last executing test programs: 3m14.239830911s ago: executing program 32 (id=68): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 3m13.051367057s ago: executing program 33 (id=80): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) 3m6.147205401s ago: executing program 34 (id=197): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 'lo\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'xfrm0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x20002) 2m50.954832334s ago: executing program 35 (id=528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) 2m49.203897815s ago: executing program 36 (id=560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x38}}, 0x10) 2m45.738302903s ago: executing program 37 (id=602): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000001f00", 0xb, 0x0, &(0x7f0000000300)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2m16.031899232s ago: executing program 38 (id=1098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) setuid(0xee00) 2m5.482001752s ago: executing program 39 (id=1215): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 2m3.336862012s ago: executing program 8 (id=1263): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffe53, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0xd9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x1]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x40182) 2m2.342098399s ago: executing program 8 (id=1269): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2a1d234765e73b125777b1e3add243f6d9b8f4b2", 0x14}, {&(0x7f00000000c0)="528b", 0x2}], 0x2}}], 0x1, 0x8010) 2m2.268725616s ago: executing program 8 (id=1271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m2.214612361s ago: executing program 8 (id=1273): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m1.92102278s ago: executing program 8 (id=1279): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000c40)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsm_get_self_attr(0x0, &(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x81, ""/129}, &(0x7f0000000040)=0xa1, 0x0) 2m1.152336425s ago: executing program 8 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x25}, 0x94) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48) pwrite64(r3, &(0x7f0000000100)='2', 0x1, 0x1fecd) fallocate(r2, 0x0, 0x6, 0x2000402) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r8 = dup(r7) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="64b11107d0012cf4d7109725ce51e16602103741baeaecb3549d41eadb753b6ae1b67cb9fadda6ff15ec48b553aa44d167401a6217d99e36258c473379d9faab", @ANYRESHEX=r9, @ANYBLOB=',\x00']) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m1.151980575s ago: executing program 40 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x25}, 0x94) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48) pwrite64(r3, &(0x7f0000000100)='2', 0x1, 0x1fecd) fallocate(r2, 0x0, 0x6, 0x2000402) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r8 = dup(r7) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="64b11107d0012cf4d7109725ce51e16602103741baeaecb3549d41eadb753b6ae1b67cb9fadda6ff15ec48b553aa44d167401a6217d99e36258c473379d9faab", @ANYRESHEX=r9, @ANYBLOB=',\x00']) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m32.20109041s ago: executing program 5 (id=1717): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 1m32.136065467s ago: executing program 5 (id=1719): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) 1m32.061493204s ago: executing program 5 (id=1724): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m31.99794437s ago: executing program 5 (id=1725): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_names='veth0_to_hsr\x00'}}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) r5 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff888237c16e50) 1m31.543838005s ago: executing program 5 (id=1729): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 1m30.941267093s ago: executing program 5 (id=1740): syz_io_uring_setup(0x45d4, &(0x7f0000000440)={0x0, 0x5b, 0x0, 0x0, 0xe}, &(0x7f0000000640)=0x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10c, &(0x7f00000006c0)=0xfffffffb, 0x0, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000080)=0xe8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f00000003c0)={[], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsname={'fsname', 0x3d, 'sched_switch\x00'}}, {@uid_eq={'uid', 0x3d, r1}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r1}}]}, 0x1, 0x296, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) close(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r5}, 0x18) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) lchown(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) 1m30.914258996s ago: executing program 41 (id=1740): syz_io_uring_setup(0x45d4, &(0x7f0000000440)={0x0, 0x5b, 0x0, 0x0, 0xe}, &(0x7f0000000640)=0x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10c, &(0x7f00000006c0)=0xfffffffb, 0x0, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000080)=0xe8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f00000003c0)={[], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsname={'fsname', 0x3d, 'sched_switch\x00'}}, {@uid_eq={'uid', 0x3d, r1}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r1}}]}, 0x1, 0x296, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) close(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r5}, 0x18) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) lchown(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) 1m28.700796812s ago: executing program 2 (id=1767): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) 1m28.559690666s ago: executing program 2 (id=1768): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) dup3(r2, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x48) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffe, 0x6, 0x46, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="aaedaec886dd", 0x0, 0x3, 0x10006, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x7fff, 0xffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1m28.115804969s ago: executing program 2 (id=1772): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x3}, 0x18) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1m27.887244091s ago: executing program 2 (id=1777): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f0000000000)={'bridge_slave_0\x00', @ifru_names='veth0_to_hsr\x00'}}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) r5 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff888237c16e50) 1m27.340666825s ago: executing program 2 (id=1781): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m25.95642967s ago: executing program 2 (id=1792): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0xfffffffd, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x2, 0x2, 0xe, 0x0, 0xa}}) 1m25.899968616s ago: executing program 42 (id=1792): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0xfffffffd, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x2, 0x2, 0xe, 0x0, 0xa}}) 58.789325131s ago: executing program 6 (id=2280): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000140), 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x200080, &(0x7f0000000380)={[{@grpjquota}, {@delalloc}, {@inlinecrypt}]}, 0x3, 0x58b, &(0x7f0000001700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x503441, 0x7c) fsync(r2) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) add_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="6edb088f", 0x4, 0xfffffffffffffffe) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) 57.927041726s ago: executing program 6 (id=2306): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x25}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48) pwrite64(r2, 0x0, 0x0, 0x1fecd) fallocate(r1, 0x0, 0x6, 0x2000402) pwritev2(r0, &(0x7f0000000240)=[{}], 0x1, 0x9c00, 0x0, 0x3) 57.836486955s ago: executing program 6 (id=2309): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000c00)='./cgroup.net/devices.allow\x00', &(0x7f0000000c40), &(0x7f0000000c80)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 57.761002762s ago: executing program 6 (id=2314): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000001c0)={[{@utf8}, {@shortname_mixed}, {@uni_xlateno}, {}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@check_normal}]}, 0x1, 0x369, &(0x7f0000000700)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {@in6=@remote, 0x0, 0x17}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x4}}, 0xf0}, 0x1, 0xe, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) unshare(0x64000600) r3 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 56.927936573s ago: executing program 6 (id=2326): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 56.65287205s ago: executing program 6 (id=2332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r2) 56.562637949s ago: executing program 43 (id=2332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r2) 51.438445929s ago: executing program 4 (id=2406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xd, 0x0, &(0x7f0000000200)="df33c9f7b9a600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 51.378840305s ago: executing program 4 (id=2408): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r8, 0x0, 0x3}, 0x18) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) close(r9) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 51.048594837s ago: executing program 4 (id=2415): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001840000008000000000000000000000095000000000000009500"/72], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x100003c}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) socket(0xa, 0x3, 0x3a) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 50.919769989s ago: executing program 4 (id=2416): syz_emit_ethernet(0x3d, &(0x7f0000000100)={@link_local, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_mc={0x8848, {[{0x92454, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x800}, {0x9}], @llc={@snap={0xaa, 0xaa, "03", "938714", 0x60, "19d9ba1ce71d7e622bdf4bea44337d"}}}}}}, 0x0) r0 = syz_io_uring_setup(0x8f4, &(0x7f00000001c0)={0x0, 0x1167, 0x1000, 0x0, 0x1d}, &(0x7f0000000140), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/254, 0xfe}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$eJzs3T9oHmUcB/Df3fu+xiQvEnURxD8gIhoIcRNc4qIQkBBEBBUiIi5KIsQEt8TJxUFnLZm6hNKtaceSJXRpKXRK2wzpUmhDh4YO7XDlfS+BJG/6J33f3pXc5wPH3SV393uO3Pe5G3L3BFBZQxExFhG1iBiOiEZEJHs3eDefhnZWl/rXpiKy7Ks7SXu7fD23u99gRCxGxCcRsZom8Us9Yn7lu81761988Pdc4/2TK9/2F3qSO7Y2N77cPjHx15nxj+cvXbk1kcRYNPedV+8lh/ysnkS89jyKvSCSetkt4GlM/nH6aiv3r0fEe+38NyKN/I/3z+xLq4346P9H7fvv7ctvFtlWoPeyrNG6By5mQOWkEdGMJB2JiHw5TUdG8mf4a7WB9NeZ2d+Hf56Zm/6p7J4K6JVmxMbn5/rODh7I/81ann/g+Grl/+vJ5eut5e1a2a0BCvFWPmvlf/iHhQ9D/qFy5B+qS/6huo6Yf//RAceI+z9U12Py/3JZbQKK0Zn/RtlNAgri+R8qKcuyTP6hwuQfqmtv/gGAasn6yn4DGShL2f0PAAAAAAAAAAAAAAAAAADQaal/bWp3Kqrmhf8itj7LRxfprF9rj0e8+znygbvJvkFIkh4MSvL9O10eoEunSn77+pUb5da/+Ha59RemIxb/jIjRer3z+kt2rr9n9+oTft/4scsCR5QcWP/0m2LrH/Rgudz64+sR51v9z+hh/U8ab7Tnh/c/zR58Mf23+10eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMI8DAAA//84UXFU") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0xffffffffffffff62, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10009, 0x70239, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x6f00, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x7, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000050000000008106907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="fc1000ca9078100000080a8000000000000f27a8bc080a0000000200000002012202080affffffd800000101fe06f9891299a311c8bacb9fcf40fe303989470da484efa1f4529f4215f0e7a992e8ea9ddcdbd65e6083473edec80c8c9ead1e8532f102f404f78fdbbd47167d48fd3422719c2de52f12075afe7e62cb57e1cbc107681c5fd0b3371bea0c8aae007609227754108e8218a533332979848173e52bdd8ea25f186a3cb9e7bc70e2c7b91f5349ce7097d2922d2aec65fd9cf399ebdb2983fe0a825002d1b028a49589a0a70ad449f020bb6bfa1a53bfc6d30dfcdf4d4fd3d5bd332938"], 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b00"], 0x28}}, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x9) syz_emit_ethernet(0xed, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xdf, 0x68, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x10, 0x0, 0x0, 0x4, {[@mptcp=@remove_addr={0x1e, 0x45, 0x0, 0x0, "6e3c4beb85f05034355e62f5bc9eddc5a1b5a045e158afc067779b4e5bbd9c635d8a4c8d019df7dd2cb8a4844c5ae0d04a3ee23e889150d867154fff39b856e15036"}]}}, {"ffc1e1e5297d6aaab574f34cf1d5b0a81bf976a664ec70431f66a8f67608a4de82c8f49148385127658b6553ef38222733e032b439e8ed5a2d5257262e17b6e2809b860390c69d9b45067cb6d1a6c517c9fa5ddc23488aedf7c8f475bdb00400"/111}}}}}}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0xff, 0x2b1, &(0x7f0000000d00)="$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") r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r5, 0x0, 0xaf, 0x4000854, 0x0, 0x0) io_setup(0x100004, 0x0) io_setup(0xcb, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089", 0xd, 0x28000000, 0x0, 0x0) ptrace(0x10, r6) 50.090029671s ago: executing program 4 (id=2427): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000180)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00', @ANYRES8, @ANYRES16=0x0, @ANYRESHEX=0x0], 0x1, 0x2c3, &(0x7f00000002c0)="$eJzs3b1ra2UYAPDnpPlCh0RwEsEDOjhdbu/qkiK9cDGTkkEd9OK9F6QJQgsFPzDt5Oqim6uLILj5T7j4HwiugpsdCkdOzjn5Mo2JNK16f7+lb973efI+7zmnLR3y9P0XR0eP0nhy/tkv0W4nUetFLy6S6EYtKmexoPdlAAD/ZRdZFr9nhW3ykoho764sAGCHtv79/8POSwIAduytt99546DfP3wzTdtxf/TF6SD/yz7/WqwfPIkPYxiP42504jIimyrG97MsG9fTXDdeGY1PB3nm6L2fyvc/+C1ikr8fnehOphbzH/QP99PCXP44r+OZcv9enn8vOvH8iv0f9A/vrciPQTNefXmu/jvRiZ8/iI9iGI8mRRT5UYv4fD9NX8+++uPTd/Py8vxkfDpoTeJmsr0bvjUAAAAAAAAAAAAAAAAAAAAAAPyP3Sl757Ri0r8nnyr77+xd5i8akVa6i/15ivykeqOl/kDjLL6p+vPcTdM0KwNn+fV4oR712zk1AAAAAAAAAAAAAAAAAAAA/LucfPzJ0cPh8PHxtQyqbgDVx/r/6fv05mZeivXBrYhGuVet3HYh5utWxCwr9qqYJGJtGfkhNii12rNoe7A++OyKpeeWa64G332/8aX7dnr2xt8EN6Z7ZZ1ruu/Lg+rpOnqYrL6Grahm2tVD8uN8TDM23Kt51VK21ePXXLnU2frszWcng/GamEjWFfbar8WVK2eS5VM0J1d1ZXp13+fSF2PamzzPs++Uv0im3TqSa/0ZBAAAAAAAAAAAAAAAAAAAFGYf+l2xeL480Zh/UctaOy0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG7M7P//bzEYl8kbBDfj+OSWjwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBT4M8AAAD//zAXXTM=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0xc, &(0x7f0000001400)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="008000050000000000000000000000dee6def7", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) r4 = io_uring_setup(0x4c1e, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x0, 0x99, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x19, &(0x7f0000000300), 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000001440)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e81000b00886411703067e7e064ccb848d1fae50cd6cf697cc7c2590d8bfda4b8e417886487267aaa0fd39c91121a7816b5eec859bd3f865bc8e91deaa9dd5198f1ea717313"], 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) socket(0x1e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 49.109933856s ago: executing program 4 (id=2436): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) 49.091137698s ago: executing program 44 (id=2436): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) 6.881141108s ago: executing program 7 (id=3344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r1, r1, 0x0, 0x7a680000) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x70}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004894}, 0x4040005) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) setresuid(0xee01, 0xee00, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r6}) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xee) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpriority(0x1, 0x0) timer_gettime(r7, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) 6.707968655s ago: executing program 7 (id=3346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)=0x0) capget(&(0x7f0000000180)={0x20071026, r6}, &(0x7f0000000200)={0x3, 0x80000000, 0x1, 0xcb88, 0x6, 0xeff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000180005000000000000000000aa11594f69c7143c795d86ec00", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20044884) timerfd_gettime(0xffffffffffffffff, &(0x7f0000001200)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) 3.263971231s ago: executing program 7 (id=3442): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x40182) 1.73262094s ago: executing program 9 (id=3462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) dup(0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r5, 0x4e, 0x0) 1.307502792s ago: executing program 1 (id=3477): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fedbdf2501000000000000000b000000000c001473797a3000001000ebc615255a0408568338c20cacc3b3d917805e60159b53bf812daf1f8f51c92465809500ceaf725103a6054e050347a996d88fa508f941aa22d46a77270dfcd079fbb13cf552582e9dbd13a3877ce1894d6b003adfe6198a9712a0851f057629be749dc8f37a"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40040) 1.257409217s ago: executing program 1 (id=3479): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000c00)='./cgroup.net/devices.allow\x00', &(0x7f0000000c40), &(0x7f0000000c80)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 1.219406981s ago: executing program 7 (id=3480): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24040890) ppoll(&(0x7f00000000c0)=[{r0, 0xc000}], 0x1, 0x0, 0x0, 0x0) 1.160084966s ago: executing program 1 (id=3483): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.135494689s ago: executing program 0 (id=3484): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000001040)={[{@sysvgroups}, {@inlinecrypt}, {@jqfmt_vfsv0}]}, 0xfe, 0x4eb, &(0x7f0000000380)="$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") (fail_nth: 2) 1.102382612s ago: executing program 1 (id=3485): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 916.88267ms ago: executing program 0 (id=3487): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 916.504051ms ago: executing program 1 (id=3488): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcf, &(0x7f0000000340)=""/207}, 0x94) 872.051514ms ago: executing program 0 (id=3489): syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400df0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001040006"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) ptrace$peeksig(0x4209, r2, &(0x7f0000000280)={0x9, 0x1, 0x1}, &(0x7f0000000640)=[{}]) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 859.826955ms ago: executing program 1 (id=3490): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x40182) 786.913043ms ago: executing program 9 (id=3493): socket$kcm(0x10, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000800)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\Q\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\xb7l\xed}\xe5\x186\xc5q@n\xbf\xb6s\xb0\x00\x00\x00\x00\x02\t\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xbf\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xea\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x00\x00\x00\x00\x00\x00\x00\tf\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4g\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4I\xc0\xc7S\xc3\xaf\x10\nWMM\xa8\xc4\v\x9f\x18o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf1%\x1dX\x1dN\xe9G\x7f\x0f\xf9\x17\xd9i\x84\xd3E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rm\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc\x00\x00\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xe1\xf2V\xe0\xf9\xcd\x80*8\xff-\xcf\xdc4\x10\x93\x97]\xcf\xb3\xb6\xcf\xf5\xe4\xd4ix') 686.247873ms ago: executing program 0 (id=3498): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) setrlimit(0xa, &(0x7f0000000140)={0x2, 0x3ff}) 647.680416ms ago: executing program 3 (id=3499): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001840000008000000000000000000000095000000000000009500"/72], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x100003c}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) socket(0xa, 0x3, 0x3a) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 595.890181ms ago: executing program 9 (id=3500): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x40}, &(0x7f0000000100)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000180001002cbd7000ffdbdf250a00000048fe0000e00000020c00088008000c00", @ANYRES32=r5, @ANYBLOB="698e9be9003e41280dbceaec56"], 0x28}}, 0x4040050) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) r6 = gettid() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="606bc72dffe6ed000000000000000000000000000000000000a9b30e6600002a0b88ffe6ed454b2f9a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r10, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0xa, 0x5, 0x1ff, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x0, 0x10, 0xffff4043, 0xd}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffff8, r9}, 0x38) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r15}, 0x10) r16 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r16, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) close(r16) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) setrlimit(0xa, &(0x7f0000000140)={0x2, 0x3ff}) 589.925362ms ago: executing program 0 (id=3501): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xcf, &(0x7f0000000340)=""/207}, 0x94) 527.350908ms ago: executing program 3 (id=3502): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 521.159579ms ago: executing program 0 (id=3503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) dup(0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r5, 0x4e, 0x0) 476.039243ms ago: executing program 9 (id=3504): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x2, 0x0, 0x0, 0x0, 0xd, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==0!|!') 429.719908ms ago: executing program 9 (id=3505): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2080000000000000080221daeccfda5eb75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee", 0x24}, 0x48, r0) keyctl$search(0xa, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 395.041951ms ago: executing program 9 (id=3506): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x300) 337.207187ms ago: executing program 7 (id=3507): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) (fail_nth: 2) 306.66077ms ago: executing program 3 (id=3508): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 7 (id=3509): signalfd4(0xffffffffffffffff, &(0x7f0000002ac0)={[0xfff]}, 0x8, 0x80000) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x80) kernel console output (not intermixed with test programs): ="syz.9.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 187.646517][ T29] audit: type=1326 audit(2000000028.040:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.9.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 187.727281][ T29] audit: type=1326 audit(2000000028.200:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.9.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 187.752172][ T29] audit: type=1326 audit(2000000028.200:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.9.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 187.796779][ T29] audit: type=1326 audit(2000000028.260:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.9.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 187.820803][ T29] audit: type=1326 audit(2000000028.260:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.9.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 187.845219][ T29] audit: type=1326 audit(2000000028.280:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.9.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 187.869434][ T29] audit: type=1326 audit(2000000028.280:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.9.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 187.894351][T10603] FAULT_INJECTION: forcing a failure. [ 187.894351][T10603] name failslab, interval 1, probability 0, space 0, times 0 [ 187.907326][T10603] CPU: 0 UID: 0 PID: 10603 Comm: syz.9.2434 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.907356][T10603] Tainted: [W]=WARN [ 187.907415][T10603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.907426][T10603] Call Trace: [ 187.907432][T10603] [ 187.907439][T10603] __dump_stack+0x1d/0x30 [ 187.907459][T10603] dump_stack_lvl+0xe8/0x140 [ 187.907476][T10603] dump_stack+0x15/0x1b [ 187.907490][T10603] should_fail_ex+0x265/0x280 [ 187.907596][T10603] should_failslab+0x8c/0xb0 [ 187.907669][T10603] kmem_cache_alloc_noprof+0x50/0x480 [ 187.907692][T10603] ? alloc_empty_file+0x76/0x200 [ 187.907742][T10603] ? mntput+0x4b/0x80 [ 187.907772][T10603] alloc_empty_file+0x76/0x200 [ 187.907879][T10603] path_openat+0x68/0x2170 [ 187.907897][T10603] ? _parse_integer_limit+0x170/0x190 [ 187.907934][T10603] ? kstrtoull+0x111/0x140 [ 187.907963][T10603] ? kstrtouint+0x76/0xc0 [ 187.908001][T10603] do_filp_open+0x109/0x230 [ 187.908029][T10603] do_sys_openat2+0xa6/0x110 [ 187.908182][T10603] __x64_sys_openat+0xf2/0x120 [ 187.908201][T10603] x64_sys_call+0x2eab/0x3000 [ 187.908259][T10603] do_syscall_64+0xd2/0x200 [ 187.908295][T10603] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.908325][T10603] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 187.908347][T10603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.908367][T10603] RIP: 0033:0x7fc38688efc9 [ 187.908424][T10603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.908440][T10603] RSP: 002b:00007fc3852f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 187.908490][T10603] RAX: ffffffffffffffda RBX: 00007fc386ae5fa0 RCX: 00007fc38688efc9 [ 187.908501][T10603] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 187.908535][T10603] RBP: 00007fc3852f7090 R08: 0000000000000000 R09: 0000000000000000 [ 187.908546][T10603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.908556][T10603] R13: 00007fc386ae6038 R14: 00007fc386ae5fa0 R15: 00007ffc7fd88698 [ 187.908574][T10603] [ 188.161002][T10497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.242174][T10497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.302703][T10611] __nla_validate_parse: 6 callbacks suppressed [ 188.302724][T10611] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2438'. [ 188.362889][T10623] loop0: detected capacity change from 0 to 512 [ 188.362888][T10497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.402070][T10627] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2442'. [ 188.427287][T10623] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 188.430621][T10497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.455811][T10629] vlan2: entered allmulticast mode [ 188.462313][T10623] EXT4-fs (loop0): 1 orphan inode deleted [ 188.468179][T10623] EXT4-fs (loop0): 1 truncate cleaned up [ 188.482618][T10633] loop9: detected capacity change from 0 to 256 [ 188.489701][T10633] FAT-fs (loop9): bogus sectors per cluster 223 [ 188.496183][T10633] FAT-fs (loop9): Can't find a valid FAT filesystem [ 188.510753][T10623] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.2441: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 188.530248][T10497] bridge_slave_1: left allmulticast mode [ 188.535966][T10497] bridge_slave_1: left promiscuous mode [ 188.541925][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.544610][T10623] EXT4-fs (loop0): Remounting filesystem read-only [ 188.569218][T10497] bridge_slave_0: left promiscuous mode [ 188.575023][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.596802][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2445'. [ 188.721189][T10497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.734646][T10497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.745289][T10497] bond0 (unregistering): Released all slaves [ 188.754029][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2445'. [ 188.763811][T10633] dummy0: entered allmulticast mode [ 188.848420][T10632] dummy0: left allmulticast mode [ 188.859181][T10609] macsec0 speed is unknown, defaulting to 1000 [ 188.872189][T10497] hsr_slave_0: left promiscuous mode [ 188.884976][T10497] hsr_slave_1: left promiscuous mode [ 188.891040][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.898519][T10497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.906216][T10497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.914300][T10497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.923298][T10497] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 188.930581][T10497] batman_adv: batadv0: Removing interface: veth1_vlan [ 188.934661][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2451'. [ 188.950483][T10497] veth1_macvtap: left promiscuous mode [ 188.956263][T10497] veth0_macvtap: left promiscuous mode [ 188.961909][T10497] veth1_vlan: left promiscuous mode [ 188.967503][T10497] veth0_vlan: left promiscuous mode [ 189.064441][T10657] vlan2: entered allmulticast mode [ 189.143304][T10664] netlink: 'syz.9.2453': attribute type 10 has an invalid length. [ 189.151315][T10664] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2453'. [ 189.161593][T10664] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 189.183905][T10609] chnl_net:caif_netlink_parms(): no params data found [ 189.232026][T10674] loop9: detected capacity change from 0 to 1024 [ 189.239639][T10674] EXT4-fs: Ignoring removed orlov option [ 189.264513][T10674] FAULT_INJECTION: forcing a failure. [ 189.264513][T10674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.277925][T10674] CPU: 1 UID: 0 PID: 10674 Comm: syz.9.2457 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.277994][T10674] Tainted: [W]=WARN [ 189.278000][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.278015][T10674] Call Trace: [ 189.278022][T10674] [ 189.278031][T10674] __dump_stack+0x1d/0x30 [ 189.278056][T10674] dump_stack_lvl+0xe8/0x140 [ 189.278101][T10674] dump_stack+0x15/0x1b [ 189.278123][T10674] should_fail_ex+0x265/0x280 [ 189.278237][T10674] should_fail+0xb/0x20 [ 189.278277][T10674] should_fail_usercopy+0x1a/0x20 [ 189.278304][T10674] _copy_from_user+0x1c/0xb0 [ 189.278338][T10674] vmemdup_user+0x5e/0xd0 [ 189.278431][T10674] path_setxattrat+0x1b6/0x310 [ 189.278545][T10674] __x64_sys_setxattr+0x6e/0x90 [ 189.278585][T10674] x64_sys_call+0xad2/0x3000 [ 189.278613][T10674] do_syscall_64+0xd2/0x200 [ 189.278643][T10674] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 189.278727][T10674] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 189.278758][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.278787][T10674] RIP: 0033:0x7fc38688efc9 [ 189.278807][T10674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.278861][T10674] RSP: 002b:00007fc3852f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 189.278900][T10674] RAX: ffffffffffffffda RBX: 00007fc386ae5fa0 RCX: 00007fc38688efc9 [ 189.278916][T10674] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 189.278933][T10674] RBP: 00007fc3852f7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.279016][T10674] R10: 00000000000003c8 R11: 0000000000000246 R12: 0000000000000001 [ 189.279032][T10674] R13: 00007fc386ae6038 R14: 00007fc386ae5fa0 R15: 00007ffc7fd88698 [ 189.279058][T10674] [ 189.280053][T10609] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.471635][T10609] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.479166][T10609] bridge_slave_0: entered allmulticast mode [ 189.485894][T10609] bridge_slave_0: entered promiscuous mode [ 189.493231][T10689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2463'. [ 189.502381][T10689] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2463'. [ 189.511680][T10609] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.518997][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.526679][T10609] bridge_slave_1: entered allmulticast mode [ 189.534018][T10609] bridge_slave_1: entered promiscuous mode [ 189.570674][T10609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.583190][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2460'. [ 189.592521][T10693] netlink: 196 bytes leftover after parsing attributes in process `syz.9.2460'. [ 189.617613][T10609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.673077][T10609] team0: Port device team_slave_0 added [ 189.685945][T10609] team0: Port device team_slave_1 added [ 189.717985][T10703] netlink: 'syz.1.2469': attribute type 21 has an invalid length. [ 189.732745][T10609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.739887][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.765962][T10609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.780639][T10609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.787869][T10609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.814608][T10609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.848396][T10609] hsr_slave_0: entered promiscuous mode [ 189.856538][T10609] hsr_slave_1: entered promiscuous mode [ 189.863887][T10609] debugfs: 'hsr0' already exists in 'hsr' [ 189.869820][T10609] Cannot create hsr debugfs directory [ 190.005268][T10717] loop9: detected capacity change from 0 to 2048 [ 190.019151][T10717] EXT4-fs mount: 19 callbacks suppressed [ 190.019171][T10717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.055828][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.178211][T10729] loop9: detected capacity change from 0 to 512 [ 190.198483][T10729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.217980][T10729] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.248473][T10609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.258045][T10609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.267542][T10609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.278498][T10609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.345274][T10609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.359532][T10609] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.372705][T10497] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.379958][T10497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.419192][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.433553][T10609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.460562][T10609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.498636][T10497] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.506122][T10497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.544363][T10744] vlan2: entered allmulticast mode [ 190.580765][T10749] loop9: detected capacity change from 0 to 512 [ 190.621254][T10749] EXT4-fs (loop9): 1 orphan inode deleted [ 190.637786][T10749] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.651377][T10497] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:53: Failed to release dquot type 1 [ 190.668360][T10762] loop7: detected capacity change from 0 to 2048 [ 190.678818][T10749] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.709864][T10609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.718748][T10762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.762190][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.863402][T10778] loop7: detected capacity change from 0 to 1024 [ 190.872140][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.888082][T10778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.894850][T10609] veth0_vlan: entered promiscuous mode [ 190.911716][T10778] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.916255][T10609] veth1_vlan: entered promiscuous mode [ 190.946328][T10609] veth0_macvtap: entered promiscuous mode [ 190.954996][T10609] veth1_macvtap: entered promiscuous mode [ 190.968256][T10609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.980732][T10609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.995076][T10503] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.029364][T10503] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.073952][T10785] bond1: entered promiscuous mode [ 191.079148][T10785] bond1: entered allmulticast mode [ 191.102403][T10785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.144876][T10785] bond1 (unregistering): Released all slaves [ 191.165743][T10795] loop9: detected capacity change from 0 to 512 [ 191.199369][T10503] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.213584][T10790] vlan2: entered allmulticast mode [ 191.244939][T10503] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.255228][T10784] macsec0 speed is unknown, defaulting to 1000 [ 191.285640][T10795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.311539][T10795] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.345067][T10807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.346693][T10795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.352703][T10807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.371255][T10807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.378931][T10807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.405987][T10811] loop3: detected capacity change from 0 to 512 [ 191.480218][T10811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.523150][T10811] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.714597][T10832] atomic_op ffff88811d3e0928 conn xmit_atomic 0000000000000000 [ 191.857785][T10785] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.2488: inode has both inline data and extents flags [ 192.076368][T10778] syz.7.2488 (10778) used greatest stack depth: 7304 bytes left [ 192.084924][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.375073][T10849] loop0: detected capacity change from 0 to 512 [ 192.382217][T10849] ext4: Unknown parameter 'subj_user' [ 192.513946][T10864] loop9: detected capacity change from 0 to 512 [ 192.520951][T10864] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 192.533156][T10864] EXT4-fs (loop9): 1 orphan inode deleted [ 192.539038][T10864] EXT4-fs (loop9): 1 truncate cleaned up [ 192.547777][T10864] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.560782][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 192.560798][ T29] audit: type=1400 audit(2000000033.040:4991): avc: denied { ioctl } for pid=10854 comm="syz.0.2512" path="socket:[34735]" dev="sockfs" ino=34735 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.607009][T10864] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.2515: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 192.626505][T10864] EXT4-fs (loop9): Remounting filesystem read-only [ 192.640121][T10868] vlan2: entered allmulticast mode [ 192.761114][T10874] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 192.772237][T10874] bond1 (unregistering): Released all slaves [ 193.047242][T10609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.085525][ T29] audit: type=1400 audit(2000000033.550:4992): avc: denied { create } for pid=10881 comm="syz.3.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 193.105964][ T29] audit: type=1400 audit(2000000033.560:4993): avc: denied { getopt } for pid=10881 comm="syz.3.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 193.359481][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.464707][T10898] loop9: detected capacity change from 0 to 2048 [ 193.483383][T10898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.522646][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.550790][ T29] audit: type=1326 audit(2000000034.020:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.9.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 193.574744][ T29] audit: type=1326 audit(2000000034.020:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.9.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 193.616423][T10904] macsec0 speed is unknown, defaulting to 1000 [ 193.661563][T10907] loop9: detected capacity change from 0 to 512 [ 193.668030][ T29] audit: type=1326 audit(2000000034.070:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.9.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 193.691972][ T29] audit: type=1326 audit(2000000034.070:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.9.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 193.717120][ T29] audit: type=1326 audit(2000000034.070:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.9.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 193.722762][T10910] netlink: 'syz.1.2530': attribute type 10 has an invalid length. [ 193.741860][ T29] audit: type=1326 audit(2000000034.070:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.9.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 193.741949][ T29] audit: type=1326 audit(2000000034.070:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.9.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 193.750014][T10910] __nla_validate_parse: 14 callbacks suppressed [ 193.750034][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2530'. [ 193.841544][T10907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.874302][T10907] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.902287][T10907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.966422][T10918] netlink: 'syz.1.2533': attribute type 10 has an invalid length. [ 193.974418][T10918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2533'. [ 194.180892][T10933] loop3: detected capacity change from 0 to 512 [ 194.204873][T10933] ext4: Unknown parameter 'subj_user' [ 194.306478][T10946] : renamed from wg2 (while UP) [ 194.326872][T10949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2546'. [ 194.336066][T10949] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2546'. [ 194.353711][T10951] netlink: 'syz.9.2547': attribute type 10 has an invalid length. [ 194.361748][T10951] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2547'. [ 194.387176][T10951] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 194.606576][T10975] loop3: detected capacity change from 0 to 1024 [ 194.617499][T10975] EXT4-fs: Ignoring removed oldalloc option [ 194.623678][T10975] EXT4-fs: Ignoring removed bh option [ 194.645757][T10979] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2560'. [ 194.655520][T10979] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2560'. [ 194.657758][T10981] loop7: detected capacity change from 0 to 128 [ 194.687998][T10975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.688304][T10981] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.707656][T10975] FAULT_INJECTION: forcing a failure. [ 194.707656][T10975] name failslab, interval 1, probability 0, space 0, times 0 [ 194.725848][T10975] CPU: 1 UID: 0 PID: 10975 Comm: syz.3.2558 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.725894][T10975] Tainted: [W]=WARN [ 194.725930][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.725946][T10975] Call Trace: [ 194.725955][T10975] [ 194.725998][T10975] __dump_stack+0x1d/0x30 [ 194.726026][T10975] dump_stack_lvl+0xe8/0x140 [ 194.726066][T10975] dump_stack+0x15/0x1b [ 194.726088][T10975] should_fail_ex+0x265/0x280 [ 194.726147][T10975] should_failslab+0x8c/0xb0 [ 194.726182][T10975] __kvmalloc_node_noprof+0x12e/0x670 [ 194.726224][T10975] ? vmemdup_user+0x2b/0xd0 [ 194.726309][T10975] ? should_fail_usercopy+0x1a/0x20 [ 194.726339][T10975] vmemdup_user+0x2b/0xd0 [ 194.726396][T10975] path_setxattrat+0x1b6/0x310 [ 194.726441][T10975] __x64_sys_setxattr+0x6e/0x90 [ 194.726473][T10975] x64_sys_call+0xad2/0x3000 [ 194.726550][T10975] do_syscall_64+0xd2/0x200 [ 194.726580][T10975] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.726615][T10975] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 194.726645][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.726728][T10975] RIP: 0033:0x7f0715d4efc9 [ 194.726748][T10975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.726795][T10975] RSP: 002b:00007f07147b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 194.726814][T10975] RAX: ffffffffffffffda RBX: 00007f0715fa5fa0 RCX: 00007f0715d4efc9 [ 194.726827][T10975] RDX: 0000200000000600 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 194.726841][T10975] RBP: 00007f07147b7090 R08: 0000000000000000 R09: 0000000000000000 [ 194.726858][T10975] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 194.726873][T10975] R13: 00007f0715fa6038 R14: 00007f0715fa5fa0 R15: 00007ffc4c7fbe88 [ 194.726898][T10975] [ 194.733710][T10989] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2563'. [ 194.791366][T10981] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.809797][T10991] netlink: 'syz.9.2565': attribute type 10 has an invalid length. [ 194.859916][T10981] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.2561: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 194.864939][T10991] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2565'. [ 194.874533][T10981] EXT4-fs error (device loop7) in do_split:2029: Corrupt filesystem [ 194.883691][T10993] bond0: entered promiscuous mode [ 194.891332][T10609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.899364][T10993] bond0: left promiscuous mode [ 195.026926][T10991] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 195.064522][ T7244] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.082466][T10999] loop9: detected capacity change from 0 to 1024 [ 195.089933][T10999] EXT4-fs: Ignoring removed oldalloc option [ 195.095940][T10999] EXT4-fs: Ignoring removed bh option [ 195.171702][T10999] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.223892][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.261996][T11016] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2574'. [ 195.273305][T11018] FAULT_INJECTION: forcing a failure. [ 195.273305][T11018] name failslab, interval 1, probability 0, space 0, times 0 [ 195.286515][T11018] CPU: 0 UID: 0 PID: 11018 Comm: syz.0.2575 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.286549][T11018] Tainted: [W]=WARN [ 195.286565][T11018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.286582][T11018] Call Trace: [ 195.286591][T11018] [ 195.286599][T11018] __dump_stack+0x1d/0x30 [ 195.286621][T11018] dump_stack_lvl+0xe8/0x140 [ 195.286684][T11018] dump_stack+0x15/0x1b [ 195.286706][T11018] should_fail_ex+0x265/0x280 [ 195.286752][T11018] ? audit_log_d_path+0x8d/0x150 [ 195.286774][T11018] should_failslab+0x8c/0xb0 [ 195.286844][T11018] __kmalloc_cache_noprof+0x4c/0x4a0 [ 195.286886][T11018] audit_log_d_path+0x8d/0x150 [ 195.286915][T11018] audit_log_d_path_exe+0x42/0x70 [ 195.287025][T11018] audit_log_task+0x1e9/0x250 [ 195.287068][T11018] ? kstrtouint+0x76/0xc0 [ 195.287155][T11018] audit_seccomp+0x61/0x100 [ 195.287235][T11018] ? __seccomp_filter+0x82d/0x1250 [ 195.287264][T11018] __seccomp_filter+0x83e/0x1250 [ 195.287327][T11018] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.287368][T11018] ? vfs_write+0x7e8/0x960 [ 195.287455][T11018] ? __rcu_read_unlock+0x4f/0x70 [ 195.287488][T11018] ? __fget_files+0x184/0x1c0 [ 195.287524][T11018] __secure_computing+0x82/0x150 [ 195.287596][T11018] syscall_trace_enter+0xcf/0x1e0 [ 195.287629][T11018] do_syscall_64+0xac/0x200 [ 195.287663][T11018] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 195.287697][T11018] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 195.287725][T11018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.287751][T11018] RIP: 0033:0x7ff0179aefc9 [ 195.287768][T11018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.287792][T11018] RSP: 002b:00007ff016417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 195.287817][T11018] RAX: ffffffffffffffda RBX: 00007ff017c05fa0 RCX: 00007ff0179aefc9 [ 195.287836][T11018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.287852][T11018] RBP: 00007ff016417090 R08: 0000000000000000 R09: 0000000000000002 [ 195.287868][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.287884][T11018] R13: 00007ff017c06038 R14: 00007ff017c05fa0 R15: 00007ffd848b3d58 [ 195.287910][T11018] [ 195.572797][T11026] vlan2: entered allmulticast mode [ 195.596714][T11029] loop7: detected capacity change from 0 to 512 [ 195.607321][T11029] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 195.626214][T11029] EXT4-fs (loop7): 1 orphan inode deleted [ 195.632488][T11029] EXT4-fs (loop7): 1 truncate cleaned up [ 195.639141][T11029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.667724][T11029] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.2576: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 195.691020][T11029] EXT4-fs (loop7): Remounting filesystem read-only [ 195.991972][T11058] loop0: detected capacity change from 0 to 512 [ 195.992142][T11063] vlan2: entered allmulticast mode [ 196.013434][T11058] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2590: bg 0: block 288: padding at end of block bitmap is not set [ 196.034068][T11058] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 196.056790][T11058] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2590: attempt to clear invalid blocks 1024 len 1 [ 196.083393][T11058] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2590: invalid indirect mapped block 1819239214 (level 0) [ 196.102898][T11058] EXT4-fs (loop0): 1 truncate cleaned up [ 196.109433][T11058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.154095][T11079] netlink: 'syz.1.2598': attribute type 10 has an invalid length. [ 196.163221][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.204565][ T10] IPVS: starting estimator thread 0... [ 196.307413][T11085] IPVS: using max 2304 ests per chain, 115200 per kthread [ 196.433435][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.462017][T11082] loop9: detected capacity change from 0 to 512 [ 196.478028][T11105] lo speed is unknown, defaulting to 1000 [ 196.484297][T11105] lo speed is unknown, defaulting to 1000 [ 196.492284][T11105] lo speed is unknown, defaulting to 1000 [ 196.498681][T11082] EXT4-fs (loop9): orphan cleanup on readonly fs [ 196.505362][T11082] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2597: inode has both inline data and extents flags [ 196.506744][T11110] loop0: detected capacity change from 0 to 256 [ 196.519409][T11082] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2597: couldn't read orphan inode 15 (err -117) [ 196.526325][T11105] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 196.540505][T11082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.565636][T11105] lo speed is unknown, defaulting to 1000 [ 196.572258][ T3392] IPVS: starting estimator thread 0... [ 196.572688][T11105] lo speed is unknown, defaulting to 1000 [ 196.584432][T11105] lo speed is unknown, defaulting to 1000 [ 196.591291][T11105] lo speed is unknown, defaulting to 1000 [ 196.607908][T11105] lo speed is unknown, defaulting to 1000 [ 196.619673][T11105] lo speed is unknown, defaulting to 1000 [ 196.626491][T11105] lo speed is unknown, defaulting to 1000 [ 196.672623][T11114] IPVS: using max 2304 ests per chain, 115200 per kthread [ 196.726733][T11122] loop0: detected capacity change from 0 to 512 [ 196.749354][T11122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.762544][T11122] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.802687][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.906682][T11136] loop7: detected capacity change from 0 to 512 [ 196.916622][T11136] EXT4-fs: Ignoring removed bh option [ 196.922547][T11136] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 196.932701][T11136] EXT4-fs (loop7): 1 truncate cleaned up [ 196.939464][T11136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.501867][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.627563][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 197.627583][ T29] audit: type=1326 audit(2000000038.030:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.9.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 197.657896][ T29] audit: type=1326 audit(2000000038.040:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.9.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 197.674807][T11179] atomic_op ffff8881199f4128 conn xmit_atomic 0000000000000000 [ 197.681832][ T29] audit: type=1326 audit(2000000038.040:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.9.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 197.713391][ T29] audit: type=1326 audit(2000000038.040:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.9.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 197.738190][ T29] audit: type=1326 audit(2000000038.050:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.9.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 197.762389][ T29] audit: type=1326 audit(2000000038.050:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.9.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 197.799722][ T29] audit: type=1326 audit(2000000038.100:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 197.823703][ T29] audit: type=1326 audit(2000000038.100:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 197.848636][ T29] audit: type=1326 audit(2000000038.100:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 197.872247][ T29] audit: type=1326 audit(2000000038.100:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 197.915093][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.042128][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.049768][T11193] batadv0: mtu less than device minimum [ 198.056080][T11193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.063116][T11195] netlink: 'syz.7.2641': attribute type 10 has an invalid length. [ 198.067116][T11193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.085404][T11193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.096402][T11193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.107469][T11193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.118641][T11193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.129827][T11193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.146066][T11193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.175597][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.191511][T11193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.199956][T11193] batman_adv: batadv0: Interface deactivated: dummy0 [ 198.207036][T11193] batman_adv: batadv0: Removing interface: dummy0 [ 198.215787][T11193] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 198.223093][T11193] batman_adv: batadv0: Removing interface: veth1_vlan [ 198.483992][T11219] vlan2: entered allmulticast mode [ 198.627709][ T10] IPVS: starting estimator thread 0... [ 198.638212][T11234] loop3: detected capacity change from 0 to 512 [ 198.678200][T11234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.689414][T11239] loop9: detected capacity change from 0 to 256 [ 198.698328][T11234] EXT4-fs (loop3): 1 orphan inode deleted [ 198.704343][T11234] EXT4-fs (loop3): 1 truncate cleaned up [ 198.717370][T11232] IPVS: using max 2064 ests per chain, 103200 per kthread [ 198.731604][T11234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.767040][T11249] atomic_op ffff888119647528 conn xmit_atomic 0000000000000000 [ 198.790031][T11234] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.2658: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 198.816641][T11234] EXT4-fs (loop3): Remounting filesystem read-only [ 198.986467][T11279] netlink: 'syz.0.2673': attribute type 10 has an invalid length. [ 198.994701][T11279] __nla_validate_parse: 11 callbacks suppressed [ 198.994717][T11279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2673'. [ 199.069462][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2680'. [ 199.135114][T11293] macsec0 speed is unknown, defaulting to 1000 [ 199.142472][T11293] lo speed is unknown, defaulting to 1000 [ 199.296890][T11311] netlink: 'syz.7.2688': attribute type 11 has an invalid length. [ 199.305027][T11311] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2688'. [ 199.329418][T11311] macsec0 speed is unknown, defaulting to 1000 [ 199.336608][T11311] lo speed is unknown, defaulting to 1000 [ 199.488437][T10609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.519842][T11318] loop3: detected capacity change from 0 to 512 [ 199.547503][T11318] ext4: Unknown parameter 'subj_user' [ 199.794975][T11331] net_ratelimit: 33 callbacks suppressed [ 199.795075][T11331] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 199.845582][T11334] vlan2: entered allmulticast mode [ 200.005877][T11342] loop3: detected capacity change from 0 to 2048 [ 200.097837][T11342] loop3: p1 < > p4 [ 200.115040][T11342] loop3: p4 size 8388608 extends beyond EOD, truncated [ 200.387471][T11358] atomic_op ffff888105913928 conn xmit_atomic 0000000000000000 [ 200.486947][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2709'. [ 200.546327][T11376] loop9: detected capacity change from 0 to 512 [ 200.556872][T11375] netlink: 'syz.7.2713': attribute type 10 has an invalid length. [ 200.564982][T11375] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2713'. [ 200.595004][T11380] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2714'. [ 200.605638][T11376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.625843][T11376] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.716041][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.768470][T11387] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2717'. [ 200.815609][T11392] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2719'. [ 200.824886][T11392] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2719'. [ 200.889105][T11402] loop0: detected capacity change from 0 to 256 [ 200.906164][T11406] loop7: detected capacity change from 0 to 128 [ 200.917543][T11404] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2727'. [ 200.940949][T11409] loop9: detected capacity change from 0 to 512 [ 200.941223][T11406] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.947896][T11409] ext4: Unknown parameter 'subj_user' [ 201.002862][T11406] ext4 filesystem being mounted at /292/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.040087][T11406] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.2723: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 201.058938][T11406] EXT4-fs error (device loop7) in do_split:2029: Corrupt filesystem [ 201.116143][ T7244] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.281873][T11441] netlink: 'syz.1.2739': attribute type 10 has an invalid length. [ 201.290851][T11441] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 201.438274][T11446] loop3: detected capacity change from 0 to 128 [ 201.448021][T11446] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.460541][T11446] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.496269][T11446] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 63: comm syz.3.2742: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 201.515938][T11446] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem [ 201.540808][T10609] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.576351][T11449] atomic_op ffff888118f6c928 conn xmit_atomic 0000000000000000 [ 201.815058][T11470] vlan2: entered allmulticast mode [ 201.838631][T11471] loop9: detected capacity change from 0 to 512 [ 201.862851][T11471] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.876702][T11471] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.902273][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.940006][T11481] loop3: detected capacity change from 0 to 256 [ 201.999670][T11487] loop3: detected capacity change from 0 to 256 [ 202.006652][T11487] vfat: Bad value for 'tz' [ 202.031084][T11487] loop3: detected capacity change from 0 to 2048 [ 202.069711][T11487] EXT4-fs (loop3): failed to initialize system zone (-117) [ 202.081435][T11487] EXT4-fs (loop3): mount failed [ 202.117411][T11494] loop9: detected capacity change from 0 to 512 [ 202.145798][T11496] loop3: detected capacity change from 0 to 512 [ 202.152679][T11494] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 202.153109][T11496] EXT4-fs: Ignoring removed bh option [ 202.166928][T11496] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 202.176053][T11494] EXT4-fs (loop9): orphan cleanup on readonly fs [ 202.184174][T11496] EXT4-fs (loop3): 1 truncate cleaned up [ 202.192959][T11494] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.2761: corrupted inode contents [ 202.193987][T11496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.227268][T11494] EXT4-fs (loop9): Remounting filesystem read-only [ 202.234060][T11494] EXT4-fs (loop9): 1 truncate cleaned up [ 202.241165][T10484] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.252420][T10484] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.263256][T10484] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 202.274201][T11494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.305909][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.324508][T11508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.332218][T11508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.343892][T11508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.351522][T11508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.361388][T11508] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 202.368506][T11508] batman_adv: batadv0: Removing interface: veth1_vlan [ 202.384468][T11511] loop7: detected capacity change from 0 to 512 [ 202.427810][T11511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.447277][T11511] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.527421][ T7244] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.546694][T11503] loop0: detected capacity change from 0 to 512 [ 202.568081][T11503] EXT4-fs (loop0): orphan cleanup on readonly fs [ 202.576370][T11503] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2763: inode has both inline data and extents flags [ 202.592279][T11503] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2763: couldn't read orphan inode 15 (err -117) [ 202.604948][T11503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 202.878625][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 202.878651][ T29] audit: type=1326 audit(2000000043.350:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 202.913139][ T29] audit: type=1326 audit(2000000043.370:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 202.937937][ T29] audit: type=1326 audit(2000000043.380:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 202.962386][ T29] audit: type=1326 audit(2000000043.380:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 202.986189][ T29] audit: type=1326 audit(2000000043.380:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 203.009964][ T29] audit: type=1326 audit(2000000043.380:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 203.034979][ T29] audit: type=1326 audit(2000000043.380:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 203.059315][ T29] audit: type=1326 audit(2000000043.380:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 203.083207][ T29] audit: type=1326 audit(2000000043.380:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 203.108495][ T29] audit: type=1326 audit(2000000043.380:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7761efc9 code=0x7ffc0000 [ 203.192645][T10609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.468204][T11557] 9pnet_fd: Insufficient options for proto=fd [ 203.549714][T11571] loop3: detected capacity change from 0 to 128 [ 203.551884][T11569] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 203.568197][T11571] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.568635][T11569] team0: Device ipvlan2 is already an upper device of the team interface [ 203.581006][T11571] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.633004][T11571] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 63: comm syz.3.2786: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 203.680496][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.710156][T11571] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem [ 203.761862][T10609] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.820909][T11580] loop9: detected capacity change from 0 to 512 [ 203.837374][T11578] loop0: detected capacity change from 0 to 512 [ 203.851680][T11578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.866208][T11580] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.884229][T11578] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.915422][T11580] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.946219][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.979675][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.030373][T11596] __nla_validate_parse: 9 callbacks suppressed [ 204.030390][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2793'. [ 204.112841][T11598] loop0: detected capacity change from 0 to 512 [ 204.119834][T11598] ext4: Unknown parameter 'subj_user' [ 204.134482][T11596] loop0: detected capacity change from 0 to 128 [ 205.007997][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2808'. [ 205.017423][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2808'. [ 205.152801][T11644] loop3: detected capacity change from 0 to 128 [ 205.186108][T11644] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.208161][T11644] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.259571][T11644] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 63: comm syz.3.2811: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 205.319635][T11644] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem [ 205.366863][T10609] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.686358][T11679] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2821'. [ 205.775401][T11687] atomic_op ffff888118f6d928 conn xmit_atomic 0000000000000000 [ 205.845250][T11693] netlink: 'syz.1.2826': attribute type 10 has an invalid length. [ 205.853618][T11693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2826'. [ 205.864799][T11693] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 205.906667][T11696] : renamed from wg2 (while UP) [ 205.970793][T11704] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2832'. [ 205.980250][T11704] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2832'. [ 206.027519][T11708] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2834'. [ 206.036636][T11708] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2834'. [ 206.064015][T11711] atomic_op ffff888118f6dd28 conn xmit_atomic 0000000000000000 [ 206.164790][T11719] vhci_hcd: invalid port number 96 [ 206.170147][T11719] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 206.239509][T11725] netlink: 'syz.7.2841': attribute type 10 has an invalid length. [ 206.247550][T11725] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2841'. [ 206.257467][T11725] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 206.351328][T11729] loop7: detected capacity change from 0 to 512 [ 206.358381][T11729] ext4: Unknown parameter 'subj_user' [ 206.540000][T11741] loop3: detected capacity change from 0 to 512 [ 206.547624][T11741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.559651][T11741] EXT4-fs (loop3): 1 orphan inode deleted [ 206.565515][T11741] EXT4-fs (loop3): 1 truncate cleaned up [ 206.572056][T11741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.684622][T11756] atomic_op ffff888118f6ed28 conn xmit_atomic 0000000000000000 [ 206.800617][T11763] vlan2: entered allmulticast mode [ 206.864916][T11765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.874458][T11765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.227222][T11788] loop7: detected capacity change from 0 to 2048 [ 207.238599][T11788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.251266][T11788] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.265740][T11792] netlink: 'syz.7.2864': attribute type 1 has an invalid length. [ 207.755317][T11803] atomic_op ffff88811d3e0128 conn xmit_atomic 0000000000000000 [ 207.859734][T11814] siw: device registration error -23 [ 207.909810][T11818] atomic_op ffff888118f6dd28 conn xmit_atomic 0000000000000000 [ 207.942040][T11820] loop7: detected capacity change from 0 to 512 [ 207.952798][T11820] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 207.964907][T11820] EXT4-fs (loop7): 1 orphan inode deleted [ 207.970706][T11820] EXT4-fs (loop7): 1 truncate cleaned up [ 207.977376][T11822] loop9: detected capacity change from 0 to 256 [ 208.036769][T11806] xt_hashlimit: max too large, truncated to 1048576 [ 208.047701][T11806] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.067145][T11806] loop0: detected capacity change from 0 to 512 [ 208.076469][T11806] EXT4-fs (loop0): orphan cleanup on readonly fs [ 208.083801][T11806] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2867: inode has both inline data and extents flags [ 208.098128][T11806] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2867: couldn't read orphan inode 15 (err -117) [ 208.469615][T11841] loop3: detected capacity change from 0 to 512 [ 208.476507][T11841] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.488463][T11841] EXT4-fs (loop3): 1 orphan inode deleted [ 208.494358][T11841] EXT4-fs (loop3): 1 truncate cleaned up [ 208.516423][T11841] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.2882: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 208.536725][T11841] EXT4-fs (loop3): Remounting filesystem read-only [ 208.975553][T11856] FAULT_INJECTION: forcing a failure. [ 208.975553][T11856] name failslab, interval 1, probability 0, space 0, times 0 [ 208.988510][T11856] CPU: 1 UID: 0 PID: 11856 Comm: syz.7.2888 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.988548][T11856] Tainted: [W]=WARN [ 208.988555][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.988568][T11856] Call Trace: [ 208.988575][T11856] [ 208.988583][T11856] __dump_stack+0x1d/0x30 [ 208.988665][T11856] dump_stack_lvl+0xe8/0x140 [ 208.988690][T11856] dump_stack+0x15/0x1b [ 208.988706][T11856] should_fail_ex+0x265/0x280 [ 208.988781][T11856] ? rtnl_newlink+0x5c/0x12d0 [ 208.988805][T11856] should_failslab+0x8c/0xb0 [ 208.988906][T11856] __kmalloc_cache_noprof+0x4c/0x4a0 [ 208.989013][T11856] rtnl_newlink+0x5c/0x12d0 [ 208.989036][T11856] ? css_rstat_updated+0xb7/0x240 [ 208.989082][T11856] ? css_rstat_updated+0xb7/0x240 [ 208.989117][T11856] ? refill_stock+0x32f/0x390 [ 208.989162][T11856] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 208.989207][T11856] ? try_charge_memcg+0x215/0xa10 [ 208.989234][T11856] ? xas_load+0x413/0x430 [ 208.989263][T11856] ? __memcg_slab_free_hook+0x135/0x230 [ 208.989336][T11856] ? __rcu_read_unlock+0x4f/0x70 [ 208.989361][T11856] ? avc_has_perm_noaudit+0x1b1/0x200 [ 208.989444][T11856] ? cred_has_capability+0x210/0x280 [ 208.989477][T11856] ? selinux_capable+0x31/0x40 [ 208.989497][T11856] ? security_capable+0x83/0x90 [ 208.989543][T11856] ? ns_capable+0x7d/0xb0 [ 208.989565][T11856] ? __pfx_rtnl_newlink+0x10/0x10 [ 208.989589][T11856] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 208.989622][T11856] netlink_rcv_skb+0x123/0x220 [ 208.989677][T11856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.989709][T11856] rtnetlink_rcv+0x1c/0x30 [ 208.989732][T11856] netlink_unicast+0x5c0/0x690 [ 208.989793][T11856] netlink_sendmsg+0x58b/0x6b0 [ 208.989829][T11856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.989868][T11856] __sock_sendmsg+0x145/0x180 [ 208.989898][T11856] ____sys_sendmsg+0x31e/0x4e0 [ 208.989975][T11856] ___sys_sendmsg+0x17b/0x1d0 [ 208.990036][T11856] __x64_sys_sendmsg+0xd4/0x160 [ 208.990083][T11856] x64_sys_call+0x191e/0x3000 [ 208.990141][T11856] do_syscall_64+0xd2/0x200 [ 208.990168][T11856] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.990315][T11856] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 208.990347][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.990433][T11856] RIP: 0033:0x7f481872efc9 [ 208.990453][T11856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.990498][T11856] RSP: 002b:00007f4817197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.990523][T11856] RAX: ffffffffffffffda RBX: 00007f4818985fa0 RCX: 00007f481872efc9 [ 208.990540][T11856] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 208.990556][T11856] RBP: 00007f4817197090 R08: 0000000000000000 R09: 0000000000000000 [ 208.990569][T11856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.990621][T11856] R13: 00007f4818986038 R14: 00007f4818985fa0 R15: 00007ffc04180858 [ 208.990643][T11856] [ 209.329238][T11858] atomic_op ffff88811d3e0128 conn xmit_atomic 0000000000000000 [ 209.376641][ T10] IPVS: starting estimator thread 0... [ 209.414647][T11872] __nla_validate_parse: 7 callbacks suppressed [ 209.414668][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2893'. [ 209.459311][ T29] kauditd_printk_skb: 3990 callbacks suppressed [ 209.459328][ T29] audit: type=1326 audit(2000000049.900:9485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.489923][ T29] audit: type=1326 audit(2000000049.900:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.514078][ T29] audit: type=1326 audit(2000000049.900:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.538381][ T29] audit: type=1326 audit(2000000049.900:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.562928][ T29] audit: type=1326 audit(2000000049.900:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.577245][T11865] IPVS: using max 2256 ests per chain, 112800 per kthread [ 209.588291][ T29] audit: type=1326 audit(2000000049.900:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.619618][ T29] audit: type=1326 audit(2000000049.900:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.643257][ T29] audit: type=1326 audit(2000000049.900:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.667157][ T29] audit: type=1326 audit(2000000049.900:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.690905][ T29] audit: type=1326 audit(2000000049.900:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.7.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 209.699451][T11880] vlan2: entered allmulticast mode [ 209.777844][T11884] netlink: 'syz.3.2897': attribute type 10 has an invalid length. [ 209.785894][T11884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2897'. [ 209.790430][T11886] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2898'. [ 209.803999][T11886] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2898'. [ 209.815013][T11884] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 209.912156][T11903] loop3: detected capacity change from 0 to 128 [ 209.922938][T11903] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.962625][T11910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2908'. [ 209.981331][T11903] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 63: comm syz.3.2906: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 209.995124][T11914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2911'. [ 210.000637][T11903] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem [ 210.023916][T11914] siw: device registration error -23 [ 210.038352][T11916] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2912'. [ 210.047409][T11916] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2912'. [ 210.091441][T11918] vhci_hcd: invalid port number 96 [ 210.096813][T11918] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 210.238474][T11932] loop3: detected capacity change from 0 to 128 [ 210.264098][T11932] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.383894][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2921'. [ 210.399285][T11949] atomic_op ffff88811d3e0528 conn xmit_atomic 0000000000000000 [ 210.580644][T11964] loop9: detected capacity change from 0 to 128 [ 210.598990][T11964] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.971006][T11979] netlink: 'syz.1.2938': attribute type 10 has an invalid length. [ 210.978989][T11979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2938'. [ 211.090706][T11979] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 211.190755][T11986] vhci_hcd: invalid port number 96 [ 211.195937][T11986] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 211.285825][T12005] veth1_to_batadv: entered promiscuous mode [ 211.361074][T12013] serio: Serial port ptm0 [ 211.427316][T12013] loop3: detected capacity change from 0 to 1024 [ 211.434127][T12013] EXT4-fs: inline encryption not supported [ 211.440156][T12013] EXT4-fs: Ignoring removed i_version option [ 211.471240][T12013] sd 0:0:1:0: device reset [ 211.528179][T12034] atomic_op ffff888118f6ed28 conn xmit_atomic 0000000000000000 [ 211.563727][T12038] loop9: detected capacity change from 0 to 512 [ 211.574976][T12038] ext4: Unknown parameter 'subj_user' [ 212.189390][T12048] loop0: detected capacity change from 0 to 512 [ 212.206148][T12050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.215049][T12050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.222250][T12048] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.236011][T12048] EXT4-fs (loop0): 1 orphan inode deleted [ 212.241996][T12048] EXT4-fs (loop0): 1 truncate cleaned up [ 212.523352][T12074] atomic_op ffff88811d3e0128 conn xmit_atomic 0000000000000000 [ 212.554488][T12080] loop9: detected capacity change from 0 to 512 [ 212.557979][T12079] vlan2: entered allmulticast mode [ 212.561681][T12080] EXT4-fs: Ignoring removed orlov option [ 212.572897][T12080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.582374][T12080] EXT4-fs (loop9): orphan cleanup on readonly fs [ 212.589931][T12080] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2972: bg 0: block 248: padding at end of block bitmap is not set [ 212.604574][T12080] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.2972: Failed to acquire dquot type 1 [ 212.616833][T12080] EXT4-fs (loop9): 1 truncate cleaned up [ 212.632380][T12080] EXT4-fs: Ignoring removed orlov option [ 212.638399][T12080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.647215][T12080] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 212.667586][T12080] EXT4-fs error (device loop9): __ext4_remount:6748: comm syz.9.2972: Abort forced by user [ 212.678202][T12080] EXT4-fs (loop9): Remounting filesystem read-only [ 212.684931][T12080] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 212.693575][T12080] ext4 filesystem being remounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.071346][T12100] atomic_op ffff888118f6e928 conn xmit_atomic 0000000000000000 [ 213.912441][T12142] atomic_op ffff88811d3e3d28 conn xmit_atomic 0000000000000000 [ 214.212109][T12150] loop7: detected capacity change from 0 to 512 [ 214.279107][T12150] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.650561][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 214.650621][ T29] audit: type=1400 audit(2000000055.120:9670): avc: denied { bind } for pid=12159 comm="syz.9.3000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 215.257365][T12164] vhci_hcd: invalid port number 96 [ 215.262548][T12164] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 215.405979][T12171] atomic_op ffff88811d3e0128 conn xmit_atomic 0000000000000000 [ 215.427170][T12172] atomic_op ffff88811d3e0128 conn xmit_atomic 0000000000000000 [ 215.473997][T12176] __nla_validate_parse: 4 callbacks suppressed [ 215.474081][T12176] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3007'. [ 215.483318][ T29] audit: type=1400 audit(2000000055.950:9671): avc: denied { append } for pid=12177 comm="syz.0.3008" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.489385][T12176] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3007'. [ 215.621877][T12188] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3012'. [ 215.635471][T12190] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3011'. [ 215.660781][T12190] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.686690][T12192] loop0: detected capacity change from 0 to 512 [ 215.698271][T12192] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.720802][T12190] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.857941][T12190] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.871400][T12206] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 215.980800][T12190] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.021599][T12218] atomic_op ffff888118f6e928 conn xmit_atomic 0000000000000000 [ 216.102900][ T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.125761][ T37] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.201302][ T37] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.257707][ T37] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.394124][T12225] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3021'. [ 216.403404][T12225] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3021'. [ 216.433357][ T29] audit: type=1326 audit(2000000056.900:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.7.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 216.476727][ T29] audit: type=1326 audit(2000000056.940:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.7.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 216.500883][ T29] audit: type=1326 audit(2000000056.940:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.7.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 216.524764][ T29] audit: type=1326 audit(2000000056.940:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.7.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 216.548984][ T29] audit: type=1326 audit(2000000056.940:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.7.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 216.573059][ T29] audit: type=1326 audit(2000000056.940:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.7.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 216.596946][ T29] audit: type=1326 audit(2000000056.940:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.7.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 216.620871][ T29] audit: type=1326 audit(2000000056.940:9679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12228 comm="syz.7.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 216.772550][T12249] netlink: 'syz.7.3032': attribute type 10 has an invalid length. [ 216.780598][T12249] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3032'. [ 216.793385][T12249] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 216.812881][T12247] loop9: detected capacity change from 0 to 512 [ 216.868234][T12253] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3034'. [ 216.877746][T12253] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3034'. [ 216.927360][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3036'. [ 217.850154][T12304] loop3: detected capacity change from 0 to 512 [ 217.857344][T12304] ext4: Unknown parameter 'subj_user' [ 217.869532][T12306] atomic_op ffff88811d3e0928 conn xmit_atomic 0000000000000000 [ 217.980131][T12318] loop9: detected capacity change from 0 to 512 [ 217.987158][T12318] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 217.998919][T12318] EXT4-fs (loop9): 1 orphan inode deleted [ 218.005295][T12318] EXT4-fs (loop9): 1 truncate cleaned up [ 218.540591][T12343] atomic_op ffff88811d3e2d28 conn xmit_atomic 0000000000000000 [ 218.671907][T12361] siw: device registration error -23 [ 218.956990][T12398] 0X: renamed from caif0 [ 218.964299][T12398] 0X: entered allmulticast mode [ 218.969914][T12398] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 219.271305][T12421] ip6gre1: entered allmulticast mode [ 219.306973][T12423] macvtap1: entered promiscuous mode [ 219.312380][T12423] macvtap1: entered allmulticast mode [ 219.315014][T12416] xt_hashlimit: max too large, truncated to 1048576 [ 219.328995][T12416] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 219.349328][T12416] loop0: detected capacity change from 0 to 512 [ 219.357597][T12416] EXT4-fs (loop0): orphan cleanup on readonly fs [ 219.364228][T12416] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3095: inode has both inline data and extents flags [ 219.378422][T12416] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3095: couldn't read orphan inode 15 (err -117) [ 219.700911][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 219.700927][ T29] audit: type=1326 audit(2000000060.170:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 219.721551][T12438] netlink: 'syz.7.3108': attribute type 21 has an invalid length. [ 219.731387][ T29] audit: type=1326 audit(2000000060.170:9853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 219.762930][ T29] audit: type=1326 audit(2000000060.170:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 219.763393][T12438] loop7: detected capacity change from 0 to 128 [ 219.787367][ T29] audit: type=1326 audit(2000000060.170:9855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 219.805959][T12432] xt_hashlimit: max too large, truncated to 1048576 [ 219.818364][ T29] audit: type=1326 audit(2000000060.170:9856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 219.830175][T12432] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 219.849098][ T29] audit: type=1326 audit(2000000060.170:9857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 219.883552][ T29] audit: type=1326 audit(2000000060.170:9858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 219.907572][ T29] audit: type=1326 audit(2000000060.170:9859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 219.931401][ T29] audit: type=1326 audit(2000000060.170:9860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 219.955093][ T29] audit: type=1326 audit(2000000060.170:9861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.7.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 220.003896][T12444] FAULT_INJECTION: forcing a failure. [ 220.003896][T12444] name failslab, interval 1, probability 0, space 0, times 0 [ 220.016703][T12444] CPU: 1 UID: 0 PID: 12444 Comm: syz.9.3111 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.016760][T12444] Tainted: [W]=WARN [ 220.016769][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.016808][T12444] Call Trace: [ 220.016815][T12444] [ 220.016825][T12444] __dump_stack+0x1d/0x30 [ 220.016852][T12444] dump_stack_lvl+0xe8/0x140 [ 220.016877][T12444] dump_stack+0x15/0x1b [ 220.016898][T12444] should_fail_ex+0x265/0x280 [ 220.016946][T12444] should_failslab+0x8c/0xb0 [ 220.016984][T12444] kmem_cache_alloc_noprof+0x50/0x480 [ 220.017019][T12444] ? skb_clone+0x151/0x1f0 [ 220.017059][T12444] skb_clone+0x151/0x1f0 [ 220.017119][T12444] __netlink_deliver_tap+0x2c9/0x500 [ 220.017164][T12444] netlink_dump+0x836/0x8a0 [ 220.017206][T12444] netlink_recvmsg+0x420/0x550 [ 220.017246][T12444] ? __pfx_netlink_recvmsg+0x10/0x10 [ 220.017334][T12444] sock_recvmsg+0x139/0x170 [ 220.017364][T12444] ____sys_recvmsg+0xf5/0x280 [ 220.017409][T12444] ___sys_recvmsg+0x11f/0x370 [ 220.017458][T12444] do_recvmmsg+0x1ef/0x540 [ 220.017568][T12444] ? fput+0x8f/0xc0 [ 220.017610][T12444] __x64_sys_recvmmsg+0xe5/0x170 [ 220.017655][T12444] x64_sys_call+0x27aa/0x3000 [ 220.017681][T12444] do_syscall_64+0xd2/0x200 [ 220.017770][T12444] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 220.017801][T12444] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 220.017825][T12444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.017855][T12444] RIP: 0033:0x7fc38688efc9 [ 220.017875][T12444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.017898][T12444] RSP: 002b:00007fc3852f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 220.017922][T12444] RAX: ffffffffffffffda RBX: 00007fc386ae5fa0 RCX: 00007fc38688efc9 [ 220.017938][T12444] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 220.017953][T12444] RBP: 00007fc3852f7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.017968][T12444] R10: 0000000040012120 R11: 0000000000000246 R12: 0000000000000001 [ 220.018007][T12444] R13: 00007fc386ae6038 R14: 00007fc386ae5fa0 R15: 00007ffc7fd88698 [ 220.018031][T12444] [ 220.280786][T12454] FAULT_INJECTION: forcing a failure. [ 220.280786][T12454] name failslab, interval 1, probability 0, space 0, times 0 [ 220.293625][T12454] CPU: 0 UID: 0 PID: 12454 Comm: syz.9.3117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.293743][T12454] Tainted: [W]=WARN [ 220.293752][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.293769][T12454] Call Trace: [ 220.293778][T12454] [ 220.293788][T12454] __dump_stack+0x1d/0x30 [ 220.293816][T12454] dump_stack_lvl+0xe8/0x140 [ 220.293841][T12454] dump_stack+0x15/0x1b [ 220.293888][T12454] should_fail_ex+0x265/0x280 [ 220.293933][T12454] should_failslab+0x8c/0xb0 [ 220.293968][T12454] kmem_cache_alloc_noprof+0x50/0x480 [ 220.294044][T12454] ? alloc_empty_file+0x76/0x200 [ 220.294092][T12454] alloc_empty_file+0x76/0x200 [ 220.294236][T12454] alloc_file_pseudo+0xc6/0x160 [ 220.294276][T12454] __shmem_file_setup+0x1de/0x210 [ 220.294310][T12454] shmem_file_setup+0x3b/0x50 [ 220.294510][T12454] __se_sys_memfd_create+0x2c3/0x590 [ 220.294541][T12454] __x64_sys_memfd_create+0x31/0x40 [ 220.294570][T12454] x64_sys_call+0x2ac2/0x3000 [ 220.294599][T12454] do_syscall_64+0xd2/0x200 [ 220.294628][T12454] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 220.294718][T12454] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 220.294743][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.294772][T12454] RIP: 0033:0x7fc38688efc9 [ 220.294791][T12454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.294814][T12454] RSP: 002b:00007fc3852f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 220.294881][T12454] RAX: ffffffffffffffda RBX: 0000000000000477 RCX: 00007fc38688efc9 [ 220.294897][T12454] RDX: 00007fc3852f6ef0 RSI: 0000000000000000 RDI: 00007fc386912960 [ 220.294921][T12454] RBP: 0000200000000880 R08: 00007fc3852f6bb7 R09: 00007fc3852f6e40 [ 220.294938][T12454] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 220.294953][T12454] R13: 00007fc3852f6ef0 R14: 00007fc3852f6eb0 R15: 0000200000000000 [ 220.295019][T12454] [ 220.553503][T12463] netlink: 'syz.9.3120': attribute type 3 has an invalid length. [ 220.620124][T12469] atomic_op ffff8881107f8128 conn xmit_atomic 0000000000000000 [ 220.660656][T12473] ip6gre1: entered allmulticast mode [ 220.688954][T12475] ip6gre2: entered allmulticast mode [ 220.742161][T12477] __nla_validate_parse: 17 callbacks suppressed [ 220.742192][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3126'. [ 220.760767][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3126'. [ 220.826481][ T3312] EXT4-fs unmount: 25 callbacks suppressed [ 220.826499][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.878370][T12485] netlink: 87 bytes leftover after parsing attributes in process `gtp'. [ 220.964167][T12499] vlan2: entered allmulticast mode [ 220.979040][T12502] ip6gre3: entered allmulticast mode [ 221.027022][T12494] sch_tbf: peakrate 9 is lower than or equals to rate 6829859379779001161 ! [ 221.040616][T12494] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3132'. [ 221.176629][T12525] atomic_op ffff88811d3e0928 conn xmit_atomic 0000000000000000 [ 221.259096][T12538] netlink: 'syz.3.3146': attribute type 10 has an invalid length. [ 221.267119][T12538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3146'. [ 221.277211][T12538] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 221.358706][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 221.370256][T12517] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 221.390332][T12551] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3151'. [ 221.399520][T12551] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3151'. [ 221.479581][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3155'. [ 221.490088][T12562] netem: invalid attributes len -24 [ 221.495396][T12562] netem: change failed [ 221.640071][T12567] vhci_hcd: invalid port number 96 [ 221.640926][T12569] vlan2: entered allmulticast mode [ 221.645246][T12567] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 221.785547][T12575] 9pnet_fd: Insufficient options for proto=fd [ 222.396196][T12591] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 222.427666][T12593] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3166'. [ 222.657784][T12604] atomic_op ffff888114b50928 conn xmit_atomic 0000000000000000 [ 222.723196][T12606] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3172'. [ 222.775968][T12610] siw: device registration error -23 [ 223.136115][T12614] xt_hashlimit: max too large, truncated to 1048576 [ 223.164420][T12614] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 223.189420][T12614] loop0: detected capacity change from 0 to 512 [ 223.247467][T12637] atomic_op ffff8881011df528 conn xmit_atomic 0000000000000000 [ 223.280589][T12614] EXT4-fs (loop0): orphan cleanup on readonly fs [ 223.287830][T12614] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3175: inode has both inline data and extents flags [ 223.302232][T12614] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3175: couldn't read orphan inode 15 (err -117) [ 223.315096][T12614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 223.418487][T12652] tipc: Enabled bearer , priority 0 [ 223.435219][T12652] tipc: Disabling bearer [ 223.462638][T12648] netlink: 'syz.3.3189': attribute type 1 has an invalid length. [ 223.760516][T12677] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 223.772487][T12677] loop3: detected capacity change from 0 to 512 [ 223.780047][T12677] EXT4-fs: Ignoring removed oldalloc option [ 223.795996][T12677] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.827823][T12677] EXT4-fs (loop3): 1 truncate cleaned up [ 223.834196][T12677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.873572][T10609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.115091][T12705] loop9: detected capacity change from 0 to 512 [ 224.121841][T12705] ext4: Unknown parameter 'subj_user' [ 224.200518][T12718] atomic_op ffff888114b51d28 conn xmit_atomic 0000000000000000 [ 224.222348][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.075464][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 225.075480][ T29] audit: type=1400 audit(2000000065.540:10162): avc: denied { kexec_image_load } for pid=12741 comm="syz.9.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 225.224922][ T29] audit: type=1326 audit(2000000065.690:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.9.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 225.248758][ T29] audit: type=1326 audit(2000000065.690:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.9.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 225.272591][ T29] audit: type=1326 audit(2000000065.690:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.9.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 225.311535][T12752] atomic_op ffff888114b51d28 conn xmit_atomic 0000000000000000 [ 225.339896][ T29] audit: type=1326 audit(2000000065.800:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 225.364299][ T29] audit: type=1326 audit(2000000065.800:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 225.388373][ T29] audit: type=1326 audit(2000000065.800:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 225.412745][ T29] audit: type=1326 audit(2000000065.800:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 225.436707][ T29] audit: type=1326 audit(2000000065.800:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 225.460742][ T29] audit: type=1326 audit(2000000065.800:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.7.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481872efc9 code=0x7ffc0000 [ 225.510340][T12767] netlink: 'syz.9.3240': attribute type 10 has an invalid length. [ 225.521477][T12767] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 225.589688][T12782] atomic_op ffff888114b51d28 conn xmit_atomic 0000000000000000 [ 225.627818][T12787] macsec0 speed is unknown, defaulting to 1000 [ 225.635000][T12787] lo speed is unknown, defaulting to 1000 [ 225.669171][T12792] netlink: 'syz.7.3245': attribute type 1 has an invalid length. [ 225.710544][T12795] siw: device registration error -23 [ 225.726956][T12797] loop9: detected capacity change from 0 to 512 [ 225.734606][T12797] ext4: Unknown parameter 'subj_user' [ 225.940366][T12810] __nla_validate_parse: 15 callbacks suppressed [ 225.940393][T12810] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3257'. [ 226.321062][T12824] macsec0 speed is unknown, defaulting to 1000 [ 226.328192][T12824] lo speed is unknown, defaulting to 1000 [ 226.401123][T12824] chnl_net:caif_netlink_parms(): no params data found [ 226.416130][T12844] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3268'. [ 226.483697][T12824] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.490987][T12824] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.505596][T12824] bridge_slave_0: entered allmulticast mode [ 226.512501][T12824] bridge_slave_0: entered promiscuous mode [ 226.519787][T12824] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.527046][T12824] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.534665][T12824] bridge_slave_1: entered allmulticast mode [ 226.541722][T12824] bridge_slave_1: entered promiscuous mode [ 226.599907][T12824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.615762][T12824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.643370][T12824] team0: Port device team_slave_0 added [ 226.651684][T12824] team0: Port device team_slave_1 added [ 226.675075][T12824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.682396][T12824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.708706][T12824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.723147][T12824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.730383][T12824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.756737][T12824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.800599][T12824] hsr_slave_0: entered promiscuous mode [ 226.808558][T12824] hsr_slave_1: entered promiscuous mode [ 226.814769][T12824] debugfs: 'hsr0' already exists in 'hsr' [ 226.820559][T12824] Cannot create hsr debugfs directory [ 226.827885][T12877] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 226.839090][T12877] loop9: detected capacity change from 0 to 512 [ 226.845791][T12877] EXT4-fs: Ignoring removed oldalloc option [ 226.852436][T12877] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 226.867982][T12877] EXT4-fs (loop9): 1 truncate cleaned up [ 226.874063][T12877] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.910827][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.963584][T12824] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.019915][T12824] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.043768][T12895] loop3: detected capacity change from 0 to 512 [ 227.052418][T12895] EXT4-fs (loop3): failed to initialize system zone (-117) [ 227.060035][T12895] EXT4-fs (loop3): mount failed [ 227.070823][T12824] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.104302][T12898] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3289'. [ 227.113347][T12898] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3289'. [ 227.128906][T12824] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.145952][T12900] atomic_op ffff888114b51d28 conn xmit_atomic 0000000000000000 [ 227.207423][T12824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.216564][T12824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.225919][T12824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.235026][T12824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.253464][T12824] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.260698][T12824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.268290][T12824] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.275385][T12824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.292403][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.301104][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.331140][T12824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.349729][T12824] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.371701][T10497] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.379021][T10497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.390309][T12918] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 227.392799][T10479] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.404737][T10479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.509063][T12930] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3300'. [ 227.518328][T12930] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3300'. [ 227.543789][T12824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.590019][T12934] vhci_hcd: invalid port number 96 [ 227.595176][T12934] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 227.603115][T12944] atomic_op ffff888103114928 conn xmit_atomic 0000000000000000 [ 227.662403][T12824] veth0_vlan: entered promiscuous mode [ 227.673788][T12824] veth1_vlan: entered promiscuous mode [ 227.695430][T12824] veth0_macvtap: entered promiscuous mode [ 227.705485][T12824] veth1_macvtap: entered promiscuous mode [ 227.720969][T12824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.735179][T12824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.758303][T10473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.783668][T10473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.811868][T10473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.846988][T10473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.892146][T12976] atomic_op ffff888105910128 conn xmit_atomic 0000000000000000 [ 227.893121][T12971] tun0: tun_chr_ioctl cmd 1074025681 [ 228.022253][T12992] atomic_op ffff888118929d28 conn xmit_atomic 0000000000000000 [ 228.092132][T13004] atomic_op ffff888105913928 conn xmit_atomic 0000000000000000 [ 228.124160][T13005] macsec0 speed is unknown, defaulting to 1000 [ 228.130981][T13005] lo speed is unknown, defaulting to 1000 [ 228.179960][T13005] macsec0 speed is unknown, defaulting to 1000 [ 228.186792][T13005] lo speed is unknown, defaulting to 1000 [ 229.004953][T13014] macsec0 speed is unknown, defaulting to 1000 [ 229.011894][T13014] lo speed is unknown, defaulting to 1000 [ 229.106841][T13014] macsec0 speed is unknown, defaulting to 1000 [ 229.114060][T13014] lo speed is unknown, defaulting to 1000 [ 230.007864][T13023] netlink: 'syz.7.3336': attribute type 10 has an invalid length. [ 230.015830][T13023] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3336'. [ 230.073902][T13023] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 230.132100][T13031] loop3: detected capacity change from 0 to 512 [ 230.143431][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 230.143481][ T29] audit: type=1326 audit(230.129:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.191447][T13031] ext4: Unknown parameter 'subj_user' [ 230.272848][ T29] audit: type=1326 audit(230.159:10504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.296529][ T29] audit: type=1326 audit(230.169:10505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.321110][ T29] audit: type=1326 audit(230.169:10506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.346271][ T29] audit: type=1326 audit(230.169:10507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.369467][ T29] audit: type=1326 audit(230.169:10508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.393907][ T29] audit: type=1326 audit(230.169:10509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.417393][ T29] audit: type=1326 audit(230.169:10510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.441820][ T29] audit: type=1326 audit(230.169:10511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.465658][ T29] audit: type=1326 audit(230.169:10512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13030 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38688efc9 code=0x7ffc0000 [ 230.652488][T13047] xt_hashlimit: max too large, truncated to 1048576 [ 230.687079][T13047] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 230.725075][T13051] atomic_op ffff88813d6b2528 conn xmit_atomic 0000000000000000 [ 230.762050][T13052] loop0: detected capacity change from 0 to 512 [ 230.787701][T13052] EXT4-fs (loop0): orphan cleanup on readonly fs [ 230.803699][T13052] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3343: inode has both inline data and extents flags [ 230.860546][T13061] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3351'. [ 230.869733][T13061] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3351'. [ 230.883767][T13052] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3343: couldn't read orphan inode 15 (err -117) [ 230.958947][T13052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 231.055190][T13075] loop3: detected capacity change from 0 to 256 [ 231.285881][T13091] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3364'. [ 231.402328][T13100] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 231.414537][T13100] loop9: detected capacity change from 0 to 512 [ 231.421890][T13100] EXT4-fs: Ignoring removed oldalloc option [ 231.429045][T13100] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 231.442764][T13100] EXT4-fs (loop9): 1 truncate cleaned up [ 231.449920][T13100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.481765][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.558229][T13107] vhci_hcd: invalid port number 96 [ 231.563445][T13107] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 231.598984][T12824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.747370][T13117] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3375'. [ 231.842933][T13125] atomic_op ffff888105918528 conn xmit_atomic 0000000000000000 [ 231.961487][T13139] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3386'. [ 231.964194][T13141] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3387'. [ 231.970597][T13139] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3386'. [ 232.087922][T13153] vhci_hcd: invalid port number 96 [ 232.093791][T13153] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 232.117278][ T3420] IPVS: starting estimator thread 0... [ 232.122637][T13153] loop3: detected capacity change from 0 to 256 [ 232.196334][T13168] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3399'. [ 232.205734][T13168] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3399'. [ 232.216178][T13158] IPVS: using max 2208 ests per chain, 110400 per kthread [ 232.323762][T13179] vlan2: entered allmulticast mode [ 232.422017][T13189] atomic_op ffff888105918528 conn xmit_atomic 0000000000000000 [ 232.474639][T13195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3411'. [ 232.483921][T13195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3411'. [ 232.678446][T13210] vlan2: entered allmulticast mode [ 232.696319][T13212] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3419'. [ 232.820834][T13217] netlink: 'syz.1.3421': attribute type 10 has an invalid length. [ 232.858054][T13217] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 233.173302][T13238] FAULT_INJECTION: forcing a failure. [ 233.173302][T13238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.186483][T13238] CPU: 1 UID: 0 PID: 13238 Comm: syz.3.3429 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.186597][T13238] Tainted: [W]=WARN [ 233.186605][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.186621][T13238] Call Trace: [ 233.186698][T13238] [ 233.186705][T13238] __dump_stack+0x1d/0x30 [ 233.186728][T13238] dump_stack_lvl+0xe8/0x140 [ 233.186753][T13238] dump_stack+0x15/0x1b [ 233.186771][T13238] should_fail_ex+0x265/0x280 [ 233.186941][T13238] should_fail+0xb/0x20 [ 233.186975][T13238] should_fail_usercopy+0x1a/0x20 [ 233.187027][T13238] _copy_from_user+0x1c/0xb0 [ 233.187061][T13238] kstrtouint_from_user+0x69/0xf0 [ 233.187089][T13238] ? 0xffffffff81000000 [ 233.187164][T13238] ? selinux_file_permission+0x1e4/0x320 [ 233.187198][T13238] proc_fail_nth_write+0x50/0x160 [ 233.187232][T13238] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 233.187263][T13238] vfs_write+0x269/0x960 [ 233.187370][T13238] ? vfs_read+0x4e6/0x770 [ 233.187392][T13238] ? __rcu_read_unlock+0x4f/0x70 [ 233.187420][T13238] ? __fget_files+0x184/0x1c0 [ 233.187451][T13238] ksys_write+0xda/0x1a0 [ 233.187499][T13238] __x64_sys_write+0x40/0x50 [ 233.187525][T13238] x64_sys_call+0x2802/0x3000 [ 233.187548][T13238] do_syscall_64+0xd2/0x200 [ 233.187580][T13238] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.187611][T13238] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 233.187635][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.187659][T13238] RIP: 0033:0x7f0715d4da7f [ 233.187674][T13238] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 233.187729][T13238] RSP: 002b:00007f07147b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 233.187750][T13238] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0715d4da7f [ 233.187826][T13238] RDX: 0000000000000001 RSI: 00007f07147b70a0 RDI: 0000000000000003 [ 233.187867][T13238] RBP: 00007f07147b7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.187880][T13238] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 233.187893][T13238] R13: 00007f0715fa6038 R14: 00007f0715fa5fa0 R15: 00007ffc4c7fbe88 [ 233.187932][T13238] [ 233.454835][T13239] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 233.473403][T13239] loop9: detected capacity change from 0 to 512 [ 233.484771][T13243] loop3: detected capacity change from 0 to 512 [ 233.497477][T13239] EXT4-fs: Ignoring removed oldalloc option [ 233.505404][T13239] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 233.557978][T13243] ext4: Unknown parameter 'subj_user' [ 233.568385][T13239] EXT4-fs (loop9): 1 truncate cleaned up [ 233.574586][T13239] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.620813][T13247] loop3: detected capacity change from 0 to 512 [ 233.641886][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.659786][T13247] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3432: inode has both inline data and extents flags [ 233.674757][T13247] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3432: couldn't read orphan inode 15 (err -117) [ 233.691345][T13247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.806944][T13257] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 233.838344][T10609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.886001][T13265] netlink: 'syz.3.3439': attribute type 21 has an invalid length. [ 233.941063][T13271] FAULT_INJECTION: forcing a failure. [ 233.941063][T13271] name failslab, interval 1, probability 0, space 0, times 0 [ 233.954198][T13271] CPU: 0 UID: 0 PID: 13271 Comm: syz.3.3440 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.954315][T13271] Tainted: [W]=WARN [ 233.954322][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.954361][T13271] Call Trace: [ 233.954367][T13271] [ 233.954376][T13271] __dump_stack+0x1d/0x30 [ 233.954446][T13271] dump_stack_lvl+0xe8/0x140 [ 233.954475][T13271] dump_stack+0x15/0x1b [ 233.954500][T13271] should_fail_ex+0x265/0x280 [ 233.954610][T13271] should_failslab+0x8c/0xb0 [ 233.954643][T13271] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 233.954685][T13271] ? preload_this_cpu_lock+0x5b/0xd0 [ 233.954717][T13271] preload_this_cpu_lock+0x5b/0xd0 [ 233.954789][T13271] alloc_vmap_area+0x31e/0xe80 [ 233.954839][T13271] ? xa_load+0xb1/0xe0 [ 233.954960][T13271] ? __kmalloc_cache_node_noprof+0x41b/0x4a0 [ 233.954999][T13271] __get_vm_area_node+0x173/0x1d0 [ 233.955034][T13271] __vmalloc_node_range_noprof+0x28c/0xed0 [ 233.955141][T13271] ? copy_process+0x399/0x2000 [ 233.955195][T13271] ? obj_cgroup_charge_account+0xba/0x1a0 [ 233.955260][T13271] __vmalloc_node_noprof+0x89/0xc0 [ 233.955366][T13271] ? copy_process+0x399/0x2000 [ 233.955408][T13271] ? copy_process+0x399/0x2000 [ 233.955439][T13271] dup_task_struct+0x433/0x6b0 [ 233.955475][T13271] ? path_openat+0x1bf8/0x2170 [ 233.955541][T13271] copy_process+0x399/0x2000 [ 233.955629][T13271] ? copy_clone_args_from_user+0x3ce/0x490 [ 233.955712][T13271] kernel_clone+0x16c/0x5c0 [ 233.955748][T13271] __se_sys_clone3+0x1c2/0x200 [ 233.955813][T13271] __x64_sys_clone3+0x31/0x40 [ 233.955988][T13271] x64_sys_call+0x1fc9/0x3000 [ 233.956076][T13271] do_syscall_64+0xd2/0x200 [ 233.956104][T13271] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.956149][T13271] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 233.956184][T13271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.956217][T13271] RIP: 0033:0x7f0715d4efc9 [ 233.956240][T13271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.956271][T13271] RSP: 002b:00007f07147b6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 233.956298][T13271] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0715d4efc9 [ 233.956312][T13271] RDX: 00007f07147b6f20 RSI: 0000000000000058 RDI: 00007f07147b6f20 [ 233.956325][T13271] RBP: 00007f07147b7090 R08: 0000000000000000 R09: 0000000000000058 [ 233.956342][T13271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.956378][T13271] R13: 00007f0715fa6038 R14: 00007f0715fa5fa0 R15: 00007ffc4c7fbe88 [ 233.956407][T13271] [ 234.400195][T13290] ip6gre4: entered allmulticast mode [ 235.386955][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 235.386975][ T29] audit: type=1326 audit(235.369:10876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.436530][ T29] audit: type=1326 audit(235.379:10877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.460106][ T29] audit: type=1326 audit(235.379:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.483327][ T29] audit: type=1326 audit(235.379:10879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.507544][ T29] audit: type=1326 audit(235.379:10880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.531247][ T29] audit: type=1326 audit(235.379:10881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.555107][ T29] audit: type=1326 audit(235.379:10882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.579220][ T29] audit: type=1326 audit(235.379:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.603158][ T29] audit: type=1326 audit(235.379:10884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13310 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.630575][ T29] audit: type=1326 audit(235.549:10885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm=77DEA305A391 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabfebefc9 code=0x7ffc0000 [ 235.728667][T13329] atomic_op ffff888118929528 conn xmit_atomic 0000000000000000 [ 235.819501][T13336] vhci_hcd: invalid port number 96 [ 235.824827][T13336] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 235.881975][T13343] vhci_hcd: invalid port number 96 [ 235.887320][T13343] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 235.985080][T13357] vlan2: entered allmulticast mode [ 236.058326][T13364] netlink: 'syz.1.3479': attribute type 10 has an invalid length. [ 236.080775][T13364] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 236.129434][T13370] xt_TPROXY: Can be used only with -p tcp or -p udp [ 236.139625][T13368] vhci_hcd: invalid port number 96 [ 236.145134][T13368] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 236.156523][T13375] FAULT_INJECTION: forcing a failure. [ 236.156523][T13375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.170006][T13375] CPU: 1 UID: 0 PID: 13375 Comm: syz.0.3484 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.170060][T13375] Tainted: [W]=WARN [ 236.170069][T13375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.170103][T13375] Call Trace: [ 236.170112][T13375] [ 236.170123][T13375] __dump_stack+0x1d/0x30 [ 236.170151][T13375] dump_stack_lvl+0xe8/0x140 [ 236.170249][T13375] dump_stack+0x15/0x1b [ 236.170271][T13375] should_fail_ex+0x265/0x280 [ 236.170318][T13375] should_fail+0xb/0x20 [ 236.170413][T13375] should_fail_usercopy+0x1a/0x20 [ 236.170435][T13375] strncpy_from_user+0x25/0x230 [ 236.170469][T13375] __se_sys_memfd_create+0x1ff/0x590 [ 236.170535][T13375] __x64_sys_memfd_create+0x31/0x40 [ 236.170562][T13375] x64_sys_call+0x2ac2/0x3000 [ 236.170634][T13375] do_syscall_64+0xd2/0x200 [ 236.170668][T13375] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 236.170756][T13375] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 236.170865][T13375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.170910][T13375] RIP: 0033:0x7fbabfebefc9 [ 236.170930][T13375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.170954][T13375] RSP: 002b:00007fbabe91ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 236.171017][T13375] RAX: ffffffffffffffda RBX: 00000000000004eb RCX: 00007fbabfebefc9 [ 236.171034][T13375] RDX: 00007fbabe91eef0 RSI: 0000000000000000 RDI: 00007fbabff42960 [ 236.171051][T13375] RBP: 0000200000000380 R08: 00007fbabe91ebb7 R09: 00007fbabe91ee40 [ 236.171068][T13375] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 236.171084][T13375] R13: 00007fbabe91eef0 R14: 00007fbabe91eeb0 R15: 0000200000001040 [ 236.171110][T13375] [ 236.375051][T13379] __nla_validate_parse: 9 callbacks suppressed [ 236.375073][T13379] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3486'. [ 236.462491][T13392] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3492'. [ 236.471586][T13392] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3492'. [ 236.513956][ T3609] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 236.539735][ T3609] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.607794][T13404] Q6\QY4: renamed from lo (while UP) [ 236.679855][T13411] vlan2: entered allmulticast mode [ 236.739882][T13413] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.768366][T13418] loop3: detected capacity change from 0 to 512 [ 236.777215][T13418] EXT4-fs: Ignoring removed oldalloc option [ 236.784039][T13418] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.815128][T13418] EXT4-fs (loop3): 1 truncate cleaned up [ 236.823733][T13418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.928436][T13428] loop9: detected capacity change from 0 to 512 [ 236.966754][T13430] FAULT_INJECTION: forcing a failure. [ 236.966754][T13430] name failslab, interval 1, probability 0, space 0, times 0 [ 236.980692][T13430] CPU: 1 UID: 0 PID: 13430 Comm: syz.7.3507 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.980802][T13430] Tainted: [W]=WARN [ 236.980809][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.980826][T13430] Call Trace: [ 236.980835][T13430] [ 236.980845][T13430] __dump_stack+0x1d/0x30 [ 236.980874][T13430] dump_stack_lvl+0xe8/0x140 [ 236.980898][T13430] dump_stack+0x15/0x1b [ 236.980920][T13430] should_fail_ex+0x265/0x280 [ 236.980985][T13430] should_failslab+0x8c/0xb0 [ 236.981092][T13430] __kvmalloc_node_noprof+0x12e/0x670 [ 236.981168][T13430] ? xt_alloc_table_info+0x40/0x80 [ 236.981199][T13430] xt_alloc_table_info+0x40/0x80 [ 236.981303][T13430] do_ipt_set_ctl+0x59c/0x820 [ 236.981331][T13430] ? _raw_spin_unlock_bh+0x36/0x40 [ 236.981359][T13430] ? tcp_release_cb+0xf1/0x370 [ 236.981450][T13430] nf_setsockopt+0x199/0x1b0 [ 236.981476][T13430] ip_setsockopt+0x102/0x110 [ 236.981554][T13430] ipv6_setsockopt+0xfb/0x130 [ 236.981579][T13430] tcp_setsockopt+0x98/0xb0 [ 236.981608][T13430] sock_common_setsockopt+0x69/0x80 [ 236.981637][T13430] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 236.981697][T13430] __sys_setsockopt+0x184/0x200 [ 236.981724][T13430] __x64_sys_setsockopt+0x64/0x80 [ 236.981751][T13430] x64_sys_call+0x20ec/0x3000 [ 236.981771][T13430] do_syscall_64+0xd2/0x200 [ 236.981874][T13430] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 236.981961][T13430] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 236.981982][T13430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.982001][T13430] RIP: 0033:0x7f481872efc9 [ 236.982015][T13430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.982059][T13430] RSP: 002b:00007f4817197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 236.982076][T13430] RAX: ffffffffffffffda RBX: 00007f4818985fa0 RCX: 00007f481872efc9 [ 236.982087][T13430] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 236.982097][T13430] RBP: 00007f4817197090 R08: 0000000000000458 R09: 0000000000000000 [ 236.982108][T13430] R10: 0000200000000d40 R11: 0000000000000246 R12: 0000000000000001 [ 236.982192][T13430] R13: 00007f4818986038 R14: 00007f4818985fa0 R15: 00007ffc04180858 [ 236.982218][T13430] [ 236.988903][T10609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.246530][T13428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.260320][T10609] ================================================================== [ 237.261995][T13428] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.3506: corrupted inode contents [ 237.268983][T10609] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 237.269030][T10609] [ 237.269037][T10609] read-write to 0xffff888237d25ee8 of 1 bytes by task 13427 on cpu 1: [ 237.269055][T10609] folio_add_lru+0xa5/0x1f0 [ 237.269093][T10609] folio_add_lru_vma+0x49/0x70 [ 237.308727][T10609] do_wp_page+0x1550/0x2510 [ 237.313344][T10609] handle_mm_fault+0x77d/0x2be0 [ 237.318295][T10609] do_user_addr_fault+0x630/0x1080 [ 237.323421][T10609] exc_page_fault+0x62/0xa0 [ 237.328016][T10609] asm_exc_page_fault+0x26/0x30 [ 237.333145][T10609] [ 237.335587][T10609] read to 0xffff888237d25ee8 of 1 bytes by task 10609 on cpu 0: [ 237.343506][T10609] __lru_add_drain_all+0x17e/0x450 [ 237.348637][T10609] lru_add_drain_all+0x10/0x20 [ 237.353407][T10609] invalidate_bdev+0x47/0x70 [ 237.358127][T10609] ext4_put_super+0x624/0x7d0 [ 237.362904][T10609] generic_shutdown_super+0xe6/0x210 [ 237.368294][T10609] kill_block_super+0x2a/0x70 [ 237.372991][T10609] ext4_kill_sb+0x42/0x80 [ 237.377763][T10609] deactivate_locked_super+0x75/0x1c0 [ 237.383494][T10609] deactivate_super+0x97/0xa0 [ 237.388640][T10609] cleanup_mnt+0x269/0x2e0 [ 237.393262][T10609] __cleanup_mnt+0x19/0x20 [ 237.397982][T10609] task_work_run+0x131/0x1a0 [ 237.402684][T10609] exit_to_user_mode_loop+0xed/0x110 [ 237.408185][T10609] do_syscall_64+0x1d6/0x200 [ 237.413170][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.419168][T10609] [ 237.421513][T10609] value changed: 0x15 -> 0x16 [ 237.426234][T10609] [ 237.428659][T10609] Reported by Kernel Concurrency Sanitizer on: [ 237.434828][T10609] CPU: 0 UID: 0 PID: 10609 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 237.446499][T10609] Tainted: [W]=WARN [ 237.450320][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 237.461289][T10609] ================================================================== [ 237.471698][T13428] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.3506: mark_inode_dirty error [ 237.511349][T13428] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #2: comm syz.9.3506: corrupted inode contents [ 237.526202][T13428] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.3506: mark_inode_dirty error [ 237.552567][T10242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.