last executing test programs: 20m9.25185256s ago: executing program 1 (id=14550): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x84) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000080100000000000000", @ANYRES32=r6, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f0000000840), &(0x7f0000000340)}, 0x20) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 20m8.435750002s ago: executing program 1 (id=14560): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "f0f117dc05511ec65b01fcde01000000f90446770456fc072b5191fbdb44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) close(r1) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x11, r5, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) 20m8.410257152s ago: executing program 1 (id=14562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010025bdf000fcdbdf251000000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) 20m8.348354773s ago: executing program 1 (id=14565): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x840}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x11c) 20m7.349869758s ago: executing program 1 (id=14586): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="002222000000177bea6fedb30e"], 0x0}, 0x0) 20m6.788764446s ago: executing program 1 (id=14600): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 19m51.74619616s ago: executing program 32 (id=14600): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 4m37.437025855s ago: executing program 4 (id=25834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="020000008081000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="756365981f279a", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25030000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x24000080) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@errors_continue}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r10}, 0x10) r11 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r11, 0x0) 4m36.919580292s ago: executing program 4 (id=25840): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001600)="f5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="b141fb6163b8ed66bdd6", 0xa}, {&(0x7f0000001700)="2e660d02eb41d9ba8f360384c4245c6b35be706779d8d23a0b7aa66edaab8e2555dd8b57817f0ea93f976762815c7e9979f12db1802b34bae1620eeb14aaddcefad0b51837051f91c0bf1c025534ab02c31764f5a0596c676d0959dd5d8db6485e246aca41bbe783e2f5507aab7f63af15154be2b83082e2c956480cd981680afafddb127939db107d8a9559b120a04c9b08ccca2892102a91b0902100a85160da29604ab75e78e75e5c4760656e79a299ee30f5010338c2d49d2d0ab253a3adfe6c7856acee676beb57567b654e641a642dc093f6", 0xd5}], 0x2}}], 0x2, 0xc0) 4m36.885768653s ago: executing program 4 (id=25841): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1c0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x16c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x8c, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x6, 0xffffffffdffffff3, 0x2, 0x6ffe595}}]}, {0x45, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x78, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0x8}, 0xff21}}]}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x34, 0x13, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1a7e0e4004363817}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m36.865984173s ago: executing program 4 (id=25843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) syslog(0x2, &(0x7f0000000180)=""/85, 0x55) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x115428, 0x0, 0x0, 0x9, 0x5f4c, 0x1, 0xc04, 0x0, 0xffffff56}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x24082, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x0) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x22, 0x0, @fd_index=0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) io_uring_enter(r6, 0x45bc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m36.726738935s ago: executing program 4 (id=25848): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x948}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="ddd5be65914ca2fd9a767ed10a74", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r6 = gettid() r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f00000002c0)={r5, r5, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r9, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000840)={0x2, &(0x7f0000000800)=[{0x7, 0xfb, 0x8, 0x7f}, {0x9, 0x7, 0x6, 0x8001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6"], &(0x7f0000000100)='GPL\x00', 0xf7e9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x31, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x8000, 0x4, 0x200, {{0x17, 0x4, 0x2, 0x5, 0x5c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @local, {[@end, @generic={0x88, 0x3, "e3"}, @timestamp_addr={0x44, 0xc, 0xbd, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x1}]}, @generic={0x86, 0xb, "64787abcdbd0a62ef1"}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x1, 0xb, "0466c677aeb6f2dabf"}, {0x5, 0x7, "031aefe293"}, {0x6, 0xd, "568bc3fbe1ed8b0cc5e5a0"}]}, @generic={0x41, 0x5, "4884ee"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000200000005000000ffff000008100000", @ANYRES32=r0, @ANYBLOB="01f000000000000000000000f2b9000000000000", @ANYRES32=r10, @ANYRES32, @ANYBLOB="0400000004000000010000000900"/28], 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbdf25190000000c000180080003090000000000000080140002006970366772653000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000300020000000800030003000000140002007767320000000000000000000000000058000180140002007665746831000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="080003000100000014000200766c616e30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468305f746f5f7465616d000000"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4080020) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x80, r12, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x80}}, 0xc0d1) r13 = accept4$packet(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x14, 0x0) setsockopt$packet_fanout_data(r13, 0x107, 0x16, &(0x7f0000000700)={0x4, &(0x7f00000006c0)=[{0xfffa, 0x6, 0x9, 0x7fffffff}, {0xde5d, 0x7, 0xd, 0x81}, {0x8, 0x9, 0x8}, {0x6, 0x0, 0x8, 0x1}]}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) shutdown(0xffffffffffffffff, 0x1) 4m36.627622687s ago: executing program 4 (id=25851): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001600)="f5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="b141fb6163b8ed66bdd6", 0xa}, {&(0x7f0000001700)="2e660d02eb41d9ba8f360384c4245c6b35be706779d8d23a0b7aa66edaab8e2555dd8b57817f0ea93f976762815c7e9979f12db1802b34bae1620eeb14aaddcefad0b51837051f91c0bf1c025534ab02c31764f5a0596c676d0959dd5d8db6485e246aca41bbe783e2f5507aab7f63af15154be2b83082e2c956480cd981680afafddb127939db107d8a9559b120a04c9b08ccca2892102a91b0902100a85160da29604ab75e78e75e5c4760656e79a299ee30f5010338c2d49d2d0ab253a3adfe6c7856acee676beb57567b654e641a642dc093f6", 0xd5}], 0x2}}], 0x2, 0xc0) 4m36.627272087s ago: executing program 33 (id=25851): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001600)="f5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="b141fb6163b8ed66bdd6", 0xa}, {&(0x7f0000001700)="2e660d02eb41d9ba8f360384c4245c6b35be706779d8d23a0b7aa66edaab8e2555dd8b57817f0ea93f976762815c7e9979f12db1802b34bae1620eeb14aaddcefad0b51837051f91c0bf1c025534ab02c31764f5a0596c676d0959dd5d8db6485e246aca41bbe783e2f5507aab7f63af15154be2b83082e2c956480cd981680afafddb127939db107d8a9559b120a04c9b08ccca2892102a91b0902100a85160da29604ab75e78e75e5c4760656e79a299ee30f5010338c2d49d2d0ab253a3adfe6c7856acee676beb57567b654e641a642dc093f6", 0xd5}], 0x2}}], 0x2, 0xc0) 1.482702868s ago: executing program 6 (id=31470): syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}, 0x0) 1.459410569s ago: executing program 6 (id=31471): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) 969.656646ms ago: executing program 6 (id=31491): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) 867.147408ms ago: executing program 6 (id=31498): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @private1={0xfc, 0x1, '\x00', 0x1}, 0xaffe}, {0xa, 0x4e20, 0x0, @loopback, 0x7fffffff}, r2, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private1, 0x206}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r4, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x100f9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 865.757517ms ago: executing program 5 (id=31499): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000010001fff29bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000340012800b00010067726574617000002400028008000500001c000006000e0001000000080007006401010108000100", @ANYRES32=0x0, @ANYBLOB="010100e9", @ANYRES32=r2, @ANYBLOB], 0x5c}}, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x100000000000600d, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) 847.376138ms ago: executing program 0 (id=31500): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0900000000000004000000647400"/28], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x2, 0x0, 0x8000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) socket(0x2, 0x80805, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x3, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x4, 0x8) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r3, r4, 0x0) 757.253549ms ago: executing program 2 (id=31503): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x7, 0x5, 0xb, 0x8001}, 0x10) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r0, r0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='mm_vmscan_wakeup_kswapd\x00', r2}, 0x18) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x9d81, 0x2, 0xfffffffe, 0x3bd}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f00000002c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x81, 0x0) getdents64(r6, 0x0, 0x22) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000240)=0x200) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r5, 0x4, 0x30}, &(0x7f0000000080)=0xc) r7 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) ioctl$FICLONE(r7, 0x40049409, 0xffffffffffffffff) fcntl$addseals(r7, 0x409, 0x3) 706.89189ms ago: executing program 0 (id=31504): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 672.06243ms ago: executing program 5 (id=31506): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0x34}}, 0x2000c054) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6215e3c3}]}}}}}}}, 0x0) 641.886531ms ago: executing program 5 (id=31508): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="0900000000000004000000647400"/28], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x2, 0x0, 0x8000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="800000001300024228bd7000fbdbdf25150301004e244e240004000004000000ff000000ff01000024780000010000000100000002000000", @ANYRES32=r2, @ANYBLOB="0500000008000000100000000000000033000100cbbb282a2c5308df2b7b73a0e834c71b1c6d10ce246cdceb5f64bea4d88daf128dbea53814de3ae92126d05be827b800"], 0x80}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40014) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c3000040000000009500"], 0x0, 0x5, 0xd2, &(0x7f0000000080)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000180)=0x4) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r9 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x3, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x4, 0x8) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r9, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r7, r8, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000005000000bfef00000180e50000000100", @ANYRES32, @ANYBLOB="8100"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000002000000000000000500"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r12, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r13, 0x0, 0x0}, 0x20) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fadvise64(r14, 0x0, 0x100000001, 0x3) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x1, &(0x7f0000000080)=0x4, 0x4) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 611.735302ms ago: executing program 2 (id=31510): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}}], 0x1, 0x2000c000) sendmmsg$inet(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001f00)="b0e31f2e4899", 0x6}], 0x1}}], 0x1, 0x0) 570.820672ms ago: executing program 0 (id=31511): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 523.032792ms ago: executing program 2 (id=31512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 506.939173ms ago: executing program 0 (id=31514): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0900000000000004000000647400"/28], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x2, 0x0, 0x8000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) socket(0x2, 0x80805, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x3, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x4, 0x8) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r3, r4, 0x0) 428.957574ms ago: executing program 5 (id=31516): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000010001fff29bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000340012800b00010067726574617000002400028008000500001c000006000e0001000000080007006401010108000100", @ANYRES32=0x0, @ANYBLOB="010100e9", @ANYRES32=r2, @ANYBLOB], 0x5c}}, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x100000000000600d, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) 355.826265ms ago: executing program 2 (id=31517): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) close(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0x2f) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@empty, 0x2, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x9, 0x0, 0x0, 0x5, 0xf42}, {0x81, 0x2, 0x1, 0xfffeffdffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4000000, 0x33}, 0x0, @in=@loopback, 0x3503, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 355.548645ms ago: executing program 3 (id=31518): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0x34}}, 0x2000c054) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6215e3c3}]}}}}}}}, 0x0) 337.489345ms ago: executing program 3 (id=31519): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="2555bf7d08be8feaf7355e3019ca8f2dd8894b21e3197e9a62aa3b748675e7056decbda753d0eca39c242fcdd430e42bb508cedda70682b42b32f6378674c0d49d4c628d2b92e6a50690890309f682520fee66015510910aed10aa11de2f2ea283342329cee0950ecd52aaeee582a8bb55", 0x71, 0x20000000, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000040)="8ece37b4e2d66e5245eb5b9b5d371c", 0xf}], 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$key(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x4808) r7 = dup2(r0, r1) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', r7, &(0x7f0000000200)='./file0\x00', 0x42) 312.892875ms ago: executing program 5 (id=31520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x15, 0x61, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}, {"3250d19a1f0e82a1c1920b924202b81abcf4202656d9a20838ae91b72ce541de8d99d301bcd1c6799c6a2a18d7a0496108c666cc15643079d2"}}}}}}, 0x0) 312.181095ms ago: executing program 2 (id=31521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d52e0895066646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX, @ANYBLOB=',k']) 271.897526ms ago: executing program 5 (id=31522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = gettid() kcmp(r1, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f00000001c0)="d7788c065cf41c127cb1701d137716ad9aeadd530107ed2f83d0000d491c85d474914204a7d97693623e1b1dc84e0bebc7c0c21c8d0271a710d898428edb5874093755d7207dd03046b3dacdf4c7f2054ecac4435ae901bb888296a731a38bcbe54207c830c69adaed9b009652eb5b3782e0a565d10e149e37f4eb589986b7537f4276d5b919d071a35e3d6149852a659ff8844cd01e0ef253a89f84c171b2a53f5ee07e9a092082f4fb3514802925bb02df461d171aae1da668bf57c3dd1957eaca4be365d776fc874ed29fe6ff59184df37fc2acdfa54db3035f09cc925cd875bbd7406dadca0ed47e8bd6b7d711", 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x4, 0x0, 0x20, 0x7ffc0001}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000008f000000000000000000001801000020646c2100000008002020207b1af8ff00000000bfa1000000000008000000b7030000000000008500000006000000181100"/84, @ANYRESOCT=r0, @ANYBLOB="003a7b00000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x2}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 253.723456ms ago: executing program 2 (id=31523): bpf$PROG_LOAD(0x5, 0x0, 0x4e) socket(0x10, 0x3, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000003000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000fffeb53977bb123d761518ab7d3415a9fba6a6817dac11f01ea81bc243baaa6dcb9142e1c52406b04429b733fca783c48309353be6cea81618986edfdcf67043365923dccc2c1eec8010559886e90b59365663b3961714f2d7fa0739e1814045357838665cc5e0c59eb1", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8000d8, &(0x7f0000000180), 0x1, 0x5b2, &(0x7f0000001140)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000110f00090000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002800128009000100766c616e00000000180002800c0002001b0000001f000000060001000000000008000500", @ANYRES32=r7], 0x58}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="20c90400810100001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 252.015856ms ago: executing program 3 (id=31524): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 212.210217ms ago: executing program 0 (id=31525): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 187.280837ms ago: executing program 3 (id=31526): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) 169.577708ms ago: executing program 6 (id=31527): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES16=r1], 0x1000f) 127.185658ms ago: executing program 0 (id=31528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1, 0x0, 0x1034}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000025c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x238, 0x190, 0xffffffff, 0xd8, 0x238, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, &(0x7f0000001080), {[{{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x65, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @loopback, @multicast2, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00', {}, {}, 0x32, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "d835", 0x1}}, @common=@ah={{0x30}, {[0x8, 0x100], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @rand_addr=0x64010102, @icmp_id=0x66, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) ioperm(0x0, 0x40, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 123.647548ms ago: executing program 3 (id=31529): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0x34}}, 0x2000c054) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6215e3c3}]}}}}}}}, 0x0) 59.869879ms ago: executing program 6 (id=31530): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendfile(r5, r4, 0x0, 0x66d3e717) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2514642b2155dd355317a3d3151885df373797135d19fdc5806428b020f533b43be15d4b26869c50ff860e2b9f8d9f9a3430039a426c1a9c3adfcd763e87d53043da655e7e209b69256fbab55c144215af711e642f77f6728c81824a618e9701f07e1f90529804979eb63d020979083565f9baf6c0d97aff59fc9c5afcc1450c23c3a77cee01abc33afc1aebb102fa40fb5f27d9608da2a7068d40813903644946ec36705395e2f43815115cb1546ef1facab8d8849e2ef42776e64c0cd8efe33c74f377a79f2a60d90ebc471106fb408de9f2e8244008bf9e9d94675711db4919ef866750d962c7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000ddffffff00000000000000000000009a9d7abc9d6a52a3fc87d85638bd3511aead4a8e8d24f3e30f134e224a31367f48d15e6b15e4e986ad3efb9fc67111e71a389465e3bf21166085dc16b4b7adda72f310e3fb14382910c6b17e15195c1df01b0be352ae3cc487399a164c85867ec822eb5a0475a9d0643aae14369b3924854fb2723873db0401e507023a8c537ff20e3634a309c151b848d8400342f03c7ab6e2901d5604738682c5e440367f51f4540c04"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r12, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x6b93, 0x4) 0s ago: executing program 3 (id=31531): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000010001fff29bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000340012800b00010067726574617000002400028008000500001c000006000e0001000000080007006401010108000100", @ANYRES32=0x0, @ANYBLOB="010100e9", @ANYRES32=r2, @ANYBLOB], 0x5c}}, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x100000000000600d, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xa8\xc4\xd2o\xae\xb4W`\xfd\x196\xa0Rd\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) kernel console output (not intermixed with test programs): k Ridge and switching to Joliet. [ 2381.718792][ T29] audit: type=1400 audit(2381.686:158788): avc: denied { mount } for pid=24386 comm="syz.6.30478" name="/" dev="loop6" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 2381.719706][T24393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24393 comm=syz.3.30482 [ 2381.719734][T24393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24393 comm=syz.3.30482 [ 2381.722014][ T29] audit: type=1400 audit(2381.686:158789): avc: denied { setopt } for pid=24391 comm="syz.5.30481" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2381.722816][ T29] audit: type=1400 audit(2381.686:158790): avc: denied { create } for pid=24391 comm="syz.5.30481" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2381.725342][ T29] audit: type=1400 audit(2381.696:158791): avc: denied { write } for pid=24391 comm="syz.5.30481" name="file0" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2381.738043][T24393] netlink: 'syz.3.30482': attribute type 1 has an invalid length. [ 2381.747156][T24393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2381.752525][T24390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30480'. [ 2381.752578][T24393] bond1: (slave dummy0): Releasing active interface [ 2381.764673][T24397] FAULT_INJECTION: forcing a failure. [ 2381.764673][T24397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2381.916003][T24397] CPU: 1 UID: 0 PID: 24397 Comm: syz.6.30483 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2381.916039][T24397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2381.916055][T24397] Call Trace: [ 2381.916063][T24397] [ 2381.916074][T24397] __dump_stack+0x1d/0x30 [ 2381.916163][T24397] dump_stack_lvl+0xe8/0x140 [ 2381.916208][T24397] dump_stack+0x15/0x1b [ 2381.916229][T24397] should_fail_ex+0x265/0x280 [ 2381.916273][T24397] should_fail+0xb/0x20 [ 2381.916370][T24397] should_fail_usercopy+0x1a/0x20 [ 2381.916394][T24397] strncpy_from_user+0x25/0x230 [ 2381.916460][T24397] ? kmem_cache_alloc_noprof+0x186/0x310 [ 2381.916501][T24397] ? getname_flags+0x80/0x3b0 [ 2381.916536][T24397] getname_flags+0xae/0x3b0 [ 2381.916568][T24397] user_path_at+0x28/0x130 [ 2381.916612][T24397] __x64_sys_umount+0x85/0xe0 [ 2381.916729][T24397] x64_sys_call+0x2915/0x2fb0 [ 2381.916772][T24397] do_syscall_64+0xd2/0x200 [ 2381.916797][T24397] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2381.916828][T24397] ? clear_bhb_loop+0x40/0x90 [ 2381.916855][T24397] ? clear_bhb_loop+0x40/0x90 [ 2381.916907][T24397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2381.916936][T24397] RIP: 0033:0x7f4fce4de929 [ 2381.916955][T24397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2381.916979][T24397] RSP: 002b:00007f4fccb47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2381.917003][T24397] RAX: ffffffffffffffda RBX: 00007f4fce705fa0 RCX: 00007f4fce4de929 [ 2381.917021][T24397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 2381.917038][T24397] RBP: 00007f4fccb47090 R08: 0000000000000000 R09: 0000000000000000 [ 2381.917133][T24397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2381.917149][T24397] R13: 0000000000000000 R14: 00007f4fce705fa0 R15: 00007ffec915b878 [ 2381.917174][T24397] [ 2381.948285][T24393] bond3: (slave dummy0): making interface the new active one [ 2381.949614][T24393] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 2381.969876][T24410] netlink: 'syz.5.30484': attribute type 9 has an invalid length. [ 2381.969899][T24410] netlink: 'syz.5.30484': attribute type 7 has an invalid length. [ 2381.969914][T24410] netlink: 'syz.5.30484': attribute type 8 has an invalid length. [ 2382.003902][T24414] loop6: detected capacity change from 0 to 512 [ 2382.012854][T24414] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2382.061890][T24414] loop6: detected capacity change from 0 to 128 [ 2382.073323][T24424] netlink: 'syz.3.30487': attribute type 1 has an invalid length. [ 2382.073624][T24424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30487'. [ 2382.100330][T24414] lo speed is unknown, defaulting to 1000 [ 2382.328207][T24443] loop0: detected capacity change from 0 to 4096 [ 2382.337306][T24443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2382.352828][T24443] EXT4-fs error (device loop0): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.0.30488: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2382.376259][T24443] EXT4-fs error (device loop0): ext4_get_first_dir_block:3547: inode #12: comm syz.0.30488: directory missing '..' [ 2382.460516][T20891] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2382.716458][T24492] loop0: detected capacity change from 0 to 1024 [ 2382.835381][T24492] EXT4-fs: Ignoring removed nobh option [ 2382.841142][T24492] EXT4-fs: Ignoring removed nobh option [ 2382.863574][T24502] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2382.898871][T24492] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 2382.953625][T24492] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.30489: inode #4294967295: comm syz.0.30489: iget: illegal inode # [ 2383.044907][T24492] EXT4-fs (loop0): no journal found [ 2383.050214][T24492] EXT4-fs (loop0): can't get journal size [ 2383.161950][T24492] EXT4-fs (loop0): failed to initialize system zone (-22) [ 2383.186963][T24546] loop6: detected capacity change from 0 to 1024 [ 2383.226560][T24492] EXT4-fs (loop0): mount failed [ 2383.236796][T24546] EXT4-fs: Ignoring removed nobh option [ 2383.242428][T24546] EXT4-fs: Ignoring removed nobh option [ 2383.284836][T24554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30500'. [ 2383.312242][T24546] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 2383.358985][T24546] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: comm syz.6.30495: inode #4294967295: comm syz.6.30495: iget: illegal inode # [ 2383.437678][T24546] EXT4-fs (loop6): no journal found [ 2383.443095][T24546] EXT4-fs (loop6): can't get journal size [ 2383.455646][T24562] SELinux: syz.2.30502 (24562) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2383.542619][T24546] EXT4-fs (loop6): failed to initialize system zone (-22) [ 2383.550411][T24546] EXT4-fs (loop6): mount failed [ 2383.624489][T24573] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2383.713906][T24581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30506'. [ 2383.990849][T24599] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2384.071465][T24605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30517'. [ 2384.183071][T24623] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2384.195882][T24622] loop0: detected capacity change from 0 to 164 [ 2384.210973][T24622] ISOFS: unable to read i-node block [ 2384.216423][T24622] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2384.231632][T24628] netlink: 80 bytes leftover after parsing attributes in process `syz.2.30527'. [ 2384.246512][T24628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30527'. [ 2384.255779][T24628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2384.263359][T24628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2384.276408][T24628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2384.283928][T24628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2384.332103][T24636] loop6: detected capacity change from 0 to 128 [ 2384.340246][T24634] netlink: 36 bytes leftover after parsing attributes in process `syz.0.30531'. [ 2384.342035][T24639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30532'. [ 2384.441635][T24646] FAULT_INJECTION: forcing a failure. [ 2384.441635][T24646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2384.455460][T24646] CPU: 1 UID: 0 PID: 24646 Comm: syz.0.30534 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2384.455492][T24646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2384.455505][T24646] Call Trace: [ 2384.455511][T24646] [ 2384.455518][T24646] __dump_stack+0x1d/0x30 [ 2384.455538][T24646] dump_stack_lvl+0xe8/0x140 [ 2384.455562][T24646] dump_stack+0x15/0x1b [ 2384.455583][T24646] should_fail_ex+0x265/0x280 [ 2384.455676][T24646] should_fail+0xb/0x20 [ 2384.455715][T24646] should_fail_usercopy+0x1a/0x20 [ 2384.455735][T24646] strncpy_from_user+0x25/0x230 [ 2384.455762][T24646] ? kmem_cache_alloc_noprof+0x186/0x310 [ 2384.455919][T24646] ? getname_flags+0x80/0x3b0 [ 2384.455953][T24646] getname_flags+0xae/0x3b0 [ 2384.455986][T24646] user_path_at+0x28/0x130 [ 2384.456103][T24646] __se_sys_pivot_root+0xbc/0x720 [ 2384.456172][T24646] ? fput+0x8f/0xc0 [ 2384.456238][T24646] __x64_sys_pivot_root+0x31/0x40 [ 2384.456267][T24646] x64_sys_call+0x2aac/0x2fb0 [ 2384.456409][T24646] do_syscall_64+0xd2/0x200 [ 2384.456436][T24646] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2384.456469][T24646] ? clear_bhb_loop+0x40/0x90 [ 2384.456495][T24646] ? clear_bhb_loop+0x40/0x90 [ 2384.456579][T24646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.456599][T24646] RIP: 0033:0x7f16240be929 [ 2384.456629][T24646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2384.456695][T24646] RSP: 002b:00007f1622727038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 2384.456718][T24646] RAX: ffffffffffffffda RBX: 00007f16242e5fa0 RCX: 00007f16240be929 [ 2384.456788][T24646] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000200000000500 [ 2384.456800][T24646] RBP: 00007f1622727090 R08: 0000000000000000 R09: 0000000000000000 [ 2384.456812][T24646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2384.456824][T24646] R13: 0000000000000000 R14: 00007f16242e5fa0 R15: 00007ffdfde08cc8 [ 2384.456849][T24646] [ 2384.758129][T24651] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2384.800853][T24664] tipc: Started in network mode [ 2384.805994][T24664] tipc: Node identity ac14140f, cluster identity 4711 [ 2384.808669][T24654] Cannot find set identified by id 0 to match [ 2384.813091][T24664] tipc: New replicast peer: 255.255.255.255 [ 2384.825088][T24664] tipc: Enabled bearer , priority 10 [ 2384.862442][T24673] FAULT_INJECTION: forcing a failure. [ 2384.862442][T24673] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.875277][T24673] CPU: 0 UID: 0 PID: 24673 Comm: syz.6.30545 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2384.875358][T24673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2384.875390][T24673] Call Trace: [ 2384.875400][T24673] [ 2384.875451][T24673] __dump_stack+0x1d/0x30 [ 2384.875474][T24673] dump_stack_lvl+0xe8/0x140 [ 2384.875500][T24673] dump_stack+0x15/0x1b [ 2384.875521][T24673] should_fail_ex+0x265/0x280 [ 2384.875627][T24673] should_failslab+0x8c/0xb0 [ 2384.875653][T24673] __kmalloc_noprof+0xa5/0x3e0 [ 2384.875685][T24673] ? io_cache_alloc_new+0x2a/0xb0 [ 2384.875746][T24673] io_cache_alloc_new+0x2a/0xb0 [ 2384.875795][T24673] io_sqe_buffer_register+0xf2/0x12f0 [ 2384.875855][T24673] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 2384.875893][T24673] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 2384.875987][T24673] ? io_sqe_buffers_register+0xc2/0x530 [ 2384.876016][T24673] io_sqe_buffers_register+0x2ac/0x530 [ 2384.876047][T24673] __se_sys_io_uring_register+0xa9f/0xeb0 [ 2384.876078][T24673] ? fput+0x8f/0xc0 [ 2384.876140][T24673] ? ksys_write+0x192/0x1a0 [ 2384.876246][T24673] __x64_sys_io_uring_register+0x55/0x70 [ 2384.876274][T24673] x64_sys_call+0xc91/0x2fb0 [ 2384.876294][T24673] do_syscall_64+0xd2/0x200 [ 2384.876315][T24673] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2384.876352][T24673] ? clear_bhb_loop+0x40/0x90 [ 2384.876380][T24673] ? clear_bhb_loop+0x40/0x90 [ 2384.876452][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.876474][T24673] RIP: 0033:0x7f4fce4de929 [ 2384.876488][T24673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2384.876506][T24673] RSP: 002b:00007f4fccb47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 2384.876589][T24673] RAX: ffffffffffffffda RBX: 00007f4fce705fa0 RCX: 00007f4fce4de929 [ 2384.876645][T24673] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 2384.876660][T24673] RBP: 00007f4fccb47090 R08: 0000000000000000 R09: 0000000000000000 [ 2384.876676][T24673] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 2384.876692][T24673] R13: 0000000000000000 R14: 00007f4fce705fa0 R15: 00007ffec915b878 [ 2384.876714][T24673] [ 2385.142101][T24678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30547'. [ 2385.189726][T24666] Cannot find set identified by id 0 to match [ 2385.198592][T24686] loop6: detected capacity change from 0 to 1024 [ 2385.205646][T24686] /dev/loop6: Can't open blockdev [ 2385.246554][T24691] xt_connbytes: Forcing CT accounting to be enabled [ 2385.253425][T24691] Cannot find set identified by id 0 to match [ 2385.298944][T24693] validate_nla: 1 callbacks suppressed [ 2385.298957][T24693] netlink: 'syz.6.30552': attribute type 1 has an invalid length. [ 2385.312522][T24693] netlink: 80 bytes leftover after parsing attributes in process `syz.6.30552'. [ 2385.316930][T24695] netlink: 'syz.2.30553': attribute type 1 has an invalid length. [ 2385.336049][T24695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30553'. [ 2385.376822][T24693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.30552'. [ 2385.404701][T24699] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2385.421296][T24703] SELinux: syz.5.30555 (24703) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2385.515924][T24715] 9pnet_fd: Insufficient options for proto=fd [ 2385.567629][T24723] netlink: 'syz.6.30566': attribute type 1 has an invalid length. [ 2385.575832][T24723] netlink: 80 bytes leftover after parsing attributes in process `syz.6.30566'. [ 2385.667177][T24733] SELinux: syz.6.30570 (24733) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2385.745598][T24743] 9pnet_fd: Insufficient options for proto=fd [ 2385.943044][ T636] tipc: Node number set to 2886997007 [ 2385.951509][T24768] SELinux: syz.2.30587 (24768) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2386.011431][T24772] Invalid ELF header magic: != ELF [ 2386.075164][T24786] netlink: 'syz.5.30594': attribute type 1 has an invalid length. [ 2386.092986][T24790] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2386.227562][T24809] FAULT_INJECTION: forcing a failure. [ 2386.227562][T24809] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.240348][T24809] CPU: 1 UID: 0 PID: 24809 Comm: syz.2.30604 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2386.240385][T24809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2386.240402][T24809] Call Trace: [ 2386.240411][T24809] [ 2386.240420][T24809] __dump_stack+0x1d/0x30 [ 2386.240483][T24809] dump_stack_lvl+0xe8/0x140 [ 2386.240506][T24809] dump_stack+0x15/0x1b [ 2386.240525][T24809] should_fail_ex+0x265/0x280 [ 2386.240566][T24809] should_failslab+0x8c/0xb0 [ 2386.240637][T24809] kmem_cache_alloc_node_noprof+0x57/0x320 [ 2386.240672][T24809] ? __alloc_skb+0x101/0x320 [ 2386.240714][T24809] __alloc_skb+0x101/0x320 [ 2386.240821][T24809] netlink_alloc_large_skb+0xba/0xf0 [ 2386.240864][T24809] netlink_sendmsg+0x3cf/0x6b0 [ 2386.240894][T24809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2386.240991][T24809] __sock_sendmsg+0x142/0x180 [ 2386.241021][T24809] ____sys_sendmsg+0x31e/0x4e0 [ 2386.241057][T24809] ___sys_sendmsg+0x17b/0x1d0 [ 2386.241170][T24809] __x64_sys_sendmsg+0xd4/0x160 [ 2386.241197][T24809] x64_sys_call+0x2999/0x2fb0 [ 2386.241223][T24809] do_syscall_64+0xd2/0x200 [ 2386.241245][T24809] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2386.241274][T24809] ? clear_bhb_loop+0x40/0x90 [ 2386.241354][T24809] ? clear_bhb_loop+0x40/0x90 [ 2386.241377][T24809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.241400][T24809] RIP: 0033:0x7f045901e929 [ 2386.241417][T24809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2386.241438][T24809] RSP: 002b:00007f0457687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2386.241513][T24809] RAX: ffffffffffffffda RBX: 00007f0459245fa0 RCX: 00007f045901e929 [ 2386.241527][T24809] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 2386.241541][T24809] RBP: 00007f0457687090 R08: 0000000000000000 R09: 0000000000000000 [ 2386.241555][T24809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2386.241645][T24809] R13: 0000000000000000 R14: 00007f0459245fa0 R15: 00007fff50392f58 [ 2386.241667][T24809] [ 2386.492157][T24815] SELinux: syz.0.30607 (24815) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2386.514940][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 2386.515012][ T29] audit: type=1400 audit(2386.486:159038): avc: denied { create } for pid=24818 comm="syz.6.30608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2386.515060][T24819] SELinux: Context system_u:object_r:fonts_cache_t:s0 is not valid (left unmapped). [ 2386.521368][ T29] audit: type=1400 audit(2386.486:159039): avc: denied { relabelfrom } for pid=24818 comm="syz.6.30608" name="TIPC" dev="sockfs" ino=382392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2386.573117][ T29] audit: type=1400 audit(2386.486:159040): avc: denied { mac_admin } for pid=24818 comm="syz.6.30608" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2386.595398][ T29] audit: type=1400 audit(2386.516:159041): avc: denied { relabelto } for pid=24818 comm="syz.6.30608" name="TIPC" dev="sockfs" ino=382392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tipc_socket permissive=1 trawcon="system_u:object_r:fonts_cache_t:s0" [ 2386.671631][T24827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24827 comm=syz.6.30613 [ 2386.684471][T24827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24827 comm=syz.6.30613 [ 2386.712036][T24827] loop6: detected capacity change from 0 to 1024 [ 2386.718903][T24827] /dev/loop6: Can't open blockdev [ 2386.724885][T24827] netlink: 'syz.6.30613': attribute type 1 has an invalid length. [ 2386.727875][T24830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24830 comm=syz.0.30614 [ 2386.740325][T24827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2386.745409][T24830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24830 comm=syz.0.30614 [ 2386.775941][T24827] bond7: (slave dummy0): Releasing active interface [ 2386.809099][ T29] audit: type=1400 audit(2386.776:159042): avc: denied { mount } for pid=24820 comm="syz.2.30610" name="/" dev="configfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2386.831892][ T29] audit: type=1400 audit(2386.776:159043): avc: denied { search } for pid=24820 comm="syz.2.30610" name="/" dev="configfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2386.854067][ T29] audit: type=1400 audit(2386.776:159044): avc: denied { search } for pid=24820 comm="syz.2.30610" name="/" dev="configfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2386.876262][ T29] audit: type=1400 audit(2386.776:159045): avc: denied { read open } for pid=24820 comm="syz.2.30610" path="/" dev="configfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2386.902059][T24830] loop0: detected capacity change from 0 to 1024 [ 2386.916468][T24827] bond8: (slave dummy0): making interface the new active one [ 2386.944106][T24827] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 2387.138335][T24830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2387.169378][T24830] netlink: 'syz.0.30614': attribute type 1 has an invalid length. [ 2387.185233][T24830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2387.198971][ T29] audit: type=1400 audit(2387.166:159046): avc: denied { ioctl } for pid=24850 comm="syz.3.30620" path="socket:[381542]" dev="sockfs" ino=381542 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2387.232464][T24842] Cannot find set identified by id 0 to match [ 2387.238960][T24830] bond1: (slave dummy0): Releasing active interface [ 2387.254896][T24830] bond2: (slave dummy0): making interface the new active one [ 2387.266408][T24830] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 2387.283952][T24851] Invalid ELF header magic: != ELF [ 2387.312103][T20891] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2387.353822][T24864] netlink: 'syz.6.30625': attribute type 1 has an invalid length. [ 2387.375201][T24866] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2387.390345][T24868] netlink: 'syz.3.30627': attribute type 1 has an invalid length. [ 2387.408821][T24870] SELinux: syz.5.30628 (24870) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2387.442929][T24873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2387.450484][T24873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2387.466673][T24873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2387.474263][T24873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2387.538306][ T29] audit: type=1400 audit(2387.506:159047): avc: denied { read } for pid=24879 comm="syz.2.30632" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2387.600682][T24877] Cannot find set identified by id 0 to match [ 2387.739743][T24898] SELinux: syz.2.30639 (24898) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2387.791734][T24906] netlink: 'syz.3.30644': attribute type 1 has an invalid length. [ 2387.945043][T24925] loop6: detected capacity change from 0 to 128 [ 2387.995618][T24928] Cannot find set identified by id 0 to match [ 2388.040852][T24931] SELinux: syz.3.30653 (24931) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2388.069914][T24935] loop2: detected capacity change from 0 to 512 [ 2388.091108][T24935] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2388.122546][T24941] FAULT_INJECTION: forcing a failure. [ 2388.122546][T24941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2388.135927][T24941] CPU: 0 UID: 0 PID: 24941 Comm: syz.0.30658 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2388.135957][T24941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2388.135971][T24941] Call Trace: [ 2388.135977][T24941] [ 2388.135986][T24941] __dump_stack+0x1d/0x30 [ 2388.136011][T24941] dump_stack_lvl+0xe8/0x140 [ 2388.136070][T24941] dump_stack+0x15/0x1b [ 2388.136085][T24941] should_fail_ex+0x265/0x280 [ 2388.136117][T24941] should_fail+0xb/0x20 [ 2388.136195][T24941] should_fail_usercopy+0x1a/0x20 [ 2388.136214][T24941] _copy_from_user+0x1c/0xb0 [ 2388.136258][T24941] sctp_getsockopt_default_send_param+0x6f/0x3e0 [ 2388.136296][T24941] sctp_getsockopt+0x4b7/0xaa0 [ 2388.136334][T24941] sock_common_getsockopt+0x60/0x70 [ 2388.136423][T24941] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2388.136457][T24941] do_sock_getsockopt+0x1fd/0x240 [ 2388.136479][T24941] __x64_sys_getsockopt+0x11e/0x1a0 [ 2388.136525][T24941] x64_sys_call+0x12aa/0x2fb0 [ 2388.136600][T24941] do_syscall_64+0xd2/0x200 [ 2388.136626][T24941] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2388.136717][T24941] ? clear_bhb_loop+0x40/0x90 [ 2388.136737][T24941] ? clear_bhb_loop+0x40/0x90 [ 2388.136762][T24941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2388.136787][T24941] RIP: 0033:0x7f16240be929 [ 2388.136873][T24941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2388.136903][T24941] RSP: 002b:00007f1622727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2388.136979][T24941] RAX: ffffffffffffffda RBX: 00007f16242e5fa0 RCX: 00007f16240be929 [ 2388.136990][T24941] RDX: 000000000000000a RSI: 0000000000000084 RDI: 0000000000000003 [ 2388.137003][T24941] RBP: 00007f1622727090 R08: 00002000000002c0 R09: 0000000000000000 [ 2388.137032][T24941] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 2388.137045][T24941] R13: 0000000000000000 R14: 00007f16242e5fa0 R15: 00007ffdfde08cc8 [ 2388.137105][T24941] [ 2388.165113][T24947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24947 comm=syz.5.30662 [ 2388.167661][T24935] loop2: detected capacity change from 0 to 128 [ 2388.169034][T24947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24947 comm=syz.5.30662 [ 2388.217371][T24935] lo speed is unknown, defaulting to 1000 [ 2388.278443][T24954] FAULT_INJECTION: forcing a failure. [ 2388.278443][T24954] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.394212][T24954] CPU: 1 UID: 0 PID: 24954 Comm: syz.3.30663 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2388.394271][T24954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2388.394286][T24954] Call Trace: [ 2388.394294][T24954] [ 2388.394303][T24954] __dump_stack+0x1d/0x30 [ 2388.394328][T24954] dump_stack_lvl+0xe8/0x140 [ 2388.394393][T24954] dump_stack+0x15/0x1b [ 2388.394409][T24954] should_fail_ex+0x265/0x280 [ 2388.394558][T24954] should_failslab+0x8c/0xb0 [ 2388.394631][T24954] kmem_cache_alloc_node_noprof+0x57/0x320 [ 2388.394735][T24954] ? __alloc_skb+0x101/0x320 [ 2388.394779][T24954] __alloc_skb+0x101/0x320 [ 2388.394822][T24954] netlink_alloc_large_skb+0xba/0xf0 [ 2388.394899][T24954] netlink_sendmsg+0x3cf/0x6b0 [ 2388.394922][T24954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2388.394999][T24954] __sock_sendmsg+0x142/0x180 [ 2388.395049][T24954] ____sys_sendmsg+0x31e/0x4e0 [ 2388.395081][T24954] ___sys_sendmsg+0x17b/0x1d0 [ 2388.395153][T24954] __x64_sys_sendmsg+0xd4/0x160 [ 2388.395186][T24954] x64_sys_call+0x2999/0x2fb0 [ 2388.395223][T24954] do_syscall_64+0xd2/0x200 [ 2388.395250][T24954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2388.395280][T24954] ? clear_bhb_loop+0x40/0x90 [ 2388.395359][T24954] ? clear_bhb_loop+0x40/0x90 [ 2388.395388][T24954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2388.395415][T24954] RIP: 0033:0x7f52c6fae929 [ 2388.395433][T24954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2388.395497][T24954] RSP: 002b:00007f52c55f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2388.395585][T24954] RAX: ffffffffffffffda RBX: 00007f52c71d6080 RCX: 00007f52c6fae929 [ 2388.395603][T24954] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 2388.395706][T24954] RBP: 00007f52c55f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2388.395722][T24954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2388.395738][T24954] R13: 0000000000000001 R14: 00007f52c71d6080 R15: 00007ffe84de6d28 [ 2388.395805][T24954] [ 2388.652303][T24947] netlink: 'syz.5.30662': attribute type 1 has an invalid length. [ 2388.681755][T24947] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2388.703725][T24947] vlan7: entered promiscuous mode [ 2388.708860][T24947] bond7: entered promiscuous mode [ 2388.710094][T24969] loop0: detected capacity change from 0 to 128 [ 2388.722911][T24971] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2388.735121][T24947] bond6: (slave dummy0): Releasing active interface [ 2388.747842][T24947] bond7: (slave dummy0): making interface the new active one [ 2388.766991][T24947] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 2388.945605][T24990] Cannot find set identified by id 0 to match [ 2389.077154][T25000] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2389.191377][T25016] loop0: detected capacity change from 0 to 164 [ 2389.198637][T25016] ISOFS: unable to read i-node block [ 2389.203995][T25016] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2389.217757][T25020] loop2: detected capacity change from 0 to 512 [ 2389.225394][T25020] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2389.247129][T25020] loop2: detected capacity change from 0 to 128 [ 2389.280514][T25020] lo speed is unknown, defaulting to 1000 [ 2389.312158][T25027] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2389.342126][T25030] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2389.511697][T25052] loop0: detected capacity change from 0 to 164 [ 2389.520891][T25052] ISOFS: unable to read i-node block [ 2389.526280][T25052] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2389.547236][T25053] __nla_validate_parse: 22 callbacks suppressed [ 2389.547252][T25053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30708'. [ 2389.571325][T25058] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2389.584080][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30708'. [ 2389.601033][T25061] FAULT_INJECTION: forcing a failure. [ 2389.601033][T25061] name failslab, interval 1, probability 0, space 0, times 0 [ 2389.613898][T25061] CPU: 1 UID: 0 PID: 25061 Comm: syz.5.30709 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2389.614005][T25061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2389.614018][T25061] Call Trace: [ 2389.614026][T25061] [ 2389.614036][T25061] __dump_stack+0x1d/0x30 [ 2389.614063][T25061] dump_stack_lvl+0xe8/0x140 [ 2389.614139][T25061] dump_stack+0x15/0x1b [ 2389.614162][T25061] should_fail_ex+0x265/0x280 [ 2389.614207][T25061] should_failslab+0x8c/0xb0 [ 2389.614232][T25061] kmem_cache_alloc_node_noprof+0x57/0x320 [ 2389.614298][T25061] ? __alloc_skb+0x101/0x320 [ 2389.614335][T25061] __alloc_skb+0x101/0x320 [ 2389.614367][T25061] netlink_alloc_large_skb+0xba/0xf0 [ 2389.614551][T25061] netlink_sendmsg+0x3cf/0x6b0 [ 2389.614585][T25061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2389.614607][T25061] __sock_sendmsg+0x142/0x180 [ 2389.614710][T25061] ____sys_sendmsg+0x31e/0x4e0 [ 2389.614743][T25061] ___sys_sendmsg+0x17b/0x1d0 [ 2389.614781][T25061] __x64_sys_sendmsg+0xd4/0x160 [ 2389.614814][T25061] x64_sys_call+0x2999/0x2fb0 [ 2389.614848][T25061] do_syscall_64+0xd2/0x200 [ 2389.614916][T25061] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2389.614950][T25061] ? clear_bhb_loop+0x40/0x90 [ 2389.614978][T25061] ? clear_bhb_loop+0x40/0x90 [ 2389.615011][T25061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2389.615031][T25061] RIP: 0033:0x7fcdf4c1e929 [ 2389.615047][T25061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2389.615143][T25061] RSP: 002b:00007fcdf3287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2389.615163][T25061] RAX: ffffffffffffffda RBX: 00007fcdf4e45fa0 RCX: 00007fcdf4c1e929 [ 2389.615175][T25061] RDX: 0000000020000010 RSI: 0000200000001000 RDI: 0000000000000003 [ 2389.615186][T25061] RBP: 00007fcdf3287090 R08: 0000000000000000 R09: 0000000000000000 [ 2389.615200][T25061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2389.615215][T25061] R13: 0000000000000000 R14: 00007fcdf4e45fa0 R15: 00007ffffbf416f8 [ 2389.615286][T25061] [ 2389.905128][T25080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.30718'. [ 2389.914197][T25080] netlink: 32 bytes leftover after parsing attributes in process `syz.6.30718'. [ 2390.107267][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30725'. [ 2390.120342][T25103] Cannot find set identified by id 0 to match [ 2390.157287][T25091] Cannot find set identified by id 0 to match [ 2390.233881][T25118] loop6: detected capacity change from 0 to 512 [ 2390.276721][T25118] EXT4-fs (loop6): 1 orphan inode deleted [ 2390.282900][T25118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2390.286456][T25122] loop2: detected capacity change from 0 to 128 [ 2390.316947][ T112] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 2390.370365][T25118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2390.469327][T25138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30738'. [ 2390.591322][T25144] loop6: detected capacity change from 0 to 4096 [ 2390.600520][T25144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2390.624840][T25144] EXT4-fs error (device loop6): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.6.30741: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2390.683401][T25144] EXT4-fs error (device loop6): ext4_get_first_dir_block:3547: inode #12: comm syz.6.30741: directory missing '..' [ 2390.866873][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2391.096128][T25161] netdevsim netdevsim6: Direct firmware load for ÈöníñÆgkNšÄq>ä*x(Oˆ@ failed with error -2 [ 2391.461242][T25130] Cannot find set identified by id 0 to match [ 2391.475186][T25151] Cannot find set identified by id 0 to match [ 2391.516239][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.30750'. [ 2391.530472][T25177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25177 comm=syz.2.30751 [ 2391.543327][T25177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25177 comm=syz.2.30751 [ 2391.561542][T25179] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2391.572683][T25177] loop2: detected capacity change from 0 to 1024 [ 2391.597266][T25177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2391.630216][T25184] loop6: detected capacity change from 0 to 4096 [ 2391.638769][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30751'. [ 2391.648670][T25177] dummy0: entered promiscuous mode [ 2391.649412][T25184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2391.681817][T25184] EXT4-fs error (device loop6): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.6.30752: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2391.693452][T24034] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2391.702510][T25184] EXT4-fs error (device loop6): ext4_get_first_dir_block:3547: inode #12: comm syz.6.30752: directory missing '..' [ 2391.733316][T25194] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2391.733470][T25196] Cannot find set identified by id 0 to match [ 2391.771393][T25198] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2391.773650][T25202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25202 comm=syz.0.30759 [ 2391.794190][T25202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25202 comm=syz.0.30759 [ 2391.844829][T25202] loop0: detected capacity change from 0 to 1024 [ 2391.855584][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2391.876020][T25202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2391.897752][T25213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.30762'. [ 2391.909236][T25202] netlink: 'syz.0.30759': attribute type 1 has an invalid length. [ 2391.935331][T25215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25215 comm=syz.2.30763 [ 2391.948054][T25215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25215 comm=syz.2.30763 [ 2391.968624][T25218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30759'. [ 2391.982633][T25217] Cannot find set identified by id 0 to match [ 2391.992399][T25202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2392.009729][T25215] loop2: detected capacity change from 0 to 1024 [ 2392.016041][T25218] vlan3: entered promiscuous mode [ 2392.021337][T25218] bond3: entered promiscuous mode [ 2392.062450][T25215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2392.076441][T25202] netlink: 'syz.0.30759': attribute type 10 has an invalid length. [ 2392.077987][T25226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25226 comm=syz.5.30767 [ 2392.097185][T25226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25226 comm=syz.5.30767 [ 2392.133423][T20891] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2392.135404][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 2392.135423][ T29] audit: type=1400 audit(2392.106:159387): avc: denied { ioctl } for pid=25232 comm="syz.3.30770" path="socket:[384127]" dev="sockfs" ino=384127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2392.174128][T25226] bond7: (slave dummy0): Releasing active interface [ 2392.175157][T25215] netlink: 'syz.2.30763': attribute type 1 has an invalid length. [ 2392.190720][T25230] ALSA: seq fatal error: cannot create timer (-19) [ 2392.226836][T25215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2392.242313][T25238] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2392.244337][T25242] netlink: 'syz.5.30771': attribute type 1 has an invalid length. [ 2392.263469][T25233] wireguard0: entered promiscuous mode [ 2392.269081][T25233] wireguard0: entered allmulticast mode [ 2392.277832][T25239] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2392.288012][T25233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=25233 comm=syz.3.30770 [ 2392.312581][T25215] vlan2: entered promiscuous mode [ 2392.317820][T25215] bond1: entered promiscuous mode [ 2392.328186][T25215] bond1: (slave dummy0): making interface the new active one [ 2392.337394][T25215] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2392.355336][T25215] netlink: 'syz.2.30763': attribute type 10 has an invalid length. [ 2392.376059][T25215] team0 (unregistering): Port device team_slave_0 removed [ 2392.377961][T25251] netlink: 'syz.6.30776': attribute type 1 has an invalid length. [ 2392.396546][T25215] team0 (unregistering): Port device team_slave_1 removed [ 2392.467212][T24034] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2392.513328][T12910] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 2392.521996][T12910] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2392.526293][T25267] Cannot find set identified by id 0 to match [ 2392.540073][ T29] audit: type=1400 audit(2392.476:159388): avc: denied { relabelto } for pid=25265 comm="syz.6.30781" name="333" dev="tmpfs" ino=1841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2392.558970][T25269] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25269 comm=syz.2.30782 [ 2392.566307][ T29] audit: type=1400 audit(2392.476:159389): avc: denied { associate } for pid=25265 comm="syz.6.30781" name="333" dev="tmpfs" ino=1841 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 2392.578903][T25269] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25269 comm=syz.2.30782 [ 2392.597651][T25270] loop6: detected capacity change from 0 to 512 [ 2392.606011][ T29] audit: type=1400 audit(2392.476:159390): avc: denied { add_name } for pid=25265 comm="syz.6.30781" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 2392.638735][T25269] loop2: detected capacity change from 0 to 1024 [ 2392.649139][ T29] audit: type=1400 audit(2392.476:159391): avc: denied { associate } for pid=25265 comm="syz.6.30781" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2392.676800][ T29] audit: type=1400 audit(2392.476:159392): avc: denied { mounton } for pid=25265 comm="syz.6.30781" path="/333/file0" dev="tmpfs" ino=1846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2392.699252][ T29] audit: type=1400 audit(2392.476:159393): avc: denied { mounton } for pid=25265 comm="syz.6.30781" path="/333/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2392.721739][ T29] audit: type=1400 audit(2392.476:159394): avc: denied { read write } for pid=25265 comm="syz.6.30781" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2392.745116][ T29] audit: type=1400 audit(2392.476:159395): avc: denied { open } for pid=25265 comm="syz.6.30781" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2392.771902][T25266] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2392.795361][T25270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2392.813210][T25269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2392.838070][T25270] EXT4-fs (loop6): shut down requested (0) [ 2392.844519][ T29] audit: type=1400 audit(2392.796:159396): avc: denied { create } for pid=25265 comm="syz.6.30781" name="blkio.bfq.io_queued" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2392.846252][T25269] netlink: 'syz.2.30782': attribute type 1 has an invalid length. [ 2392.882335][T25269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2392.901445][T25266] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2392.918611][T25269] bond1: (slave dummy0): Releasing active interface [ 2392.930828][T25269] bond2: (slave dummy0): making interface the new active one [ 2392.940166][T25269] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 2392.952004][T25269] netlink: 'syz.2.30782': attribute type 10 has an invalid length. [ 2392.962584][T25266] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2392.976850][T25293] FAULT_INJECTION: forcing a failure. [ 2392.976850][T25293] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.989855][T25293] CPU: 1 UID: 0 PID: 25293 Comm: syz.0.30790 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2392.989894][T25293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2392.989983][T25293] Call Trace: [ 2392.989993][T25293] [ 2392.990003][T25293] __dump_stack+0x1d/0x30 [ 2392.990087][T25293] dump_stack_lvl+0xe8/0x140 [ 2392.990110][T25293] dump_stack+0x15/0x1b [ 2392.990131][T25293] should_fail_ex+0x265/0x280 [ 2392.990166][T25293] should_failslab+0x8c/0xb0 [ 2392.990244][T25293] kmem_cache_alloc_node_noprof+0x57/0x320 [ 2392.990281][T25293] ? __alloc_skb+0x101/0x320 [ 2392.990347][T25293] __alloc_skb+0x101/0x320 [ 2392.990388][T25293] netlink_alloc_large_skb+0xba/0xf0 [ 2392.990467][T25293] netlink_sendmsg+0x3cf/0x6b0 [ 2392.990533][T25293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2392.990563][T25293] __sock_sendmsg+0x142/0x180 [ 2392.990609][T25293] ____sys_sendmsg+0x31e/0x4e0 [ 2392.990641][T25293] ___sys_sendmsg+0x17b/0x1d0 [ 2392.990706][T25293] __x64_sys_sendmsg+0xd4/0x160 [ 2392.990737][T25293] x64_sys_call+0x2999/0x2fb0 [ 2392.990763][T25293] do_syscall_64+0xd2/0x200 [ 2392.990790][T25293] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2392.990879][T25293] ? clear_bhb_loop+0x40/0x90 [ 2392.990909][T25293] ? clear_bhb_loop+0x40/0x90 [ 2392.990985][T25293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2392.991013][T25293] RIP: 0033:0x7f16240be929 [ 2392.991032][T25293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2392.991053][T25293] RSP: 002b:00007f1622727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2392.991076][T25293] RAX: ffffffffffffffda RBX: 00007f16242e5fa0 RCX: 00007f16240be929 [ 2392.991146][T25293] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2392.991159][T25293] RBP: 00007f1622727090 R08: 0000000000000000 R09: 0000000000000000 [ 2392.991171][T25293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2392.991183][T25293] R13: 0000000000000000 R14: 00007f16242e5fa0 R15: 00007ffdfde08cc8 [ 2392.991272][T25293] [ 2392.992561][T24034] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2393.083869][T25299] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2393.222773][T25266] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.258475][T25303] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2393.283202][T25266] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2393.305271][T25266] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2393.317087][T25266] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2393.329249][T25266] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2393.366767][T25309] netlink: 'syz.5.30798': attribute type 1 has an invalid length. [ 2393.426209][T25316] vlan3: entered promiscuous mode [ 2393.431348][T25316] vlan3: entered allmulticast mode [ 2393.436567][T25316] hsr_slave_1: entered allmulticast mode [ 2393.462785][T25322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=25322 comm=syz.0.30803 [ 2393.503622][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2393.640611][T25346] loop2: detected capacity change from 0 to 1024 [ 2393.666277][T25346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2393.697398][T25346] netlink: 'syz.2.30814': attribute type 1 has an invalid length. [ 2393.719499][T25346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2393.736308][T25346] bond2: (slave dummy0): Releasing active interface [ 2393.766286][T25361] SELinux: syz.0.30820 (25361) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2393.769039][T25346] bond3: (slave dummy0): making interface the new active one [ 2393.789283][T25346] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 2393.840142][T24034] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2393.855525][T25367] loop6: detected capacity change from 0 to 1024 [ 2393.879549][T25371] vhci_hcd: invalid port number 65 [ 2393.884849][T25371] vhci_hcd: invalid port number 65 [ 2393.896953][T25367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2393.926656][T25367] bond8: (slave dummy0): Releasing active interface [ 2393.965596][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2394.031697][T25388] Cannot find set identified by id 0 to match [ 2394.032276][T25393] FAULT_INJECTION: forcing a failure. [ 2394.032276][T25393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2394.051709][T25393] CPU: 1 UID: 0 PID: 25393 Comm: syz.3.30833 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2394.051824][T25393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2394.051840][T25393] Call Trace: [ 2394.051847][T25393] [ 2394.051854][T25393] __dump_stack+0x1d/0x30 [ 2394.051874][T25393] dump_stack_lvl+0xe8/0x140 [ 2394.051892][T25393] dump_stack+0x15/0x1b [ 2394.051912][T25393] should_fail_ex+0x265/0x280 [ 2394.051994][T25393] should_fail+0xb/0x20 [ 2394.052073][T25393] should_fail_usercopy+0x1a/0x20 [ 2394.052195][T25393] _copy_to_user+0x20/0xa0 [ 2394.052227][T25393] simple_read_from_buffer+0xb5/0x130 [ 2394.052272][T25393] proc_fail_nth_read+0x100/0x140 [ 2394.052302][T25393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2394.052329][T25393] vfs_read+0x19d/0x6f0 [ 2394.052351][T25393] ? __rcu_read_unlock+0x4f/0x70 [ 2394.052408][T25393] ? __fget_files+0x184/0x1c0 [ 2394.052436][T25393] ksys_read+0xda/0x1a0 [ 2394.052461][T25393] __x64_sys_read+0x40/0x50 [ 2394.052484][T25393] x64_sys_call+0x2d77/0x2fb0 [ 2394.052506][T25393] do_syscall_64+0xd2/0x200 [ 2394.052591][T25393] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2394.052622][T25393] ? clear_bhb_loop+0x40/0x90 [ 2394.052648][T25393] ? clear_bhb_loop+0x40/0x90 [ 2394.052677][T25393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2394.052766][T25393] RIP: 0033:0x7f52c6fad33c [ 2394.052829][T25393] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2394.052847][T25393] RSP: 002b:00007f52c5617030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2394.052869][T25393] RAX: ffffffffffffffda RBX: 00007f52c71d5fa0 RCX: 00007f52c6fad33c [ 2394.052885][T25393] RDX: 000000000000000f RSI: 00007f52c56170a0 RDI: 0000000000000004 [ 2394.052900][T25393] RBP: 00007f52c5617090 R08: 0000000000000000 R09: 0000000000000000 [ 2394.052995][T25393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2394.053008][T25393] R13: 0000000000000000 R14: 00007f52c71d5fa0 R15: 00007ffe84de6d28 [ 2394.053027][T25393] [ 2394.269144][T25394] SELinux: syz.0.30832 (25394) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2394.316252][T25400] Invalid ELF header magic: != ELF [ 2394.343372][T25404] vhci_hcd: invalid port number 65 [ 2394.348559][T25404] vhci_hcd: invalid port number 65 [ 2394.376269][T25398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2394.408144][T25410] vlan4: entered promiscuous mode [ 2394.413272][T25410] bond4: entered promiscuous mode [ 2394.538473][T25427] FAULT_INJECTION: forcing a failure. [ 2394.538473][T25427] name failslab, interval 1, probability 0, space 0, times 0 [ 2394.551331][T25427] CPU: 0 UID: 0 PID: 25427 Comm: syz.2.30848 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2394.551365][T25427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2394.551429][T25427] Call Trace: [ 2394.551436][T25427] [ 2394.551445][T25427] __dump_stack+0x1d/0x30 [ 2394.551525][T25427] dump_stack_lvl+0xe8/0x140 [ 2394.551547][T25427] dump_stack+0x15/0x1b [ 2394.551567][T25427] should_fail_ex+0x265/0x280 [ 2394.551632][T25427] should_failslab+0x8c/0xb0 [ 2394.551659][T25427] kmem_cache_alloc_node_noprof+0x57/0x320 [ 2394.551759][T25427] ? __alloc_skb+0x101/0x320 [ 2394.551797][T25427] __alloc_skb+0x101/0x320 [ 2394.551896][T25427] netlink_alloc_large_skb+0xba/0xf0 [ 2394.551933][T25427] netlink_sendmsg+0x3cf/0x6b0 [ 2394.551991][T25427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2394.552020][T25427] __sock_sendmsg+0x142/0x180 [ 2394.552076][T25427] ____sys_sendmsg+0x31e/0x4e0 [ 2394.552121][T25427] ___sys_sendmsg+0x17b/0x1d0 [ 2394.552160][T25427] __x64_sys_sendmsg+0xd4/0x160 [ 2394.552190][T25427] x64_sys_call+0x2999/0x2fb0 [ 2394.552211][T25427] do_syscall_64+0xd2/0x200 [ 2394.552294][T25427] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2394.552402][T25427] ? clear_bhb_loop+0x40/0x90 [ 2394.552426][T25427] ? clear_bhb_loop+0x40/0x90 [ 2394.552451][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2394.552473][T25427] RIP: 0033:0x7f045901e929 [ 2394.552488][T25427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2394.552602][T25427] RSP: 002b:00007f0457687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2394.552621][T25427] RAX: ffffffffffffffda RBX: 00007f0459245fa0 RCX: 00007f045901e929 [ 2394.552635][T25427] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2394.552647][T25427] RBP: 00007f0457687090 R08: 0000000000000000 R09: 0000000000000000 [ 2394.552660][T25427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2394.552675][T25427] R13: 0000000000000000 R14: 00007f0459245fa0 R15: 00007fff50392f58 [ 2394.552718][T25427] [ 2394.769745][T25422] wireguard0: entered promiscuous mode [ 2394.775802][T25422] wireguard0: entered allmulticast mode [ 2394.855884][T25435] vhci_hcd: invalid port number 65 [ 2394.861063][T25435] vhci_hcd: invalid port number 65 [ 2394.871135][T25437] __nla_validate_parse: 20 callbacks suppressed [ 2394.871151][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30852'. [ 2394.894654][T25440] Cannot find set identified by id 0 to match [ 2394.975244][T25446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2394.985376][T25451] netlink: 60 bytes leftover after parsing attributes in process `syz.6.30858'. [ 2394.992835][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30855'. [ 2395.007635][T25446] vlan8: entered promiscuous mode [ 2395.012790][T25446] bond8: entered promiscuous mode [ 2395.052640][T25456] netlink: 80 bytes leftover after parsing attributes in process `syz.5.30861'. [ 2395.090670][T25460] FAULT_INJECTION: forcing a failure. [ 2395.090670][T25460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2395.103907][T25460] CPU: 1 UID: 0 PID: 25460 Comm: syz.3.30862 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2395.103997][T25460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2395.104016][T25460] Call Trace: [ 2395.104023][T25460] [ 2395.104033][T25460] __dump_stack+0x1d/0x30 [ 2395.104060][T25460] dump_stack_lvl+0xe8/0x140 [ 2395.104102][T25460] dump_stack+0x15/0x1b [ 2395.104124][T25460] should_fail_ex+0x265/0x280 [ 2395.104180][T25460] should_fail+0xb/0x20 [ 2395.104219][T25460] should_fail_usercopy+0x1a/0x20 [ 2395.104265][T25460] _copy_from_user+0x1c/0xb0 [ 2395.104296][T25460] ___sys_sendmsg+0xc1/0x1d0 [ 2395.104367][T25460] __x64_sys_sendmsg+0xd4/0x160 [ 2395.104398][T25460] x64_sys_call+0x2999/0x2fb0 [ 2395.104425][T25460] do_syscall_64+0xd2/0x200 [ 2395.104452][T25460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2395.104485][T25460] ? clear_bhb_loop+0x40/0x90 [ 2395.104590][T25460] ? clear_bhb_loop+0x40/0x90 [ 2395.104661][T25460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2395.104682][T25460] RIP: 0033:0x7f52c6fae929 [ 2395.104697][T25460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2395.104721][T25460] RSP: 002b:00007f52c5617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2395.104761][T25460] RAX: ffffffffffffffda RBX: 00007f52c71d5fa0 RCX: 00007f52c6fae929 [ 2395.104777][T25460] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 2395.104792][T25460] RBP: 00007f52c5617090 R08: 0000000000000000 R09: 0000000000000000 [ 2395.104804][T25460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2395.104873][T25460] R13: 0000000000000000 R14: 00007f52c71d5fa0 R15: 00007ffe84de6d28 [ 2395.104896][T25460] [ 2395.112576][T25456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30861'. [ 2395.127826][T25462] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2395.151118][T25456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2395.289042][T25470] SELinux: syz.0.30866 (25470) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2395.290505][T25456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2395.312703][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30865'. [ 2395.362489][T25456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2395.370122][T25456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2395.438997][T25485] netlink: 60 bytes leftover after parsing attributes in process `syz.0.30873'. [ 2395.540577][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30877'. [ 2395.549664][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30877'. [ 2395.568946][T25492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30876'. [ 2395.591391][T25498] FAULT_INJECTION: forcing a failure. [ 2395.591391][T25498] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.604130][T25498] CPU: 1 UID: 0 PID: 25498 Comm: syz.5.30879 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2395.604319][T25498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2395.604408][T25498] Call Trace: [ 2395.604415][T25498] [ 2395.604456][T25498] __dump_stack+0x1d/0x30 [ 2395.604484][T25498] dump_stack_lvl+0xe8/0x140 [ 2395.604511][T25498] dump_stack+0x15/0x1b [ 2395.604533][T25498] should_fail_ex+0x265/0x280 [ 2395.604585][T25498] should_failslab+0x8c/0xb0 [ 2395.604659][T25498] kmem_cache_alloc_node_noprof+0x57/0x320 [ 2395.604697][T25498] ? __alloc_skb+0x101/0x320 [ 2395.604753][T25498] __alloc_skb+0x101/0x320 [ 2395.604792][T25498] ? audit_log_start+0x365/0x6c0 [ 2395.604833][T25498] audit_log_start+0x380/0x6c0 [ 2395.604949][T25498] audit_seccomp+0x48/0x100 [ 2395.604990][T25498] ? __seccomp_filter+0x68c/0x10d0 [ 2395.605020][T25498] __seccomp_filter+0x69d/0x10d0 [ 2395.605051][T25498] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2395.605125][T25498] ? vfs_write+0x75e/0x8e0 [ 2395.605157][T25498] __secure_computing+0x82/0x150 [ 2395.605186][T25498] syscall_trace_enter+0xcf/0x1e0 [ 2395.605218][T25498] do_syscall_64+0xac/0x200 [ 2395.605264][T25498] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2395.605306][T25498] ? clear_bhb_loop+0x40/0x90 [ 2395.605332][T25498] ? clear_bhb_loop+0x40/0x90 [ 2395.605358][T25498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2395.605425][T25498] RIP: 0033:0x7fcdf4c1e929 [ 2395.605444][T25498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2395.605468][T25498] RSP: 002b:00007fcdf3287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 2395.605554][T25498] RAX: ffffffffffffffda RBX: 00007fcdf4e45fa0 RCX: 00007fcdf4c1e929 [ 2395.605569][T25498] RDX: 0000000000000010 RSI: 0000000000000002 RDI: 0000000000000000 [ 2395.605584][T25498] RBP: 00007fcdf3287090 R08: 0000000000000000 R09: 0000000000000000 [ 2395.605599][T25498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2395.605613][T25498] R13: 0000000000000000 R14: 00007fcdf4e45fa0 R15: 00007ffffbf416f8 [ 2395.605636][T25498] [ 2395.606325][T25492] program syz.3.30876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2395.729817][T25505] SELinux: syz.2.30881 (25505) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2395.928373][T25521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2395.949571][T25521] bond3: (slave dummy0): Releasing active interface [ 2395.957052][T25527] FAULT_INJECTION: forcing a failure. [ 2395.957052][T25527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2395.970732][T25527] CPU: 0 UID: 0 PID: 25527 Comm: syz.2.30891 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2395.970766][T25527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2395.970780][T25527] Call Trace: [ 2395.970787][T25527] [ 2395.970796][T25527] __dump_stack+0x1d/0x30 [ 2395.970821][T25527] dump_stack_lvl+0xe8/0x140 [ 2395.970842][T25527] dump_stack+0x15/0x1b [ 2395.970858][T25527] should_fail_ex+0x265/0x280 [ 2395.970979][T25527] should_fail+0xb/0x20 [ 2395.971016][T25527] should_fail_usercopy+0x1a/0x20 [ 2395.971038][T25527] _copy_to_user+0x20/0xa0 [ 2395.971133][T25527] simple_read_from_buffer+0xb5/0x130 [ 2395.971177][T25527] proc_fail_nth_read+0x100/0x140 [ 2395.971246][T25527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2395.971271][T25527] vfs_read+0x19d/0x6f0 [ 2395.971295][T25527] ? __rcu_read_unlock+0x4f/0x70 [ 2395.971377][T25527] ? __fget_files+0x184/0x1c0 [ 2395.971409][T25527] ksys_read+0xda/0x1a0 [ 2395.971435][T25527] __x64_sys_read+0x40/0x50 [ 2395.971459][T25527] x64_sys_call+0x2d77/0x2fb0 [ 2395.971487][T25527] do_syscall_64+0xd2/0x200 [ 2395.971575][T25527] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2395.971609][T25527] ? clear_bhb_loop+0x40/0x90 [ 2395.971636][T25527] ? clear_bhb_loop+0x40/0x90 [ 2395.971663][T25527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2395.971754][T25527] RIP: 0033:0x7f045901d33c [ 2395.971772][T25527] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2395.971795][T25527] RSP: 002b:00007f0457687030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2395.971819][T25527] RAX: ffffffffffffffda RBX: 00007f0459245fa0 RCX: 00007f045901d33c [ 2395.971835][T25527] RDX: 000000000000000f RSI: 00007f04576870a0 RDI: 0000000000000004 [ 2395.971851][T25527] RBP: 00007f0457687090 R08: 0000000000000000 R09: 0000000000000000 [ 2395.971865][T25527] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 2395.971905][T25527] R13: 0000000000000000 R14: 00007f0459245fa0 R15: 00007fff50392f58 [ 2395.971923][T25527] [ 2396.208769][T25521] bond5: (slave dummy0): making interface the new active one [ 2396.234815][T25521] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 2396.234874][T25532] Cannot find set identified by id 0 to match [ 2396.281574][T25541] loop0: detected capacity change from 0 to 128 [ 2396.385394][T25552] SELinux: syz.2.30901 (25552) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2396.456935][T25558] loop6: detected capacity change from 0 to 4096 [ 2396.487194][T25558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2396.495849][T25557] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2396.521521][T25557] bond9: (slave dummy0): making interface the new active one [ 2396.528930][T25558] EXT4-fs error (device loop6): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.6.30903: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2396.530713][T25558] EXT4-fs error (device loop6): ext4_get_first_dir_block:3547: inode #12: comm syz.6.30903: directory missing '..' [ 2396.559024][T25557] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 2396.677986][T25583] IPVS: Error joining to the multicast group [ 2396.751875][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2396.764160][T25592] net_ratelimit: 2 callbacks suppressed [ 2396.764173][T25592] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2396.825100][T25598] loop0: detected capacity change from 0 to 164 [ 2396.843980][T25598] ISOFS: unable to read i-node block [ 2396.849414][T25598] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2396.946580][T25604] selinux_netlink_send: 12 callbacks suppressed [ 2396.946602][T25604] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25604 comm=syz.6.30922 [ 2396.966007][T25604] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25604 comm=syz.6.30922 [ 2397.020702][T25604] loop6: detected capacity change from 0 to 1024 [ 2397.063836][T25604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2397.107229][T25604] validate_nla: 14 callbacks suppressed [ 2397.107247][T25604] netlink: 'syz.6.30922': attribute type 1 has an invalid length. [ 2397.161213][T25604] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2397.172569][T25608] bond9: (slave dummy0): making interface the new active one [ 2397.181240][T25608] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 2397.195655][T25604] netlink: 'syz.6.30922': attribute type 10 has an invalid length. [ 2397.257489][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2397.570049][T25635] loop6: detected capacity change from 0 to 4096 [ 2397.593425][T25635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2397.664638][T25635] EXT4-fs error (device loop6): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.6.30933: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2397.693516][T25635] EXT4-fs error (device loop6): ext4_get_first_dir_block:3547: inode #12: comm syz.6.30933: directory missing '..' [ 2397.723546][T25641] loop2: detected capacity change from 0 to 1024 [ 2397.756807][T25641] EXT4-fs: Ignoring removed nobh option [ 2397.762438][T25641] EXT4-fs: Ignoring removed nobh option [ 2397.785296][T25641] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 2397.796746][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2397.826860][T25641] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.30934: inode #4294967295: comm syz.2.30934: iget: illegal inode # [ 2397.842858][T25641] EXT4-fs (loop2): no journal found [ 2397.848179][T25641] EXT4-fs (loop2): can't get journal size [ 2397.854062][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 2397.854079][ T29] audit: type=1326 audit(2397.826:159608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2397.883630][ T29] audit: type=1326 audit(2397.826:159609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2397.920166][T25641] EXT4-fs (loop2): failed to initialize system zone (-22) [ 2397.953146][T25641] EXT4-fs (loop2): mount failed [ 2397.973227][ T29] audit: type=1326 audit(2397.886:159610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2397.996568][ T29] audit: type=1326 audit(2397.886:159611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2398.019873][ T29] audit: type=1326 audit(2397.886:159612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2398.043275][ T29] audit: type=1326 audit(2397.886:159613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2398.066578][ T29] audit: type=1326 audit(2397.886:159614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2398.089841][ T29] audit: type=1326 audit(2397.886:159615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2398.113180][ T29] audit: type=1326 audit(2397.886:159616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2398.136519][ T29] audit: type=1326 audit(2397.886:159617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25643 comm="syz.6.30935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2398.188922][T25652] loop6: detected capacity change from 0 to 164 [ 2398.199573][T25654] loop0: detected capacity change from 0 to 512 [ 2398.235342][T25652] ISOFS: unable to read i-node block [ 2398.240690][T25652] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2398.256398][T25654] EXT4-fs: Ignoring removed oldalloc option [ 2398.314058][T25654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2398.340109][T25654] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.30939: bg 0: block 217: padding at end of block bitmap is not set [ 2398.505820][T20891] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2398.720594][T25673] netlink: 'syz.3.30946': attribute type 1 has an invalid length. [ 2398.994690][T25685] FAULT_INJECTION: forcing a failure. [ 2398.994690][T25685] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.007446][T25685] CPU: 0 UID: 0 PID: 25685 Comm: syz.2.30953 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2399.007566][T25685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2399.007578][T25685] Call Trace: [ 2399.007586][T25685] [ 2399.007595][T25685] __dump_stack+0x1d/0x30 [ 2399.007637][T25685] dump_stack_lvl+0xe8/0x140 [ 2399.007657][T25685] dump_stack+0x15/0x1b [ 2399.007689][T25685] should_fail_ex+0x265/0x280 [ 2399.007756][T25685] should_failslab+0x8c/0xb0 [ 2399.007783][T25685] kmem_cache_alloc_node_noprof+0x57/0x320 [ 2399.007819][T25685] ? __alloc_skb+0x101/0x320 [ 2399.007891][T25685] __alloc_skb+0x101/0x320 [ 2399.007953][T25685] ? audit_log_start+0x365/0x6c0 [ 2399.007991][T25685] audit_log_start+0x380/0x6c0 [ 2399.008033][T25685] audit_seccomp+0x48/0x100 [ 2399.008083][T25685] ? __seccomp_filter+0x68c/0x10d0 [ 2399.008111][T25685] __seccomp_filter+0x69d/0x10d0 [ 2399.008139][T25685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2399.008166][T25685] ? vfs_write+0x75e/0x8e0 [ 2399.008202][T25685] __secure_computing+0x82/0x150 [ 2399.008230][T25685] syscall_trace_enter+0xcf/0x1e0 [ 2399.008259][T25685] do_syscall_64+0xac/0x200 [ 2399.008285][T25685] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2399.008377][T25685] ? clear_bhb_loop+0x40/0x90 [ 2399.008434][T25685] ? clear_bhb_loop+0x40/0x90 [ 2399.008464][T25685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2399.008532][T25685] RIP: 0033:0x7f045901e929 [ 2399.008546][T25685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2399.008564][T25685] RSP: 002b:00007f0457687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2399.008587][T25685] RAX: ffffffffffffffda RBX: 00007f0459245fa0 RCX: 00007f045901e929 [ 2399.008675][T25685] RDX: 000000000000ffeb RSI: 0000200000000040 RDI: 0000000000000007 [ 2399.008689][T25685] RBP: 00007f0457687090 R08: 0000200000000340 R09: 0000000000000010 [ 2399.008704][T25685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2399.008778][T25685] R13: 0000000000000000 R14: 00007f0459245fa0 R15: 00007fff50392f58 [ 2399.008802][T25685] [ 2399.366868][T25709] loop2: detected capacity change from 0 to 128 [ 2399.419496][T25712] loop6: detected capacity change from 0 to 4096 [ 2399.475507][T25712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2399.521938][T25712] EXT4-fs error (device loop6): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.6.30965: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2399.550873][T25712] EXT4-fs error (device loop6): ext4_get_first_dir_block:3547: inode #12: comm syz.6.30965: directory missing '..' [ 2399.595960][T25733] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2399.667362][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2399.698906][T25752] wireguard0: entered promiscuous mode [ 2399.704505][T25752] wireguard0: entered allmulticast mode [ 2399.725285][T25755] Cannot find set identified by id 0 to match [ 2399.874782][T25769] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2399.892610][T25776] FAULT_INJECTION: forcing a failure. [ 2399.892610][T25776] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.905558][T25776] CPU: 0 UID: 0 PID: 25776 Comm: syz.6.30988 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2399.905653][T25776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2399.905671][T25776] Call Trace: [ 2399.905680][T25776] [ 2399.905692][T25776] __dump_stack+0x1d/0x30 [ 2399.905791][T25776] dump_stack_lvl+0xe8/0x140 [ 2399.905817][T25776] dump_stack+0x15/0x1b [ 2399.905838][T25776] should_fail_ex+0x265/0x280 [ 2399.906013][T25776] should_failslab+0x8c/0xb0 [ 2399.906038][T25776] __kmalloc_noprof+0xa5/0x3e0 [ 2399.906072][T25776] ? bpf_test_init+0xa9/0x160 [ 2399.906098][T25776] bpf_test_init+0xa9/0x160 [ 2399.906123][T25776] bpf_prog_test_run_xdp+0x274/0x910 [ 2399.906167][T25776] ? kstrtouint+0x76/0xc0 [ 2399.906206][T25776] ? __rcu_read_unlock+0x4f/0x70 [ 2399.906305][T25776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2399.906334][T25776] bpf_prog_test_run+0x227/0x390 [ 2399.906382][T25776] __sys_bpf+0x3dc/0x790 [ 2399.906472][T25776] __x64_sys_bpf+0x41/0x50 [ 2399.906567][T25776] x64_sys_call+0x2478/0x2fb0 [ 2399.906663][T25776] do_syscall_64+0xd2/0x200 [ 2399.906684][T25776] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2399.906726][T25776] ? clear_bhb_loop+0x40/0x90 [ 2399.906754][T25776] ? clear_bhb_loop+0x40/0x90 [ 2399.906791][T25776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2399.906887][T25776] RIP: 0033:0x7f4fce4de929 [ 2399.906906][T25776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2399.906930][T25776] RSP: 002b:00007f4fccb47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2399.906954][T25776] RAX: ffffffffffffffda RBX: 00007f4fce705fa0 RCX: 00007f4fce4de929 [ 2399.906969][T25776] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2399.906989][T25776] RBP: 00007f4fccb47090 R08: 0000000000000000 R09: 0000000000000000 [ 2399.907014][T25776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2399.907077][T25776] R13: 0000000000000000 R14: 00007f4fce705fa0 R15: 00007ffec915b878 [ 2399.907103][T25776] [ 2399.923932][T25778] lo speed is unknown, defaulting to 1000 [ 2400.165234][T25783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25783 comm=syz.6.30990 [ 2400.178010][T25783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25783 comm=syz.6.30990 [ 2400.225231][T25785] loop6: detected capacity change from 0 to 1024 [ 2400.297861][T25785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2400.325021][T25783] netlink: 'syz.6.30990': attribute type 1 has an invalid length. [ 2400.346016][T25783] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2400.362889][T25783] __nla_validate_parse: 24 callbacks suppressed [ 2400.362910][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.30990'. [ 2400.422836][T25783] bond9: (slave dummy0): Releasing active interface [ 2400.436630][T25783] bond10: (slave dummy0): making interface the new active one [ 2400.445991][T25783] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 2400.466092][T25783] netlink: 'syz.6.30990': attribute type 10 has an invalid length. [ 2400.502885][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2400.553954][T25799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.30994'. [ 2400.643747][T25813] 9pnet_fd: Insufficient options for proto=fd [ 2400.684605][T25807] Cannot find set identified by id 0 to match [ 2400.719107][T25815] lo speed is unknown, defaulting to 1000 [ 2400.722846][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31002'. [ 2400.734148][T25821] netlink: 36 bytes leftover after parsing attributes in process `syz.6.31002'. [ 2400.759036][T25824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31003'. [ 2400.861549][T25831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31006'. [ 2400.905078][T25837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.31008'. [ 2400.990290][T25851] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2401.036082][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31016'. [ 2401.064410][T25858] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2401.097266][T25865] loop2: detected capacity change from 0 to 512 [ 2401.109869][T25865] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2401.130757][T25865] loop2: detected capacity change from 0 to 128 [ 2401.156390][T25865] lo speed is unknown, defaulting to 1000 [ 2401.220787][T25877] wireguard1: entered promiscuous mode [ 2401.226565][T25877] wireguard1: entered allmulticast mode [ 2401.311349][T25886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31029'. [ 2401.409182][T25891] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2401.855403][T25914] wireguard0: entered promiscuous mode [ 2401.860972][T25914] wireguard0: entered allmulticast mode [ 2401.957713][T25921] netlink: 'syz.2.31043': attribute type 1 has an invalid length. [ 2401.966287][T25921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31043'. [ 2402.110641][T25902] Cannot find set identified by id 0 to match [ 2402.110975][T25917] Cannot find set identified by id 0 to match [ 2402.159234][T25923] loop6: detected capacity change from 0 to 128 [ 2402.243198][T25929] wireguard0: entered promiscuous mode [ 2402.248832][T25929] wireguard0: entered allmulticast mode [ 2402.279723][T25936] netlink: 'syz.3.31050': attribute type 21 has an invalid length. [ 2402.414991][T25952] 9pnet_fd: Insufficient options for proto=fd [ 2402.544535][T25963] wireguard2: entered promiscuous mode [ 2402.550115][T25963] wireguard2: entered allmulticast mode [ 2402.713903][T25978] FAULT_INJECTION: forcing a failure. [ 2402.713903][T25978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2402.727177][T25978] CPU: 0 UID: 0 PID: 25978 Comm: syz.3.31065 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2402.727212][T25978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2402.727229][T25978] Call Trace: [ 2402.727237][T25978] [ 2402.727246][T25978] __dump_stack+0x1d/0x30 [ 2402.727270][T25978] dump_stack_lvl+0xe8/0x140 [ 2402.727293][T25978] dump_stack+0x15/0x1b [ 2402.727309][T25978] should_fail_ex+0x265/0x280 [ 2402.727353][T25978] should_fail+0xb/0x20 [ 2402.727445][T25978] should_fail_usercopy+0x1a/0x20 [ 2402.727465][T25978] _copy_from_user+0x1c/0xb0 [ 2402.727519][T25978] ___sys_sendmsg+0xc1/0x1d0 [ 2402.727782][T25978] __x64_sys_sendmsg+0xd4/0x160 [ 2402.727815][T25978] x64_sys_call+0x2999/0x2fb0 [ 2402.727837][T25978] do_syscall_64+0xd2/0x200 [ 2402.727897][T25978] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2402.727934][T25978] ? clear_bhb_loop+0x40/0x90 [ 2402.728001][T25978] ? clear_bhb_loop+0x40/0x90 [ 2402.728028][T25978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2402.728054][T25978] RIP: 0033:0x7f52c6fae929 [ 2402.728070][T25978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2402.728097][T25978] RSP: 002b:00007f52c5617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2402.728118][T25978] RAX: ffffffffffffffda RBX: 00007f52c71d5fa0 RCX: 00007f52c6fae929 [ 2402.728133][T25978] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 2402.728209][T25978] RBP: 00007f52c5617090 R08: 0000000000000000 R09: 0000000000000000 [ 2402.728222][T25978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2402.728236][T25978] R13: 0000000000000000 R14: 00007f52c71d5fa0 R15: 00007ffe84de6d28 [ 2402.728256][T25978] [ 2402.937619][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 2402.937695][ T29] audit: type=1326 audit(2402.886:159824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2402.967236][ T29] audit: type=1326 audit(2402.886:159825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2402.990766][ T29] audit: type=1326 audit(2402.886:159826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2403.014357][ T29] audit: type=1326 audit(2402.886:159827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2403.037728][ T29] audit: type=1326 audit(2402.896:159828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2403.061106][ T29] audit: type=1326 audit(2402.896:159829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2403.084548][ T29] audit: type=1326 audit(2402.896:159830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2403.107831][ T29] audit: type=1326 audit(2402.896:159831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2403.131162][ T29] audit: type=1326 audit(2402.896:159832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2403.154592][ T29] audit: type=1326 audit(2402.896:159833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25938 comm="syz.5.31051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2403.306722][T26003] netlink: 'syz.2.31076': attribute type 1 has an invalid length. [ 2403.359578][T26001] lo speed is unknown, defaulting to 1000 [ 2403.387837][T26006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2403.395504][T26006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2403.404687][T26006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2403.412268][T26006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2403.530046][T26022] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2403.592113][T26027] pim6reg: entered allmulticast mode [ 2403.609199][T26027] pim6reg: left allmulticast mode [ 2403.835933][T26049] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2403.887453][T26057] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26057 comm=syz.5.31100 [ 2403.900263][T26057] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26057 comm=syz.5.31100 [ 2403.921898][T26057] netlink: 'syz.5.31100': attribute type 1 has an invalid length. [ 2403.940602][T26057] bond9: (slave dummy0): Releasing active interface [ 2403.950270][T26057] netlink: 'syz.5.31100': attribute type 10 has an invalid length. [ 2404.059357][T26072] 9pnet_fd: Insufficient options for proto=fd [ 2404.094691][T26076] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2404.133410][T26082] wireguard1: entered promiscuous mode [ 2404.139064][T26082] wireguard1: entered allmulticast mode [ 2404.272864][T26100] Cannot find set identified by id 0 to match [ 2404.306409][T26104] loop6: detected capacity change from 0 to 164 [ 2404.317562][T26104] ISOFS: unable to read i-node block [ 2404.323005][T26104] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2404.335689][T26106] FAULT_INJECTION: forcing a failure. [ 2404.335689][T26106] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.348409][T26106] CPU: 1 UID: 0 PID: 26106 Comm: syz.2.31119 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2404.348470][T26106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2404.348485][T26106] Call Trace: [ 2404.348494][T26106] [ 2404.348504][T26106] __dump_stack+0x1d/0x30 [ 2404.348596][T26106] dump_stack_lvl+0xe8/0x140 [ 2404.348622][T26106] dump_stack+0x15/0x1b [ 2404.348641][T26106] should_fail_ex+0x265/0x280 [ 2404.348682][T26106] should_failslab+0x8c/0xb0 [ 2404.348711][T26106] kmem_cache_alloc_node_noprof+0x57/0x320 [ 2404.348746][T26106] ? __alloc_skb+0x101/0x320 [ 2404.348859][T26106] __alloc_skb+0x101/0x320 [ 2404.348898][T26106] ? audit_log_start+0x365/0x6c0 [ 2404.348934][T26106] audit_log_start+0x380/0x6c0 [ 2404.348971][T26106] audit_seccomp+0x48/0x100 [ 2404.349063][T26106] ? __seccomp_filter+0x68c/0x10d0 [ 2404.349091][T26106] __seccomp_filter+0x69d/0x10d0 [ 2404.349122][T26106] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2404.349150][T26106] ? vfs_write+0x75e/0x8e0 [ 2404.349261][T26106] __secure_computing+0x82/0x150 [ 2404.349292][T26106] syscall_trace_enter+0xcf/0x1e0 [ 2404.349324][T26106] do_syscall_64+0xac/0x200 [ 2404.349358][T26106] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2404.349399][T26106] ? clear_bhb_loop+0x40/0x90 [ 2404.349421][T26106] ? clear_bhb_loop+0x40/0x90 [ 2404.349443][T26106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2404.349476][T26106] RIP: 0033:0x7f045901e929 [ 2404.349496][T26106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2404.349520][T26106] RSP: 002b:00007f0457687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 2404.349543][T26106] RAX: ffffffffffffffda RBX: 00007f0459245fa0 RCX: 00007f045901e929 [ 2404.349557][T26106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2404.349619][T26106] RBP: 00007f0457687090 R08: 0000000000000000 R09: 0000000000000000 [ 2404.349636][T26106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2404.349707][T26106] R13: 0000000000000000 R14: 00007f0459245fa0 R15: 00007fff50392f58 [ 2404.349730][T26106] [ 2404.577891][T26108] netlink: 'syz.5.31120': attribute type 1 has an invalid length. [ 2404.598978][T26112] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2404.621198][T26114] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2404.661622][T26121] netlink: 'syz.0.31126': attribute type 1 has an invalid length. [ 2404.717946][T26129] Invalid ELF header magic: != ELF [ 2404.820283][T26137] Cannot find set identified by id 0 to match [ 2404.848784][T26143] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2404.883946][T26145] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2405.119366][T26158] loop6: detected capacity change from 0 to 1024 [ 2405.141002][T26158] EXT4-fs: Ignoring removed nobh option [ 2405.146787][T26158] EXT4-fs: Ignoring removed nobh option [ 2405.158084][T26158] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 2405.189146][T26158] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: comm syz.6.31138: inode #4294967295: comm syz.6.31138: iget: illegal inode # [ 2405.220827][T26166] FAULT_INJECTION: forcing a failure. [ 2405.220827][T26166] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.233603][T26166] CPU: 1 UID: 0 PID: 26166 Comm: syz.3.31143 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2405.233638][T26166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2405.233654][T26166] Call Trace: [ 2405.233731][T26166] [ 2405.233739][T26166] __dump_stack+0x1d/0x30 [ 2405.233760][T26166] dump_stack_lvl+0xe8/0x140 [ 2405.233858][T26166] dump_stack+0x15/0x1b [ 2405.233913][T26166] should_fail_ex+0x265/0x280 [ 2405.233956][T26166] should_failslab+0x8c/0xb0 [ 2405.234024][T26166] kmem_cache_alloc_node_noprof+0x57/0x320 [ 2405.234060][T26166] ? __alloc_skb+0x101/0x320 [ 2405.234129][T26166] __alloc_skb+0x101/0x320 [ 2405.234166][T26166] ? audit_log_start+0x365/0x6c0 [ 2405.234207][T26166] audit_log_start+0x380/0x6c0 [ 2405.234291][T26166] audit_seccomp+0x48/0x100 [ 2405.234380][T26166] ? __seccomp_filter+0x68c/0x10d0 [ 2405.234409][T26166] __seccomp_filter+0x69d/0x10d0 [ 2405.234438][T26166] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2405.234497][T26166] ? vfs_write+0x75e/0x8e0 [ 2405.234516][T26166] ? __rcu_read_unlock+0x4f/0x70 [ 2405.234536][T26166] ? __fget_files+0x184/0x1c0 [ 2405.234564][T26166] __secure_computing+0x82/0x150 [ 2405.234593][T26166] syscall_trace_enter+0xcf/0x1e0 [ 2405.234676][T26166] do_syscall_64+0xac/0x200 [ 2405.234702][T26166] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2405.234726][T26166] ? clear_bhb_loop+0x40/0x90 [ 2405.234775][T26166] ? clear_bhb_loop+0x40/0x90 [ 2405.234798][T26166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.234825][T26166] RIP: 0033:0x7f52c6fae929 [ 2405.234844][T26166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2405.234862][T26166] RSP: 002b:00007f52c5617038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 2405.234946][T26166] RAX: ffffffffffffffda RBX: 00007f52c71d5fa0 RCX: 00007f52c6fae929 [ 2405.234961][T26166] RDX: 0000000000000008 RSI: 0000200000000000 RDI: ffffffffffffffff [ 2405.234976][T26166] RBP: 00007f52c5617090 R08: 0000000000000000 R09: 0000000000000000 [ 2405.234992][T26166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2405.235007][T26166] R13: 0000000000000000 R14: 00007f52c71d5fa0 R15: 00007ffe84de6d28 [ 2405.235052][T26166] [ 2405.258834][T26158] EXT4-fs (loop6): no journal found [ 2405.471264][T26158] EXT4-fs (loop6): can't get journal size [ 2405.484849][T26176] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2405.507625][T26158] EXT4-fs (loop6): failed to initialize system zone (-22) [ 2405.536558][T26158] EXT4-fs (loop6): mount failed [ 2405.541930][T26179] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2406.030267][T26154] Cannot find set identified by id 0 to match [ 2406.036518][T26172] Cannot find set identified by id 0 to match [ 2406.106446][T26205] netlink: 'syz.0.31156': attribute type 1 has an invalid length. [ 2406.127182][T26205] __nla_validate_parse: 12 callbacks suppressed [ 2406.127201][T26205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31156'. [ 2406.165987][T26208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26208 comm=syz.6.31158 [ 2406.178687][T26208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26208 comm=syz.6.31158 [ 2406.203875][T26208] loop6: detected capacity change from 0 to 1024 [ 2406.225462][T26210] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2406.336688][T26220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31162'. [ 2406.368549][T26208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2406.384041][T26208] netlink: 'syz.6.31158': attribute type 1 has an invalid length. [ 2406.399347][T26208] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2406.410349][T26208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31158'. [ 2406.442406][T26208] vlan9: entered promiscuous mode [ 2406.447654][T26208] bond11: entered promiscuous mode [ 2406.473189][T26208] bond10: (slave dummy0): Releasing active interface [ 2406.487565][T26208] bond11: (slave dummy0): making interface the new active one [ 2406.509228][T26208] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 2406.543132][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2406.643645][T26235] Cannot find set identified by id 0 to match [ 2406.736255][T26246] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2406.805550][T26253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31173'. [ 2407.127300][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.31166'. [ 2407.343192][T26296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.31188'. [ 2407.356242][T26301] netlink: 'syz.5.31190': attribute type 1 has an invalid length. [ 2407.385284][T26301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.31190'. [ 2407.429091][T26302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31188'. [ 2407.449348][T26296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31188'. [ 2407.668206][T26305] loop0: detected capacity change from 0 to 4096 [ 2407.679341][T26305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2407.694943][T26305] EXT4-fs error (device loop0): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.0.31191: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2407.715545][T26305] EXT4-fs error (device loop0): ext4_get_first_dir_block:3547: inode #12: comm syz.0.31191: directory missing '..' [ 2407.797795][T20891] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2407.828610][T26298] Cannot find set identified by id 0 to match [ 2407.900081][T26315] pim6reg: entered allmulticast mode [ 2407.909574][T26315] pim6reg: left allmulticast mode [ 2408.022055][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 2408.022072][ T29] audit: type=1326 audit(2407.986:160017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.052229][ T29] audit: type=1326 audit(2408.006:160018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.075720][ T29] audit: type=1326 audit(2408.006:160019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.099020][ T29] audit: type=1326 audit(2408.006:160020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.122568][ T29] audit: type=1326 audit(2408.006:160021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.145959][ T29] audit: type=1326 audit(2408.006:160022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.169418][ T29] audit: type=1326 audit(2408.006:160023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.176651][T26325] Invalid ELF header magic: != ELF [ 2408.192735][ T29] audit: type=1326 audit(2408.006:160024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.221295][ T29] audit: type=1326 audit(2408.006:160025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.244823][ T29] audit: type=1326 audit(2408.006:160026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26309 comm="syz.0.31192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16240be929 code=0x7ffc0000 [ 2408.288168][T26328] loop2: detected capacity change from 0 to 128 [ 2408.378868][T26334] loop0: detected capacity change from 0 to 4096 [ 2408.413399][T26334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2408.429505][T26334] EXT4-fs error (device loop0): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.0.31202: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2408.450907][T26334] EXT4-fs error (device loop0): ext4_get_first_dir_block:3547: inode #12: comm syz.0.31202: directory missing '..' [ 2408.497757][T26351] Cannot find set identified by id 0 to match [ 2408.526811][T26356] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26356 comm=syz.2.31210 [ 2408.539555][T26356] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26356 comm=syz.2.31210 [ 2408.554705][T20891] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2408.560722][T26356] loop2: detected capacity change from 0 to 1024 [ 2408.590070][T26356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2408.604854][T26356] netlink: 'syz.2.31210': attribute type 1 has an invalid length. [ 2408.620956][T26356] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2408.636461][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31210'. [ 2408.649904][T26356] vlan4: entered promiscuous mode [ 2408.655462][T26356] bond4: entered promiscuous mode [ 2408.685376][T26356] bond3: (slave dummy0): Releasing active interface [ 2408.706481][T26356] bond4: (slave dummy0): making interface the new active one [ 2408.716915][T26356] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 2408.765862][T24034] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2409.037825][T26413] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2409.273346][T26446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26446 comm=syz.6.31250 [ 2409.286300][T26446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26446 comm=syz.6.31250 [ 2409.304988][T26446] loop6: detected capacity change from 0 to 1024 [ 2409.315969][T26446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2409.329553][T26446] netlink: 'syz.6.31250': attribute type 1 has an invalid length. [ 2409.332224][T26448] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2409.346692][T26446] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2409.360063][T26446] vlan10: entered promiscuous mode [ 2409.365304][T26446] bond12: entered promiscuous mode [ 2409.380150][T26446] bond11: (slave dummy0): Releasing active interface [ 2409.407976][T26459] netlink: 'syz.5.31253': attribute type 1 has an invalid length. [ 2409.420981][T26446] bond12: (slave dummy0): making interface the new active one [ 2409.431100][T26446] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 2409.449964][T26459] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2409.458007][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2409.478604][T26459] bond10: (slave veth3): Enslaving as an active interface with a down link [ 2409.518701][T26459] bond10: (slave veth0_to_bond): making interface the new active one [ 2409.536244][T26459] veth0_to_bond: entered promiscuous mode [ 2409.548112][T26459] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2409.797694][T26487] loop2: detected capacity change from 0 to 512 [ 2409.835635][T26487] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 2409.869318][T26497] Invalid ELF header magic: != ELF [ 2409.895317][T26487] loop2: detected capacity change from 0 to 128 [ 2409.940538][T26487] lo speed is unknown, defaulting to 1000 [ 2409.996672][T26503] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2410.140793][T26521] Invalid ELF header magic: != ELF [ 2410.208008][T26528] loop0: detected capacity change from 0 to 128 [ 2410.307736][T26530] loop0: detected capacity change from 0 to 1024 [ 2410.329696][T26530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2410.351025][T26530] bridge0: entered promiscuous mode [ 2410.358757][T26530] bridge0: left promiscuous mode [ 2410.398919][T26539] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.31285: lblock 1 mapped to illegal pblock 1 (length 15) [ 2410.413773][T26539] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.31285: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2410.442257][T26540] pim6reg: entered allmulticast mode [ 2410.448654][T26540] pim6reg: left allmulticast mode [ 2410.469215][T20891] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2410.548445][T26546] loop0: detected capacity change from 0 to 164 [ 2410.557396][T26546] ISOFS: unable to read i-node block [ 2410.562793][T26546] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2410.809973][T26569] FAULT_INJECTION: forcing a failure. [ 2410.809973][T26569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2410.823241][T26569] CPU: 1 UID: 0 PID: 26569 Comm: syz.0.31300 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2410.823271][T26569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2410.823284][T26569] Call Trace: [ 2410.823292][T26569] [ 2410.823302][T26569] __dump_stack+0x1d/0x30 [ 2410.823330][T26569] dump_stack_lvl+0xe8/0x140 [ 2410.823355][T26569] dump_stack+0x15/0x1b [ 2410.823376][T26569] should_fail_ex+0x265/0x280 [ 2410.823413][T26569] should_fail+0xb/0x20 [ 2410.823444][T26569] should_fail_usercopy+0x1a/0x20 [ 2410.823519][T26569] _copy_from_user+0x1c/0xb0 [ 2410.823583][T26569] get_timespec64+0x4c/0x100 [ 2410.823606][T26569] __se_sys_ppoll+0x75/0x200 [ 2410.823633][T26569] __x64_sys_ppoll+0x67/0x80 [ 2410.823660][T26569] x64_sys_call+0x2de5/0x2fb0 [ 2410.823683][T26569] do_syscall_64+0xd2/0x200 [ 2410.823764][T26569] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 2410.823795][T26569] ? clear_bhb_loop+0x40/0x90 [ 2410.823816][T26569] ? clear_bhb_loop+0x40/0x90 [ 2410.823844][T26569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2410.823900][T26569] RIP: 0033:0x7f16240be929 [ 2410.823917][T26569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2410.823938][T26569] RSP: 002b:00007f1622727038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2410.823960][T26569] RAX: ffffffffffffffda RBX: 00007f16242e5fa0 RCX: 00007f16240be929 [ 2410.823975][T26569] RDX: 0000200000000380 RSI: 0000000000000001 RDI: 0000200000000300 [ 2410.823990][T26569] RBP: 00007f1622727090 R08: 0000000000000000 R09: 0000000000000000 [ 2410.824003][T26569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2410.824020][T26569] R13: 0000000000000000 R14: 00007f16242e5fa0 R15: 00007ffdfde08cc8 [ 2410.824092][T26569] [ 2411.035980][T26570] Cannot find set identified by id 0 to match [ 2411.138237][T26587] __nla_validate_parse: 6 callbacks suppressed [ 2411.138256][T26587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31306'. [ 2411.148123][T26589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26589 comm=syz.2.31307 [ 2411.166324][T26589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26589 comm=syz.2.31307 [ 2411.205246][T26589] netlink: 'syz.2.31307': attribute type 1 has an invalid length. [ 2411.221025][T26589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2411.237831][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31307'. [ 2411.250436][T26589] vlan5: entered promiscuous mode [ 2411.255603][T26589] bond5: entered promiscuous mode [ 2411.277042][T26589] bond4: (slave dummy0): Releasing active interface [ 2411.304818][T26595] Cannot find set identified by id 0 to match [ 2411.322199][T26589] bond5: (slave dummy0): making interface the new active one [ 2411.342273][T26589] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 2411.379006][T26589] netlink: 'syz.2.31307': attribute type 10 has an invalid length. [ 2411.473688][T26614] loop2: detected capacity change from 0 to 164 [ 2411.487910][T26614] ISOFS: unable to read i-node block [ 2411.493410][T26614] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 2411.510797][T26617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31317'. [ 2411.537531][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31319'. [ 2411.549827][T26620] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2411.625995][T26627] loop6: detected capacity change from 0 to 128 [ 2411.634910][T26627] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 2411.881438][T26644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31325'. [ 2412.362459][T26639] Cannot find set identified by id 0 to match [ 2412.362477][T26642] Cannot find set identified by id 0 to match [ 2412.418775][T26658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31332'. [ 2412.485743][T26662] pim6reg: entered allmulticast mode [ 2412.492045][T26662] pim6reg: left allmulticast mode [ 2412.586233][T26667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26667 comm=syz.5.31335 [ 2412.599071][T26667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26667 comm=syz.5.31335 [ 2412.629542][T26667] netlink: 'syz.5.31335': attribute type 1 has an invalid length. [ 2412.646233][T26667] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2412.653980][T26669] rdma_op ffff888177e2fd80 conn xmit_rdma 0000000000000000 [ 2412.657127][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31335'. [ 2412.673484][T26667] vlan9: entered promiscuous mode [ 2412.678581][T26667] bond11: entered promiscuous mode [ 2412.689642][T26667] bond11: (slave dummy0): making interface the new active one [ 2412.699118][T26667] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 2412.817724][T26682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31343'. [ 2412.905614][T26695] Invalid ELF header magic: != ELF [ 2412.955604][T26700] pim6reg: entered allmulticast mode [ 2412.961798][T26700] pim6reg: left allmulticast mode [ 2413.178976][T26716] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31354'. [ 2413.241092][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 2413.241111][ T29] audit: type=1326 audit(2413.206:160304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.279664][ T29] audit: type=1326 audit(2413.206:160305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.303087][ T29] audit: type=1326 audit(2413.216:160306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.326541][ T29] audit: type=1326 audit(2413.216:160307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.349863][ T29] audit: type=1326 audit(2413.216:160308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.373312][ T29] audit: type=1326 audit(2413.216:160309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.382274][T26719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26719 comm=syz.6.31356 [ 2413.396646][ T29] audit: type=1326 audit(2413.216:160310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.409476][T26719] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26719 comm=syz.6.31356 [ 2413.445537][ T29] audit: type=1326 audit(2413.216:160311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.468267][T26719] loop6: detected capacity change from 0 to 1024 [ 2413.468899][ T29] audit: type=1326 audit(2413.216:160312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.498462][ T29] audit: type=1326 audit(2413.216:160313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26701 comm="syz.5.31350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf4c1e929 code=0x7ffc0000 [ 2413.577326][T26719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2413.600717][T26732] Invalid ELF header magic: != ELF [ 2413.608209][T26719] netlink: 'syz.6.31356': attribute type 1 has an invalid length. [ 2413.648904][T26719] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2413.674504][T26719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31356'. [ 2413.686612][T26719] vlan11: entered promiscuous mode [ 2413.691786][T26719] bond13: entered promiscuous mode [ 2413.745513][T26746] bond12: (slave dummy0): Releasing active interface [ 2413.799064][T26746] bond13: (slave dummy0): making interface the new active one [ 2413.832192][T26746] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 2413.901335][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2413.985829][T26760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2413.994509][T26760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2414.256037][T26734] Cannot find set identified by id 0 to match [ 2414.343603][T12910] IPVS: starting estimator thread 0... [ 2414.455319][T26768] IPVS: using max 2352 ests per chain, 117600 per kthread [ 2414.739914][T26784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2414.775477][T26784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2414.873092][T26787] tipc: Started in network mode [ 2414.878059][T26787] tipc: Node identity 2243ebc02152, cluster identity 4711 [ 2414.885380][T26787] tipc: Enabled bearer , priority 0 [ 2414.926644][T26785] tipc: Resetting bearer [ 2414.973773][T26785] tipc: Disabling bearer [ 2415.062181][T26789] syz_tun: entered allmulticast mode [ 2415.243700][T26794] netlink: 'syz.0.31380': attribute type 10 has an invalid length. [ 2415.410040][T26810] tmpfs: Unknown parameter 'usrquota' [ 2415.416266][T26812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2415.424815][T26812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2416.243785][T26827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26827 comm=syz.5.31392 [ 2416.382343][T26834] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2417.098715][T26859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31402'. [ 2417.375021][T26871] smc: net device bond0 applied user defined pnetid SYZ2 [ 2417.401208][T26874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.31408'. [ 2417.412266][T26874] 8021q: VLANs not supported on gre0 [ 2417.604813][T26880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.31410'. [ 2417.864066][ T636] IPVS: starting estimator thread 0... [ 2417.953696][T26885] IPVS: using max 2400 ests per chain, 120000 per kthread [ 2418.313566][T26902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2418.322215][T26902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2418.583381][T26909] infiniband syz1: set active [ 2418.588142][T26909] infiniband syz1: added syz_tun [ 2418.933941][T26909] RDS/IB: syz1: added [ 2418.953698][T26909] smc: adding ib device syz1 with port count 1 [ 2418.966457][T26909] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 2419.019020][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 2419.019034][ T29] audit: type=1400 audit(2418.986:160339): avc: denied { setopt } for pid=26915 comm="syz.6.31421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2419.057982][ T29] audit: type=1400 audit(2419.016:160340): avc: denied { ioctl } for pid=26915 comm="syz.6.31421" path="socket:[389323]" dev="sockfs" ino=389323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2419.082798][ T29] audit: type=1400 audit(2419.016:160341): avc: denied { write } for pid=26915 comm="syz.6.31421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2419.414760][ T29] audit: type=1400 audit(2419.386:160342): avc: denied { append } for pid=26924 comm="syz.6.31425" name="file0" dev="tmpfs" ino=2731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2419.438977][T26925] block device autoloading is deprecated and will be removed. [ 2419.472472][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.480080][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.487687][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.495164][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.502569][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.510155][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.517621][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.525172][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.529649][T26939] netlink: 'syz.0.31429': attribute type 10 has an invalid length. [ 2419.532579][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.548020][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.555441][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.563270][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.570717][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.578263][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.585690][ T623] hid-generic 00A0:0008:0003.008A: unknown main item tag 0x0 [ 2419.596042][ T623] hid-generic 00A0:0008:0003.008A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 2419.674257][T26949] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26949 comm=syz.6.31433 [ 2419.687081][T26949] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26949 comm=syz.6.31433 [ 2419.805093][T26949] loop6: detected capacity change from 0 to 1024 [ 2419.912027][T26949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2419.942244][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.31433'. [ 2419.989207][T26949] bond13: (slave dummy0): Releasing active interface [ 2420.003132][T26949] netlink: 'syz.6.31433': attribute type 10 has an invalid length. [ 2420.029561][T26977] Cannot find set identified by id 0 to match [ 2420.052782][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2420.068226][T26975] Cannot find set identified by id 0 to match [ 2420.211034][T26987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.31448'. [ 2420.288705][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31450'. [ 2420.408666][T27006] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2420.601623][T27032] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2420.629149][ T29] audit: type=1326 audit(2420.596:160343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27034 comm="syz.6.31469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2420.652514][ T29] audit: type=1326 audit(2420.596:160344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27034 comm="syz.6.31469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2420.676258][ T29] audit: type=1326 audit(2420.596:160345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27034 comm="syz.6.31469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2420.699712][ T29] audit: type=1326 audit(2420.596:160346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27034 comm="syz.6.31469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce4de929 code=0x7ffc0000 [ 2420.739748][T27039] lo speed is unknown, defaulting to 1000 [ 2420.852640][T27050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.31476'. [ 2420.896760][ T29] audit: type=1400 audit(2420.866:160347): avc: denied { create } for pid=27038 comm="syz.6.31471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2420.947058][T27057] 9pnet: Could not find request transport: Rà‰Pfdno=0xffffffffffffffff [ 2420.977221][ T29] audit: type=1326 audit(2420.946:160348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27061 comm="syz.2.31481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045901e929 code=0x7ffc0000 [ 2421.154490][T27077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31488'. [ 2421.295357][T27103] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2421.354561][T27113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31499'. [ 2421.371468][T27110] loop2: detected capacity change from 0 to 4096 [ 2421.391392][T27110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2421.408000][T27110] EXT4-fs error (device loop2): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.2.31503: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 2421.430590][T27110] EXT4-fs error (device loop2): ext4_get_first_dir_block:3547: inode #12: comm syz.2.31503: directory missing '..' [ 2421.449969][T27120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31504'. [ 2421.535217][T24034] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2421.582739][T27103] bridge0: port 2(bridge_slave_1) entered disabled state [ 2421.590175][T27103] bridge0: port 1(bridge_slave_0) entered disabled state [ 2421.635493][T27128] Cannot find set identified by id 0 to match [ 2421.712296][T27103] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.720778][T27103] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.729252][T27103] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.737694][T27103] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.813677][T11680] veth0_to_bond: left promiscuous mode [ 2421.928915][T27170] loop2: detected capacity change from 0 to 1024 [ 2421.968868][T27170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2421.983679][T27170] netlink: 'syz.2.31523': attribute type 1 has an invalid length. [ 2421.998270][T27170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2422.043441][T27170] vlan6: entered promiscuous mode [ 2422.048535][T27170] bond6: entered promiscuous mode [ 2422.068327][T27170] bond5: (slave dummy0): Releasing active interface [ 2422.088707][T27185] loop6: detected capacity change from 0 to 2048 [ 2422.122658][T27170] bond6: (slave dummy0): making interface the new active one [ 2422.145288][T27170] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 2422.157927][T27185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2422.170858][T27191] __nla_validate_parse: 2 callbacks suppressed [ 2422.170936][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31531'. [ 2422.203050][T27181] ================================================================== [ 2422.211197][T27181] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 2422.221058][T27181] [ 2422.223404][T27181] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 2422.231493][T27181] tick_do_update_jiffies64+0x113/0x1c0 [ 2422.237065][T27181] tick_nohz_handler+0x7f/0x2d0 [ 2422.241935][T27181] __hrtimer_run_queues+0x20f/0x5a0 [ 2422.247150][T27181] hrtimer_interrupt+0x21a/0x460 [ 2422.252105][T27181] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 2422.258027][T27181] sysvec_apic_timer_interrupt+0x6f/0x80 [ 2422.263693][T27181] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2422.269696][T27181] kcsan_setup_watchpoint+0x415/0x430 [ 2422.275099][T27181] free_pages_and_swap_cache+0x201/0x400 [ 2422.280760][T27181] tlb_flush_mmu+0x2dc/0x450 [ 2422.285367][T27181] unmap_page_range+0x2446/0x2740 [ 2422.290418][T27181] unmap_vmas+0x23d/0x3a0 [ 2422.294789][T27181] exit_mmap+0x1b0/0x6c0 [ 2422.299037][T27181] __mmput+0x28/0x1c0 [ 2422.303032][T27181] mmput+0x40/0x50 [ 2422.306762][T27181] exit_mm+0xe4/0x190 [ 2422.310777][T27181] do_exit+0x40b/0x1590 [ 2422.314948][T27181] do_group_exit+0xff/0x140 [ 2422.319478][T27181] get_signal+0xe59/0xf70 [ 2422.323896][T27181] arch_do_signal_or_restart+0x96/0x480 [ 2422.329473][T27181] exit_to_user_mode_loop+0x7a/0x100 [ 2422.334796][T27181] do_syscall_64+0x1d6/0x200 [ 2422.339403][T27181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.345313][T27181] [ 2422.347643][T27181] read to 0xffffffff868099c0 of 8 bytes by task 27181 on cpu 0: [ 2422.355292][T27181] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 2422.361554][T27181] count_shadow_nodes+0x6a/0x230 [ 2422.366516][T27181] do_shrink_slab+0x63/0x680 [ 2422.371128][T27181] shrink_slab+0x448/0x760 [ 2422.375566][T27181] shrink_node+0x6c3/0x2120 [ 2422.380085][T27181] do_try_to_free_pages+0x3f6/0xcd0 [ 2422.385295][T27181] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 2422.391203][T27181] try_charge_memcg+0x358/0x9e0 [ 2422.396066][T27181] obj_cgroup_charge_pages+0xa6/0x150 [ 2422.401467][T27181] __memcg_kmem_charge_page+0x9f/0x170 [ 2422.406956][T27181] __alloc_frozen_pages_noprof+0x188/0x360 [ 2422.412792][T27181] alloc_pages_mpol+0xb3/0x250 [ 2422.417579][T27181] alloc_pages_noprof+0x90/0x130 [ 2422.422563][T27181] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 2422.428396][T27181] __kvmalloc_node_noprof+0x30f/0x4e0 [ 2422.433785][T27181] ip_set_alloc+0x1f/0x30 [ 2422.438140][T27181] hash_netiface_create+0x282/0x740 [ 2422.443371][T27181] ip_set_create+0x3cc/0x960 [ 2422.447974][T27181] nfnetlink_rcv_msg+0x4c3/0x590 [ 2422.452935][T27181] netlink_rcv_skb+0x120/0x220 [ 2422.457740][T27181] nfnetlink_rcv+0x16b/0x1690 [ 2422.462439][T27181] netlink_unicast+0x5a1/0x670 [ 2422.467233][T27181] netlink_sendmsg+0x58b/0x6b0 [ 2422.472014][T27181] __sock_sendmsg+0x142/0x180 [ 2422.476719][T27181] ____sys_sendmsg+0x31e/0x4e0 [ 2422.481496][T27181] ___sys_sendmsg+0x17b/0x1d0 [ 2422.486185][T27181] __x64_sys_sendmsg+0xd4/0x160 [ 2422.491055][T27181] x64_sys_call+0x2999/0x2fb0 [ 2422.495753][T27181] do_syscall_64+0xd2/0x200 [ 2422.500272][T27181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.506185][T27181] [ 2422.508513][T27181] value changed: 0x0000000100033cbf -> 0x0000000100033cc0 [ 2422.515619][T27181] [ 2422.517948][T27181] Reported by Kernel Concurrency Sanitizer on: [ 2422.524107][T27181] CPU: 0 UID: 0 PID: 27181 Comm: syz.0.31528 Not tainted 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(voluntary) [ 2422.536712][T27181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2422.546776][T27181] ================================================================== [ 2422.560352][T21505] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2422.579913][T24034] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2422.712665][T27196] loop0: detected capacity change from 0 to 1024 [ 2422.735728][T27196] EXT4-fs: Ignoring removed nobh option [ 2422.741412][T27196] EXT4-fs: Ignoring removed nobh option [ 2422.766232][T27196] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 2422.794753][T27196] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.31528: inode #4294967295: comm syz.0.31528: iget: illegal inode # [ 2422.826252][T27196] EXT4-fs (loop0): no journal found [ 2422.831598][T27196] EXT4-fs (loop0): can't get journal size [ 2422.851489][T27196] EXT4-fs (loop0): failed to initialize system zone (-22) [ 2422.866877][T27196] EXT4-fs (loop0): mount failed