UID: 0 PID: 15111 Comm: syz.5.4060 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 272.078305][T15111] Tainted: [W]=WARN [ 272.078315][T15111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.078333][T15111] Call Trace: [ 272.078342][T15111] [ 272.078353][T15111] __dump_stack+0x1d/0x30 [ 272.078395][T15111] dump_stack_lvl+0x95/0xd0 [ 272.078425][T15111] dump_stack+0x15/0x1b [ 272.078451][T15111] should_fail_ex+0x265/0x280 [ 272.078546][T15111] should_fail_alloc_page+0xf2/0x100 [ 272.078579][T15111] __alloc_frozen_pages_noprof+0x109/0x360 [ 272.078617][T15111] ? __rcu_read_unlock+0x4f/0x70 [ 272.078647][T15111] alloc_pages_bulk_noprof+0x4b9/0x540 [ 272.078733][T15111] ? __kmalloc_noprof+0x2b4/0x5a0 [ 272.078762][T15111] ? copy_splice_read+0xc2/0x660 [ 272.078834][T15111] copy_splice_read+0xf3/0x660 [ 272.078864][T15111] ? __pfx_copy_splice_read+0x10/0x10 [ 272.078889][T15111] splice_direct_to_actor+0x26f/0x680 [ 272.078945][T15111] ? __pfx_direct_splice_actor+0x10/0x10 [ 272.078971][T15111] do_splice_direct+0xda/0x150 [ 272.078990][T15111] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 272.079022][T15111] do_sendfile+0x380/0x650 [ 272.079101][T15111] __x64_sys_sendfile64+0x105/0x150 [ 272.079131][T15111] x64_sys_call+0x2db1/0x3000 [ 272.079161][T15111] do_syscall_64+0xca/0x2b0 [ 272.079280][T15111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.079308][T15111] RIP: 0033:0x7fdcce4df749 [ 272.079329][T15111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.079348][T15111] RSP: 002b:00007fdcccf3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 272.079378][T15111] RAX: ffffffffffffffda RBX: 00007fdcce735fa0 RCX: 00007fdcce4df749 [ 272.079391][T15111] RDX: 0000000000000000 RSI: 000000000000000f RDI: 000000000000000f [ 272.079405][T15111] RBP: 00007fdcccf3f090 R08: 0000000000000000 R09: 0000000000000000 [ 272.079418][T15111] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 272.079511][T15111] R13: 00007fdcce736038 R14: 00007fdcce735fa0 R15: 00007ffcabc063f8 [ 272.079545][T15111] [ 272.321546][T15117] set_capacity_and_notify: 12 callbacks suppressed [ 272.321568][T15117] loop2: detected capacity change from 0 to 128 [ 272.344406][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 272.344422][ T29] audit: type=1326 audit(282.384:60231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.373927][ T29] audit: type=1326 audit(282.384:60232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.397043][ T29] audit: type=1326 audit(282.384:60233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.397081][ T29] audit: type=1326 audit(282.384:60234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.397109][ T29] audit: type=1326 audit(282.384:60235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.397187][ T29] audit: type=1326 audit(282.384:60236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.397218][ T29] audit: type=1326 audit(282.384:60237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.397274][ T29] audit: type=1326 audit(282.384:60238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.397400][ T29] audit: type=1326 audit(282.384:60239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.397428][ T29] audit: type=1326 audit(282.384:60240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15101 comm="syz.0.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67d69f749 code=0x7ffc0000 [ 272.480999][T15122] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 272.492246][T15122] loop5: detected capacity change from 0 to 1024 [ 272.492580][T15122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.492728][T15122] EXT4-fs: Ignoring removed oldalloc option [ 272.495393][T15129] netlink: 'syz.2.4064': attribute type 10 has an invalid length. [ 272.495409][T15129] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4064'. [ 272.544051][T15122] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 272.544091][T15122] System zones: 0-1, 3-36 [ 272.545081][T15122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.779170][T15138] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4068'. [ 272.788426][T15138] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 272.841762][T15144] netlink: 'syz.2.4071': attribute type 10 has an invalid length. [ 272.849776][T15144] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4071'. [ 272.939375][T15155] loop1: detected capacity change from 0 to 2048 [ 272.984809][T15167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4081'. [ 272.993902][T15167] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4081'. [ 273.004078][T15155] loop1: p1 p2 p3 [ 273.011203][T15167] FAULT_INJECTION: forcing a failure. [ 273.011203][T15167] name failslab, interval 1, probability 0, space 0, times 0 [ 273.022981][T15169] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4082'. [ 273.024067][T15167] CPU: 0 UID: 0 PID: 15167 Comm: syz.4.4081 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 273.024260][T15167] Tainted: [W]=WARN [ 273.024312][T15167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.024356][T15167] Call Trace: [ 273.024378][T15167] [ 273.024400][T15167] __dump_stack+0x1d/0x30 [ 273.024523][T15167] dump_stack_lvl+0x95/0xd0 [ 273.024640][T15167] dump_stack+0x15/0x1b [ 273.024713][T15167] should_fail_ex+0x265/0x280 [ 273.024828][T15167] should_failslab+0x8c/0xb0 [ 273.024910][T15167] __kmalloc_cache_noprof+0x65/0x4c0 [ 273.025045][T15167] ? tcf_ct_init+0x416/0xe80 [ 273.025158][T15167] tcf_ct_init+0x416/0xe80 [ 273.025375][T15167] ? _raw_spin_unlock+0x26/0x50 [ 273.025523][T15167] tcf_action_init_1+0x36a/0x4a0 [ 273.025629][T15167] tcf_action_init+0x267/0x6d0 [ 273.025856][T15167] tc_ctl_action+0x291/0x830 [ 273.025994][T15167] ? __pfx_tc_ctl_action+0x10/0x10 [ 273.026071][T15167] rtnetlink_rcv_msg+0x65a/0x6d0 [ 273.026155][T15167] netlink_rcv_skb+0x123/0x220 [ 273.026332][T15167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.026447][T15167] rtnetlink_rcv+0x1c/0x30 [ 273.026497][T15167] netlink_unicast+0x5c0/0x690 [ 273.026603][T15167] netlink_sendmsg+0x58b/0x6b0 [ 273.026719][T15167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.026896][T15167] __sock_sendmsg+0x145/0x180 [ 273.027011][T15167] ____sys_sendmsg+0x31e/0x4a0 [ 273.027184][T15167] ___sys_sendmsg+0x17b/0x1d0 [ 273.027323][T15167] __x64_sys_sendmsg+0xd4/0x160 [ 273.027460][T15167] x64_sys_call+0x17ba/0x3000 [ 273.027539][T15167] do_syscall_64+0xca/0x2b0 [ 273.027737][T15167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.027812][T15167] RIP: 0033:0x7f9ff5aef749 [ 273.027865][T15167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.027929][T15167] RSP: 002b:00007f9ff454f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.027993][T15167] RAX: ffffffffffffffda RBX: 00007f9ff5d45fa0 RCX: 00007f9ff5aef749 [ 273.028051][T15167] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000006 [ 273.028064][T15167] RBP: 00007f9ff454f090 R08: 0000000000000000 R09: 0000000000000000 [ 273.028077][T15167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.028089][T15167] R13: 00007f9ff5d46038 R14: 00007f9ff5d45fa0 R15: 00007ffe3f23ddb8 [ 273.028110][T15167] [ 273.272233][T15169] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 273.281672][T14832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.291087][T15179] loop4: detected capacity change from 0 to 512 [ 273.297673][T15179] EXT4-fs: Ignoring removed bh option [ 273.321893][T15179] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4086: error while reading EA inode 32 err=-116 [ 273.344315][T15183] tipc: Started in network mode [ 273.349315][T15183] tipc: Node identity ac14140f, cluster identity 4711 [ 273.360297][T15179] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4086: error while reading EA inode 32 err=-116 [ 273.374878][T15172] ALSA: seq fatal error: cannot create timer (-19) [ 273.375094][T15183] tipc: New replicast peer: 255.255.255.255 [ 273.388224][T15183] tipc: Enabled bearer , priority 10 [ 273.394531][T15189] tipc: Disabling bearer [ 273.408702][T15179] EXT4-fs (loop4): 1 orphan inode deleted [ 273.415077][T15179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.415833][T15188] ALSA: seq fatal error: cannot create timer (-19) [ 273.443773][T15188] FAULT_INJECTION: forcing a failure. [ 273.443773][T15188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.457037][T15188] CPU: 0 UID: 0 PID: 15188 Comm: syz.1.4088 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 273.457080][T15188] Tainted: [W]=WARN [ 273.457090][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.457106][T15188] Call Trace: [ 273.457136][T15188] [ 273.457147][T15188] __dump_stack+0x1d/0x30 [ 273.457180][T15188] dump_stack_lvl+0x95/0xd0 [ 273.457210][T15188] dump_stack+0x15/0x1b [ 273.457280][T15188] should_fail_ex+0x265/0x280 [ 273.457306][T15188] should_fail+0xb/0x20 [ 273.457326][T15188] should_fail_usercopy+0x1a/0x20 [ 273.457418][T15188] _copy_to_user+0x20/0xa0 [ 273.457504][T15188] simple_read_from_buffer+0xb5/0x130 [ 273.457529][T15188] proc_fail_nth_read+0x10e/0x150 [ 273.457634][T15188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.457679][T15188] vfs_read+0x1a8/0x770 [ 273.457742][T15188] ? __rcu_read_unlock+0x4f/0x70 [ 273.457770][T15188] ? __fget_files+0x184/0x1c0 [ 273.457801][T15188] ? mutex_lock+0x58/0x90 [ 273.457884][T15188] ksys_read+0xda/0x1a0 [ 273.457909][T15188] __x64_sys_read+0x40/0x50 [ 273.457933][T15188] x64_sys_call+0x2889/0x3000 [ 273.457964][T15188] do_syscall_64+0xca/0x2b0 [ 273.458007][T15188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.458054][T15188] RIP: 0033:0x7f8b9f3ce15c [ 273.458075][T15188] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.458095][T15188] RSP: 002b:00007f8b9de37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.458115][T15188] RAX: ffffffffffffffda RBX: 00007f8b9f625fa0 RCX: 00007f8b9f3ce15c [ 273.458128][T15188] RDX: 000000000000000f RSI: 00007f8b9de370a0 RDI: 0000000000000004 [ 273.458150][T15188] RBP: 00007f8b9de37090 R08: 0000000000000000 R09: 0000000000000000 [ 273.458212][T15188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.458228][T15188] R13: 00007f8b9f626038 R14: 00007f8b9f625fa0 R15: 00007fff45a484f8 [ 273.458254][T15188] [ 273.699368][T15198] loop2: detected capacity change from 0 to 1024 [ 273.753015][T15203] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 273.859262][T15206] loop2: detected capacity change from 0 to 2048 [ 273.916891][T15206] loop2: p1 p2 p3 [ 273.993429][T15209] loop1: detected capacity change from 0 to 2048 [ 274.015400][T15212] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 274.040112][T15209] loop1: p1 p2 p3 [ 274.060648][T12688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.163811][T15228] loop2: detected capacity change from 0 to 128 [ 274.172948][T15228] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.199877][T15228] forcing mempool usage for bio_alloc_bioset+0x449/0xa50 [ 274.232177][T11361] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.262981][T15233] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 274.320412][T15235] loop2: detected capacity change from 0 to 764 [ 274.554199][T15245] loop2: detected capacity change from 0 to 764 [ 274.811181][T15255] loop5: p1 p2 p3 [ 274.992781][T15276] FAULT_INJECTION: forcing a failure. [ 274.992781][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 275.005776][T15276] CPU: 1 UID: 0 PID: 15276 Comm: syz.1.4125 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.005819][T15276] Tainted: [W]=WARN [ 275.005829][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.005846][T15276] Call Trace: [ 275.005855][T15276] [ 275.005863][T15276] __dump_stack+0x1d/0x30 [ 275.005969][T15276] dump_stack_lvl+0x95/0xd0 [ 275.005993][T15276] dump_stack+0x15/0x1b [ 275.006016][T15276] should_fail_ex+0x265/0x280 [ 275.006072][T15276] should_failslab+0x8c/0xb0 [ 275.006101][T15276] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 275.006207][T15276] ? __get_vm_area_node+0x106/0x1d0 [ 275.006240][T15276] __get_vm_area_node+0x106/0x1d0 [ 275.006280][T15276] __vmalloc_node_range_noprof+0x28e/0x1310 [ 275.006345][T15276] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 275.006394][T15276] ? __rcu_read_unlock+0x4f/0x70 [ 275.006422][T15276] ? avc_has_perm_noaudit+0xab/0x130 [ 275.006542][T15276] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 275.006586][T15276] __vmalloc_noprof+0xa4/0xf0 [ 275.006610][T15276] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 275.006734][T15276] bpf_prog_alloc_no_stats+0x47/0x390 [ 275.006769][T15276] ? bpf_prog_alloc+0x2a/0x150 [ 275.006787][T15276] bpf_prog_alloc+0x3c/0x150 [ 275.006818][T15276] bpf_prog_load+0x506/0x1140 [ 275.006849][T15276] ? security_bpf+0x2b/0x90 [ 275.006883][T15276] __sys_bpf+0x469/0x7c0 [ 275.006919][T15276] __x64_sys_bpf+0x41/0x50 [ 275.006963][T15276] x64_sys_call+0x28e1/0x3000 [ 275.007002][T15276] do_syscall_64+0xca/0x2b0 [ 275.007064][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.007146][T15276] RIP: 0033:0x7f8b9f3cf749 [ 275.007167][T15276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.007191][T15276] RSP: 002b:00007f8b9de37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.007234][T15276] RAX: ffffffffffffffda RBX: 00007f8b9f625fa0 RCX: 00007f8b9f3cf749 [ 275.007269][T15276] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 275.007287][T15276] RBP: 00007f8b9de37090 R08: 0000000000000000 R09: 0000000000000000 [ 275.007304][T15276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.007319][T15276] R13: 00007f8b9f626038 R14: 00007f8b9f625fa0 R15: 00007fff45a484f8 [ 275.007405][T15276] [ 275.007416][T15276] syz.1.4125: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 275.256975][T15276] CPU: 1 UID: 0 PID: 15276 Comm: syz.1.4125 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.257059][T15276] Tainted: [W]=WARN [ 275.257069][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.257086][T15276] Call Trace: [ 275.257094][T15276] [ 275.257105][T15276] __dump_stack+0x1d/0x30 [ 275.257137][T15276] dump_stack_lvl+0x95/0xd0 [ 275.257190][T15276] dump_stack+0x15/0x1b [ 275.257216][T15276] warn_alloc+0x12b/0x1a0 [ 275.257255][T15276] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 275.257313][T15276] ? __rcu_read_unlock+0x4f/0x70 [ 275.257340][T15276] ? avc_has_perm_noaudit+0xab/0x130 [ 275.257389][T15276] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 275.257428][T15276] __vmalloc_noprof+0xa4/0xf0 [ 275.257471][T15276] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 275.257534][T15276] bpf_prog_alloc_no_stats+0x47/0x390 [ 275.257606][T15276] ? bpf_prog_alloc+0x2a/0x150 [ 275.257625][T15276] bpf_prog_alloc+0x3c/0x150 [ 275.257728][T15276] bpf_prog_load+0x506/0x1140 [ 275.257767][T15276] ? security_bpf+0x2b/0x90 [ 275.257860][T15276] __sys_bpf+0x469/0x7c0 [ 275.257888][T15276] __x64_sys_bpf+0x41/0x50 [ 275.257926][T15276] x64_sys_call+0x28e1/0x3000 [ 275.257967][T15276] do_syscall_64+0xca/0x2b0 [ 275.258004][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.258064][T15276] RIP: 0033:0x7f8b9f3cf749 [ 275.258081][T15276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.258101][T15276] RSP: 002b:00007f8b9de37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.258164][T15276] RAX: ffffffffffffffda RBX: 00007f8b9f625fa0 RCX: 00007f8b9f3cf749 [ 275.258177][T15276] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 275.258192][T15276] RBP: 00007f8b9de37090 R08: 0000000000000000 R09: 0000000000000000 [ 275.258288][T15276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.258302][T15276] R13: 00007f8b9f626038 R14: 00007f8b9f625fa0 R15: 00007fff45a484f8 [ 275.258327][T15276] [ 275.462783][T15276] Mem-Info: [ 275.465921][T15276] active_anon:19595 inactive_anon:1 isolated_anon:0 [ 275.465921][T15276] active_file:21602 inactive_file:10731 isolated_file:0 [ 275.465921][T15276] unevictable:0 dirty:473 writeback:0 [ 275.465921][T15276] slab_reclaimable:3640 slab_unreclaimable:31960 [ 275.465921][T15276] mapped:39632 shmem:16003 pagetables:1236 [ 275.465921][T15276] sec_pagetables:0 bounce:0 [ 275.465921][T15276] kernel_misc_reclaimable:0 [ 275.465921][T15276] free:1758151 free_pcp:7501 free_cma:0 [ 275.511948][T15276] Node 0 active_anon:79884kB inactive_anon:4kB active_file:86408kB inactive_file:42920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158624kB dirty:1896kB writeback:0kB shmem:65296kB kernel_stack:3824kB pagetables:4976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 275.539511][T15276] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.569259][T15276] lowmem_reserve[]: 0 2880 7859 7859 [ 275.574806][T15276] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 275.606358][T15276] lowmem_reserve[]: 0 0 4978 4978 [ 275.611521][T15276] Node 0 Normal free:4068028kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81740kB inactive_anon:4kB active_file:86408kB inactive_file:42920kB unevictable:0kB writepending:1896kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:26308kB local_pcp:24484kB free_cma:0kB [ 275.645126][T15276] lowmem_reserve[]: 0 0 0 0 [ 275.649735][T15276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 275.662575][T15276] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 275.678842][T15276] Node 0 Normal: 800*4kB (UM) 162*8kB (UME) 470*16kB (UM) 1153*32kB (UME) 739*64kB (UME) 314*128kB (UME) 134*256kB (UME) 196*512kB (UM) 180*1024kB (UM) 131*2048kB (UM) 816*4096kB (UM) = 4066000kB [ 275.698404][T15276] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 275.707825][T15276] 49543 total pagecache pages [ 275.712563][T15276] 1 pages in swap cache [ 275.716792][T15276] Free swap = 124992kB [ 275.720990][T15276] Total swap = 124996kB [ 275.725320][T15276] 2097051 pages RAM [ 275.729344][T15276] 0 pages HighMem/MovableOnly [ 275.734126][T15276] 81271 pages reserved [ 275.881555][T15290] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 276.068746][T15308] loop2: p1 p2 p3 [ 276.192855][T15323] __nla_validate_parse: 8 callbacks suppressed [ 276.192873][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4146'. [ 276.238823][T15323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4146'. [ 276.420848][T15329] loop5: p1 p2 p3 [ 276.513678][T15346] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 276.748140][T15360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4162'. [ 276.986970][T15381] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 277.114544][ T29] kauditd_printk_skb: 2061 callbacks suppressed [ 277.114564][ T29] audit: type=1326 audit(287.393:62302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.160259][ T29] audit: type=1326 audit(287.403:62303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.183440][ T29] audit: type=1326 audit(287.403:62304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.206457][ T29] audit: type=1326 audit(287.403:62305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.229479][ T29] audit: type=1326 audit(287.403:62306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.251332][T15394] set_capacity_and_notify: 10 callbacks suppressed [ 277.251390][T15394] loop2: detected capacity change from 0 to 764 [ 277.252478][ T29] audit: type=1326 audit(287.403:62307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.288581][ T29] audit: type=1326 audit(287.403:62308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.311755][ T29] audit: type=1326 audit(287.403:62309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.334930][ T29] audit: type=1326 audit(287.403:62310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.358003][ T29] audit: type=1326 audit(287.403:62311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff5aef749 code=0x7ff00000 [ 277.508483][T15403] loop1: detected capacity change from 0 to 1024 [ 277.516360][T15403] EXT4-fs: inline encryption not supported [ 277.526667][T15403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.602158][T15403] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.4178: Allocating blocks 1-17 which overlap fs metadata [ 277.626958][T15403] EXT4-fs (loop1): Remounting filesystem read-only [ 277.712418][T13003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.742410][T15420] loop4: detected capacity change from 0 to 1024 [ 277.851391][T15426] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4183'. [ 277.891925][T15431] netlink: 'syz.5.4187': attribute type 10 has an invalid length. [ 277.899894][T15431] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4187'. [ 277.914260][T15428] loop2: detected capacity change from 0 to 764 [ 277.971545][T15433] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 278.025892][T15435] loop2: detected capacity change from 0 to 764 [ 278.260334][T15449] loop2: detected capacity change from 0 to 764 [ 278.337403][T15453] loop2: detected capacity change from 0 to 512 [ 278.373516][T15453] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 278.401091][T15453] EXT4-fs (loop2): mount failed [ 278.406499][T15463] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 278.417909][T15453] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 278.485631][T15470] loop5: detected capacity change from 0 to 1024 [ 278.497895][T15469] loop2: detected capacity change from 0 to 1024 [ 278.504748][T15469] EXT4-fs: Ignoring removed orlov option [ 278.554887][T15469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.607938][T15470] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4202'. [ 278.631138][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.696489][T15484] loop2: detected capacity change from 0 to 764 [ 278.715251][T15488] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 278.831101][T15494] loop1: p1 p2 p3 [ 278.927593][T15512] netlink: 143 bytes leftover after parsing attributes in process `syz.1.4222'. [ 278.936758][T15512] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 278.983485][T15506] loop4: p1 p2 p3 [ 279.000062][T15518] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 279.061711][T15528] FAULT_INJECTION: forcing a failure. [ 279.061711][T15528] name failslab, interval 1, probability 0, space 0, times 0 [ 279.074486][T15528] CPU: 0 UID: 0 PID: 15528 Comm: syz.1.4226 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 279.074573][T15528] Tainted: [W]=WARN [ 279.074580][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.074593][T15528] Call Trace: [ 279.074600][T15528] [ 279.074607][T15528] __dump_stack+0x1d/0x30 [ 279.074672][T15528] dump_stack_lvl+0x95/0xd0 [ 279.074701][T15528] dump_stack+0x15/0x1b [ 279.074728][T15528] should_fail_ex+0x265/0x280 [ 279.074784][T15528] should_failslab+0x8c/0xb0 [ 279.074813][T15528] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 279.074839][T15528] ? __alloc_skb+0x2ff/0x4b0 [ 279.074867][T15528] __alloc_skb+0x2ff/0x4b0 [ 279.074937][T15528] ? __alloc_skb+0x228/0x4b0 [ 279.074962][T15528] audit_log_start+0x3a0/0x720 [ 279.074988][T15528] ? kstrtouint+0x76/0xc0 [ 279.075008][T15528] audit_seccomp+0x48/0x100 [ 279.075118][T15528] ? __seccomp_filter+0x832/0x1260 [ 279.075222][T15528] __seccomp_filter+0x843/0x1260 [ 279.075311][T15528] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 279.075348][T15528] ? vfs_write+0x7e8/0x960 [ 279.075367][T15528] ? __rcu_read_unlock+0x4f/0x70 [ 279.075387][T15528] ? __fget_files+0x184/0x1c0 [ 279.075417][T15528] __secure_computing+0x82/0x150 [ 279.075531][T15528] syscall_trace_enter+0xcf/0x1e0 [ 279.075557][T15528] do_syscall_64+0xa4/0x2b0 [ 279.075610][T15528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.075638][T15528] RIP: 0033:0x7f8b9f3cf749 [ 279.075653][T15528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.075686][T15528] RSP: 002b:00007f8b9de37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 279.075810][T15528] RAX: ffffffffffffffda RBX: 00007f8b9f625fa0 RCX: 00007f8b9f3cf749 [ 279.075828][T15528] RDX: 0000200000000280 RSI: 0000200000000000 RDI: 0000200000000400 [ 279.075846][T15528] RBP: 00007f8b9de37090 R08: 0000000000000000 R09: 0000000000000000 [ 279.075900][T15528] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 279.075913][T15528] R13: 00007f8b9f626038 R14: 00007f8b9f625fa0 R15: 00007fff45a484f8 [ 279.075933][T15528] [ 279.294260][T15528] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 279.318275][T15530] bridge0: entered promiscuous mode [ 279.323607][T15530] macsec1: entered promiscuous mode [ 279.333653][T15530] bridge0: port 3(macsec1) entered blocking state [ 279.340241][T15530] bridge0: port 3(macsec1) entered disabled state [ 279.347174][T15530] macsec1: entered allmulticast mode [ 279.352486][T15530] bridge0: entered allmulticast mode [ 279.359250][T15530] macsec1: left allmulticast mode [ 279.364412][T15530] bridge0: left allmulticast mode [ 279.370090][T15530] bridge0: left promiscuous mode [ 279.400320][T15534] EXT4-fs: Ignoring removed orlov option [ 279.468661][T15534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.541064][T12688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.545553][T15551] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 279.618676][T15558] EXT4-fs: Ignoring removed orlov option [ 279.627062][T15563] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4243'. [ 279.638056][T15558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.698346][T15561] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4242'. [ 279.749828][T13003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.830187][T15578] netlink: 'syz.1.4246': attribute type 10 has an invalid length. [ 279.838083][T15578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4246'. [ 279.854914][T15574] EXT4-fs: Ignoring removed orlov option [ 279.876021][T15578] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 279.887887][T15578] batman_adv: batadv0: Adding interface: veth1_vlan [ 279.894536][T15578] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.922583][T15574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.928559][T15578] batman_adv: batadv0: Interface activated: veth1_vlan [ 279.976390][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.664889][T15604] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 280.968864][T15625] __nla_validate_parse: 1 callbacks suppressed [ 280.968884][T15625] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4264'. [ 281.098679][T15640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4271'. [ 281.148339][T15646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4273'. [ 281.195435][T15642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4272'. [ 281.307358][T15658] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4278'. [ 281.331059][T15660] FAULT_INJECTION: forcing a failure. [ 281.331059][T15660] name failslab, interval 1, probability 0, space 0, times 0 [ 281.343932][T15660] CPU: 1 UID: 0 PID: 15660 Comm: syz.5.4279 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 281.344038][T15660] Tainted: [W]=WARN [ 281.344047][T15660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.344062][T15660] Call Trace: [ 281.344119][T15660] [ 281.344130][T15660] __dump_stack+0x1d/0x30 [ 281.344157][T15660] dump_stack_lvl+0x95/0xd0 [ 281.344180][T15660] dump_stack+0x15/0x1b [ 281.344235][T15660] should_fail_ex+0x265/0x280 [ 281.344338][T15660] should_failslab+0x8c/0xb0 [ 281.344366][T15660] kmem_cache_alloc_noprof+0x69/0x4b0 [ 281.344395][T15660] ? getname_kernel+0x3c/0x1f0 [ 281.344465][T15660] getname_kernel+0x3c/0x1f0 [ 281.344505][T15660] kern_path+0x23/0x130 [ 281.344532][T15660] autofs_dev_ioctl_openmount+0x92/0x2d0 [ 281.344562][T15660] ? __pfx_autofs_dev_ioctl_openmount+0x10/0x10 [ 281.344643][T15660] autofs_dev_ioctl+0x354/0x6a0 [ 281.344675][T15660] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 281.344702][T15660] __se_sys_ioctl+0xce/0x140 [ 281.344738][T15660] __x64_sys_ioctl+0x43/0x50 [ 281.344856][T15660] x64_sys_call+0x14b0/0x3000 [ 281.344964][T15660] do_syscall_64+0xca/0x2b0 [ 281.345008][T15660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.345035][T15660] RIP: 0033:0x7fdcce4df749 [ 281.345055][T15660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.345110][T15660] RSP: 002b:00007fdcccf3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.345131][T15660] RAX: ffffffffffffffda RBX: 00007fdcce735fa0 RCX: 00007fdcce4df749 [ 281.345144][T15660] RDX: 0000200000001980 RSI: 00000000c0189374 RDI: 0000000000000005 [ 281.345159][T15660] RBP: 00007fdcccf3f090 R08: 0000000000000000 R09: 0000000000000000 [ 281.345172][T15660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.345185][T15660] R13: 00007fdcce736038 R14: 00007fdcce735fa0 R15: 00007ffcabc063f8 [ 281.345211][T15660] [ 281.676880][T15667] EXT4-fs: Ignoring removed orlov option [ 281.725080][T15667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.806354][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4287'. [ 281.831714][T14832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.851123][T15681] 9p: Unknown access argument 18446744073709551615: -34 [ 281.874159][T15681] blktrace: Concurrent blktraces are not allowed on loop4 [ 281.923045][ T29] kauditd_printk_skb: 1598 callbacks suppressed [ 281.923061][ T29] audit: type=1326 audit(292.443:63905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 282.012823][ T29] audit: type=1326 audit(292.485:63906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 282.066143][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4290'. [ 282.071316][T15690] set_capacity_and_notify: 12 callbacks suppressed [ 282.071376][T15690] loop2: detected capacity change from 0 to 2048 [ 282.093452][ T29] audit: type=1326 audit(292.621:63907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15672 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9f3cf749 code=0x7ffc0000 [ 282.116536][ T29] audit: type=1326 audit(292.621:63908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15672 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9f3cf749 code=0x7ffc0000 [ 282.137383][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4290'. [ 282.139849][ T29] audit: type=1326 audit(292.621:63909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15691 comm="syz.5.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 282.171822][ T29] audit: type=1326 audit(292.621:63910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15691 comm="syz.5.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 282.194933][ T29] audit: type=1326 audit(292.621:63911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15691 comm="syz.5.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 282.217987][ T29] audit: type=1326 audit(292.621:63912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15691 comm="syz.5.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 282.241016][ T29] audit: type=1326 audit(292.621:63913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15691 comm="syz.5.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 282.264229][ T29] audit: type=1326 audit(292.621:63914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15691 comm="syz.5.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 282.312007][T15696] loop5: detected capacity change from 0 to 1024 [ 282.323595][T15690] loop2: p1 p2 p3 [ 282.380790][T15698] loop5: detected capacity change from 0 to 128 [ 282.394765][T15698] FAT-fs (loop5): bogus number of reserved sectors [ 282.401426][T15698] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 282.402956][T15700] loop2: detected capacity change from 0 to 256 [ 282.410755][T15698] FAT-fs (loop5): Can't find a valid FAT filesystem [ 282.516367][T15706] loop5: detected capacity change from 0 to 1024 [ 282.536656][T15706] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 282.558685][T15706] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 282.577842][T15706] EXT4-fs (loop5): orphan cleanup on readonly fs [ 282.593033][T15706] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4297: Failed to acquire dquot type 0 [ 282.617733][T15706] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4297: Failed to acquire dquot type 0 [ 282.638168][T15706] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.4297: Freeing blocks not in datazone - block = 0, count = 4096 [ 282.650907][T15711] FAULT_INJECTION: forcing a failure. [ 282.650907][T15711] name failslab, interval 1, probability 0, space 0, times 0 [ 282.652372][T15706] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4297: Failed to acquire dquot type 0 [ 282.664363][T15711] CPU: 1 UID: 0 PID: 15711 Comm: syz.0.4299 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.664467][T15711] Tainted: [W]=WARN [ 282.664507][T15711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.664559][T15711] Call Trace: [ 282.664581][T15711] [ 282.664611][T15711] __dump_stack+0x1d/0x30 [ 282.664724][T15711] dump_stack_lvl+0x95/0xd0 [ 282.664793][T15711] dump_stack+0x15/0x1b [ 282.664864][T15711] should_fail_ex+0x265/0x280 [ 282.664938][T15711] should_failslab+0x8c/0xb0 [ 282.665061][T15711] kmem_cache_alloc_noprof+0x69/0x4b0 [ 282.665135][T15711] ? getname_flags+0x80/0x3b0 [ 282.665222][T15711] getname_flags+0x80/0x3b0 [ 282.665376][T15711] do_sys_openat2+0x60/0x150 [ 282.665471][T15711] __x64_sys_openat+0xf2/0x120 [ 282.665525][T15711] x64_sys_call+0x2b07/0x3000 [ 282.665618][T15711] do_syscall_64+0xca/0x2b0 [ 282.665871][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.665943][T15711] RIP: 0033:0x7fd67d69f749 [ 282.665995][T15711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.666061][T15711] RSP: 002b:00007fd67c107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.666174][T15711] RAX: ffffffffffffffda RBX: 00007fd67d8f5fa0 RCX: 00007fd67d69f749 [ 282.666307][T15711] RDX: 0000000000200000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 282.666349][T15711] RBP: 00007fd67c107090 R08: 0000000000000000 R09: 0000000000000000 [ 282.666391][T15711] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 282.666504][T15711] R13: 00007fd67d8f6038 R14: 00007fd67d8f5fa0 R15: 00007ffc2a32b348 [ 282.666567][T15711] [ 282.844720][T15706] EXT4-fs (loop5): 1 orphan inode deleted [ 282.851075][T15706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.866120][T15713] wireguard0: entered promiscuous mode [ 282.867174][T15716] FAULT_INJECTION: forcing a failure. [ 282.867174][T15716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.871761][T15713] wireguard0: entered allmulticast mode [ 282.884920][T15716] CPU: 1 UID: 0 PID: 15716 Comm: syz.0.4301 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.885130][T15716] Tainted: [W]=WARN [ 282.885153][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.885194][T15716] Call Trace: [ 282.885215][T15716] [ 282.885245][T15716] __dump_stack+0x1d/0x30 [ 282.885328][T15716] dump_stack_lvl+0x95/0xd0 [ 282.885402][T15716] dump_stack+0x15/0x1b [ 282.885487][T15716] should_fail_ex+0x265/0x280 [ 282.885572][T15716] should_fail+0xb/0x20 [ 282.885636][T15716] should_fail_usercopy+0x1a/0x20 [ 282.885777][T15716] _copy_from_user+0x1c/0xb0 [ 282.885865][T15716] ___sys_sendmsg+0xc1/0x1d0 [ 282.886052][T15716] __x64_sys_sendmsg+0xd4/0x160 [ 282.886167][T15716] x64_sys_call+0x17ba/0x3000 [ 282.886316][T15716] do_syscall_64+0xca/0x2b0 [ 282.886475][T15716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.886615][T15716] RIP: 0033:0x7fd67d69f749 [ 282.886660][T15716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.886724][T15716] RSP: 002b:00007fd67c107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.886796][T15716] RAX: ffffffffffffffda RBX: 00007fd67d8f5fa0 RCX: 00007fd67d69f749 [ 282.886879][T15716] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 282.886922][T15716] RBP: 00007fd67c107090 R08: 0000000000000000 R09: 0000000000000000 [ 282.886964][T15716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.887005][T15716] R13: 00007fd67d8f6038 R14: 00007fd67d8f5fa0 R15: 00007ffc2a32b348 [ 282.887113][T15716] [ 282.923961][T15706] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.4297: iget: bad extended attribute block 6 [ 283.074748][T15718] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 283.097114][T14832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.128434][T15720] loop5: detected capacity change from 0 to 1024 [ 283.211893][T15723] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4303'. [ 283.225855][T15724] loop1: detected capacity change from 0 to 764 [ 283.314392][T15731] loop1: detected capacity change from 0 to 512 [ 283.331989][T15731] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 283.335714][T15726] loop2: detected capacity change from 0 to 2048 [ 283.363425][T15731] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 283.371577][T15731] System zones: 0-2, 18-18, 34-35 [ 283.377459][T15731] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.402188][T15726] loop2: p1 p2 p3 [ 283.409901][T13003] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 283.574736][T15749] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4313'. [ 283.648613][T15753] loop1: detected capacity change from 0 to 256 [ 284.242760][T15771] loop5: p1 p2 p3 [ 284.691378][T15805] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 284.741830][T15805] SELinux: failed to load policy [ 284.842173][T15820] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 284.868452][T15822] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 285.073122][T15831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.125624][T15831] 9pnet_fd: Insufficient options for proto=fd [ 285.178391][T15831] bridge_slave_0: left allmulticast mode [ 285.184264][T15831] bridge_slave_0: left promiscuous mode [ 285.190096][T15831] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.258353][T15831] bridge_slave_1: left allmulticast mode [ 285.264123][T15831] bridge_slave_1: left promiscuous mode [ 285.270175][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.327674][T15831] bond0: (slave bond_slave_0): Releasing backup interface [ 285.352335][T15831] bond0: (slave bond_slave_1): Releasing backup interface [ 285.387408][T15831] team0: Port device team_slave_0 removed [ 285.415917][T15831] team0: Port device team_slave_1 removed [ 285.438029][T15831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.445525][T15831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.476281][T15831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.483815][T15831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.517175][T15831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.580161][T15852] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 285.599499][T11361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.768263][T15860] FAULT_INJECTION: forcing a failure. [ 285.768263][T15860] name failslab, interval 1, probability 0, space 0, times 0 [ 285.774804][T15864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15864 comm=syz.0.4357 [ 285.781032][T15860] CPU: 1 UID: 0 PID: 15860 Comm: syz.2.4356 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 285.781147][T15860] Tainted: [W]=WARN [ 285.781183][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.781294][T15860] Call Trace: [ 285.781315][T15860] [ 285.781345][T15860] __dump_stack+0x1d/0x30 [ 285.781431][T15860] dump_stack_lvl+0x95/0xd0 [ 285.781510][T15860] dump_stack+0x15/0x1b [ 285.781575][T15860] should_fail_ex+0x265/0x280 [ 285.781742][T15860] should_failslab+0x8c/0xb0 [ 285.781826][T15860] __kvmalloc_node_noprof+0x149/0x6b0 [ 285.781911][T15860] ? xt_alloc_entry_offsets+0x4d/0x60 [ 285.782112][T15860] ? refill_obj_stock+0x254/0x2e0 [ 285.782215][T15860] xt_alloc_entry_offsets+0x4d/0x60 [ 285.782319][T15860] translate_table+0xa9/0xf90 [ 285.782470][T15860] ? __rcu_read_unlock+0x4f/0x70 [ 285.782574][T15860] ? should_fail_ex+0xdb/0x280 [ 285.782663][T15860] ? _copy_from_user+0x89/0xb0 [ 285.782756][T15860] do_ipt_set_ctl+0x66f/0x820 [ 285.782897][T15860] nf_setsockopt+0x199/0x1b0 [ 285.782979][T15860] ip_setsockopt+0x102/0x110 [ 285.783084][T15860] udp_setsockopt+0x99/0xb0 [ 285.783181][T15860] sock_common_setsockopt+0x69/0x80 [ 285.783256][T15860] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 285.783337][T15860] __sys_setsockopt+0x184/0x200 [ 285.783444][T15860] __x64_sys_setsockopt+0x64/0x80 [ 285.783538][T15860] x64_sys_call+0x21d5/0x3000 [ 285.783680][T15860] do_syscall_64+0xca/0x2b0 [ 285.783793][T15860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.783865][T15860] RIP: 0033:0x7f152459f749 [ 285.783925][T15860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.784021][T15860] RSP: 002b:00007f1523007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.784106][T15860] RAX: ffffffffffffffda RBX: 00007f15247f5fa0 RCX: 00007f152459f749 [ 285.784186][T15860] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 285.784227][T15860] RBP: 00007f1523007090 R08: 0000000000000538 R09: 0000000000000000 [ 285.784318][T15860] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 285.784362][T15860] R13: 00007f15247f6038 R14: 00007f15247f5fa0 R15: 00007fff0a291f08 [ 285.784433][T15860] [ 285.835093][T15866] __nla_validate_parse: 1 callbacks suppressed [ 285.835149][T15866] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4355'. [ 286.184451][T15884] netlink: 383 bytes leftover after parsing attributes in process `syz.2.4362'. [ 286.193744][T15884] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 286.201873][T15884] openvswitch: netlink: Message has 4 unknown bytes. [ 286.373955][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4370'. [ 286.418188][T15901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.476801][T15912] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 286.499317][T15901] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4370: corrupted xattr block 6: invalid header [ 286.598516][T15916] random: crng reseeded on system resumption [ 286.607890][T15901] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 286.624579][T15916] Restarting kernel threads ... [ 286.629687][T15916] Done restarting kernel threads. [ 286.658183][T15901] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4370: corrupted xattr block 6: invalid header [ 286.725684][T15901] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 286.772623][ T29] kauditd_printk_skb: 691 callbacks suppressed [ 286.772678][ T29] audit: type=1400 audit(297.545:64600): avc: denied { setattr } for pid=15899 comm="syz.5.4370" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 286.802125][T15901] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4370: corrupted xattr block 6: invalid header [ 286.837450][T15924] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4379'. [ 286.873836][T14832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.927262][T15926] set_capacity_and_notify: 15 callbacks suppressed [ 286.927280][T15926] loop5: detected capacity change from 0 to 764 [ 287.044031][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4382'. [ 287.055009][T15933] netlink: 383 bytes leftover after parsing attributes in process `syz.0.4383'. [ 287.064219][T15933] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 287.072432][T15933] openvswitch: netlink: Message has 4 unknown bytes. [ 287.083548][T15932] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.114756][T15934] 9p: Unknown access argument 18446744073709551615: -34 [ 287.185874][T15932] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.216255][T15936] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 287.222819][T15936] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 287.231169][T15936] vhci_hcd vhci_hcd.0: Device attached [ 287.252223][ T29] audit: type=1326 audit(298.049:64601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 287.296666][T15932] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.307407][T15942] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 287.329641][ T29] audit: type=1326 audit(298.060:64602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 287.353126][ T29] audit: type=1326 audit(298.060:64603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 287.376150][ T29] audit: type=1326 audit(298.060:64604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 287.399157][ T29] audit: type=1326 audit(298.060:64605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdcce4df749 code=0x7ffc0000 [ 287.422235][ T29] audit: type=1326 audit(298.123:64606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 287.444822][ T29] audit: type=1326 audit(298.123:64607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 287.467291][ T29] audit: type=1326 audit(298.123:64608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 287.492120][ T29] audit: type=1326 audit(298.291:64609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152459f749 code=0x7ffc0000 [ 287.507014][ T9] usb 2-1: SetAddress Request (2) to port 0 [ 287.553971][T15936] vhci_hcd vhci_hcd.0: port 0 already used [ 287.564945][T15938] vhci_hcd: connection closed [ 287.568470][T15932] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.595469][ T12] vhci_hcd vhci_hcd.0: stop threads [ 287.600964][ T12] vhci_hcd vhci_hcd.0: release socket [ 287.606417][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 287.612634][T15944] loop5: detected capacity change from 0 to 512 [ 287.614186][ T9] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 287.652801][T15944] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4382: iget: bad extra_isize 90 (inode size 256) [ 287.696998][T15944] EXT4-fs (loop5): Remounting filesystem read-only [ 287.702666][ T9] usb 2-1: enqueue for inactive port 0 [ 287.703831][T15944] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 287.731057][T15955] loop2: detected capacity change from 0 to 764 [ 287.746431][ T9] usb 2-1: enqueue for inactive port 0 [ 287.753891][T15944] EXT4-fs (loop5): 1 orphan inode deleted [ 287.760162][T15944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.793061][T15944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.820707][ T9] usb 2-1: enqueue for inactive port 0 [ 287.828199][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.836795][ T12] ================================================================== [ 287.844908][ T12] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 287.852657][ T12] [ 287.855005][ T12] write to 0xffffffff86a25cd8 of 8 bytes by task 15955 on cpu 1: [ 287.862741][ T12] console_flush_all+0x38a/0x6c0 [ 287.867706][ T12] console_unlock+0x97/0x270 [ 287.872329][ T12] vprintk_emit+0x39f/0x5c0 [ 287.876867][ T12] vprintk_default+0x26/0x30 [ 287.881687][ T12] vprintk+0x1d/0x30 [ 287.885603][ T12] _printk+0x79/0xa0 [ 287.889543][ T12] __isofs_iget+0xfe9/0x1100 [ 287.894167][ T12] isofs_get_blocks+0x185/0x490 [ 287.899040][ T12] isofs_bread+0x5b/0x100 [ 287.903393][ T12] isofs_lookup+0x1a8/0x930 [ 287.907918][ T12] __lookup_slow+0x193/0x250 [ 287.912534][ T12] lookup_slow+0x3c/0x60 [ 287.916812][ T12] path_lookupat+0x2f7/0x500 [ 287.921428][ T12] filename_lookup+0x147/0x340 [ 287.926393][ T12] kern_path+0x3b/0x130 [ 287.930579][ T12] autofs_dev_ioctl_ismountpoint+0x12d/0x4c0 [ 287.936582][ T12] autofs_dev_ioctl+0x354/0x6a0 [ 287.941451][ T12] __se_sys_ioctl+0xce/0x140 [ 287.946074][ T12] __x64_sys_ioctl+0x43/0x50 [ 287.950787][ T12] x64_sys_call+0x14b0/0x3000 [ 287.955494][ T12] do_syscall_64+0xca/0x2b0 [ 287.960037][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.965949][ T12] [ 287.968296][ T12] read to 0xffffffff86a25cd8 of 8 bytes by task 12 on cpu 0: [ 287.975685][ T12] console_flush_all+0x549/0x6c0 [ 287.980647][ T12] console_unlock+0x97/0x270 [ 287.985270][ T12] vprintk_emit+0x39f/0x5c0 [ 287.989818][ T12] dev_vprintk_emit+0x242/0x2a0 [ 287.994698][ T12] dev_printk_emit+0x84/0xb0 [ 287.999329][ T12] __netdev_printk+0x34b/0x370 [ 288.004135][ T12] netdev_info+0x9b/0xd0 [ 288.008431][ T12] nsim_udp_tunnel_set_port+0x135/0x150 [ 288.014009][ T12] __udp_tunnel_nic_device_sync+0x567/0x9c0 [ 288.019956][ T12] udp_tunnel_nic_device_sync_work+0x5d/0x580 [ 288.026065][ T12] process_scheduled_works+0x4ce/0x9d0 [ 288.031565][ T12] worker_thread+0x582/0x770 [ 288.036192][ T12] kthread+0x489/0x510 [ 288.040301][ T12] ret_from_fork+0x149/0x290 [ 288.044933][ T12] ret_from_fork_asm+0x1a/0x30 [ 288.049737][ T12] [ 288.052090][ T12] value changed: 0x0000000000002831 -> 0x0000000000002832 [ 288.059238][ T12] [ 288.061612][ T12] Reported by Kernel Concurrency Sanitizer on: [ 288.067798][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 288.079127][ T12] Tainted: [W]=WARN [ 288.082946][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.093021][ T12] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 288.100340][ T12] ================================================================== [ 288.186609][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.243146][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.258656][ T9] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 288.270877][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.287228][ T9] usb 2-1: enqueue for inactive port 0 [ 288.292918][ T9] usb 2-1: enqueue for inactive port 0 [ 288.315820][ T9] usb 2-1: enqueue for inactive port 0 [ 289.287538][ T9] usb usb2-port1: attempt power cycle [ 291.021111][ T9] usb usb2-port1: unable to enumerate USB device