last executing test programs: 6m36.904128634s ago: executing program 3 (id=1820): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 6m36.802420102s ago: executing program 0 (id=1824): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x48400) 6m36.801951642s ago: executing program 3 (id=1825): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) close(r0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 6m36.709453139s ago: executing program 0 (id=1828): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xff) 6m36.652079454s ago: executing program 0 (id=1831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) write(r3, 0x0, 0x0) 6m36.57782637s ago: executing program 0 (id=1832): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 6m36.535272374s ago: executing program 0 (id=1834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 6m36.313029962s ago: executing program 0 (id=1836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x10008844) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m36.291099523s ago: executing program 32 (id=1836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x10008844) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m36.280369284s ago: executing program 3 (id=1838): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/144, 0x90}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6m35.241693457s ago: executing program 3 (id=1844): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 6m35.200643031s ago: executing program 3 (id=1846): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 6m34.202911471s ago: executing program 3 (id=1851): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) 6m34.170507454s ago: executing program 33 (id=1851): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) 5m23.048846931s ago: executing program 6 (id=2581): close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) 5m22.897866843s ago: executing program 6 (id=2583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa4"], 0x30}}, 0x0) 5m22.828400969s ago: executing program 6 (id=2584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x96fa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='cpuhp_multi_enter\x00', r1, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3, 0x0, 0x11000000}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r5}, 0x10) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r4, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x9, &(0x7f0000000440)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x64, &(0x7f0000000500)=""/100, 0x41100, 0x18, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000000640)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xa, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r0, r0, r4, r4], &(0x7f00000007c0)=[{0x0, 0x4, 0xf}, {0x0, 0x5, 0x8, 0xc}, {0x0, 0x1, 0x0, 0x8}, {0x4, 0x5, 0xc, 0xa}, {0x1, 0x5, 0x5, 0x2}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 5m21.517412204s ago: executing program 6 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 5m21.474825318s ago: executing program 6 (id=2592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000940)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sched_getaffinity(r1, 0x8, &(0x7f0000000b80)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x14, 0x42, 0x1, 0x70bd2a, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) socket(0x10, 0x80803, 0x0) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") socket(0x10, 0x3, 0x0) 5m21.140282524s ago: executing program 6 (id=2595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 5m21.140024084s ago: executing program 34 (id=2595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 1m28.810401071s ago: executing program 7 (id=3814): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m27.834989619s ago: executing program 7 (id=3824): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m27.439669791s ago: executing program 7 (id=3826): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) syz_open_procfs(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 1m21.703824762s ago: executing program 7 (id=3857): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x16, 0x0) 1m21.646598337s ago: executing program 7 (id=3858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028000000", @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) syz_clone(0x60100100, &(0x7f0000000440), 0x0, &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000480)) 1m21.324262193s ago: executing program 7 (id=3864): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.313365304s ago: executing program 35 (id=3864): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.000416476s ago: executing program 8 (id=4705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "18069c01"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 10.968546389s ago: executing program 8 (id=4708): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = open(0x0, 0x10000, 0x0) getdents(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000140), 0xff, 0x540, &(0x7f0000000b80)="$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") 10.795425203s ago: executing program 8 (id=4709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="c000000019000100"], 0xc0}}, 0x4000) 10.642111535s ago: executing program 8 (id=4710): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x5}) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x2, r2, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaa3faaaaaaaaaaaaaa86dd604dd31800340600fc000000000000000000000000000001fe8000000000000000000000000000aafffe40016e53210150d9e7dfcc7b0339205e77e27583a851312db5a15c907ab37cc1ded49e1830e7c03d48b7f67aa35ea0fafc4b50f0921c39b5fec1cbaa36743ebb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d040000090780000fe11e6673fcf0b051e0000000000000000040c8b1bcc716b69e47b1b0b000000"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000100)={0x10000000}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000705000100070000000900020073797a310000000014000780080013000000000008001240000000000500050002000000050004000100000010000300686173683a69702c6d616300"/92], 0x5c}}, 0x20004000) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="374ea6e9e85d", 0x6, 0x95, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) mkdir(&(0x7f0000000180)='./file1\x00', 0x3) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x5}) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$setregs(0x2, r2, 0xfffffffffffffffe, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaa3faaaaaaaaaaaaaa86dd604dd31800340600fc000000000000000000000000000001fe8000000000000000000000000000aafffe40016e53210150d9e7dfcc7b0339205e77e27583a851312db5a15c907ab37cc1ded49e1830e7c03d48b7f67aa35ea0fafc4b50f0921c39b5fec1cbaa36743ebb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d040000090780000fe11e6673fcf0b051e0000000000000000040c8b1bcc716b69e47b1b0b000000"], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) epoll_create(0x6) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000100)={0x10000000}) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000705000100070000000900020073797a310000000014000780080013000000000008001240000000000500050002000000050004000100000010000300686173683a69702c6d616300"/92], 0x5c}}, 0x20004000) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="374ea6e9e85d", 0x6, 0x95, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') (async) getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) (async) mkdir(&(0x7f0000000180)='./file1\x00', 0x3) (async) 10.252052486s ago: executing program 8 (id=4714): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x200980) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xfc}}, 0x0) 10.049449892s ago: executing program 8 (id=4716): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.015312995s ago: executing program 36 (id=4716): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.686173985s ago: executing program 5 (id=4806): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a1}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x40) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) poll(&(0x7f0000000040), 0x55, 0x0) 1.654555587s ago: executing program 5 (id=4808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000000007020000000000b70400000000000085000000030000009500"/70], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) 1.336045083s ago: executing program 1 (id=4815): getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$netlink(0x10, 0x3, 0xa) syz_open_dev$usbfs(&(0x7f0000000180), 0x1, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x64a42, 0x389b0d52417bb348) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[], 0x118) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, 0x0) 1.285615817s ago: executing program 4 (id=4816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 1.265884009s ago: executing program 2 (id=4817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000140), 0xff, 0x540, &(0x7f0000000b80)="$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") 1.217438053s ago: executing program 5 (id=4819): clock_adjtime(0x0, &(0x7f0000000040)={0xf4f, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100, 0x0, 0x1000000000, 0x104}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_getevents(0x0, 0x100000001, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24d2f21ec0816b8eab1f3fe722000040", @ANYRES16, @ANYBLOB="210027bd7000fbdbdf250400000008000700e00000010800020003000000"], 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r4, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r5, 0xe701ac47a3d23ecd, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xffffffffffffff68, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd7000ffdbdf250500000014000600ff01000000000000000000000000000108000400ffffffff08000400ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_destroy(0x0) 1.203902154s ago: executing program 4 (id=4820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 1.150524938s ago: executing program 1 (id=4821): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x101, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 1.100149792s ago: executing program 5 (id=4822): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = open(0x0, 0x10000, 0x0) getdents(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x23, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x8}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setpriority(0x3, 0x0, 0xfffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.097967642s ago: executing program 4 (id=4823): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) 1.062732785s ago: executing program 2 (id=4824): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @ldst={0x2, 0x1, 0x6, 0x5, 0xb, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffef}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffe00}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0xfffffffe, 0xee, &(0x7f0000000c00)=""/238, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x4, 0x0, 0x4, 0x5}, 0x10, 0x1ea04, 0xffffffffffffffff, 0x0, &(0x7f0000001080)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x10300, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r0], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x202}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) 1.012834419s ago: executing program 4 (id=4825): syz_emit_ethernet(0xd2, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xffffffff, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x3e, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x11, "ffd11634eea26b0faffa0dea2e9035"}, {0x0, 0x4, "ccf0"}]}, @timestamp_addr={0x44, 0x3c, 0xe9, 0x1, 0x5, [{@loopback, 0x80000001}, {@empty, 0x1}, {@private=0xa010100, 0x200}, {@empty, 0x2}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x39}]}]}}, "a804003d"}}}}}, 0x0) 1.012361349s ago: executing program 2 (id=4826): sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x21c, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x208, 0x1, [@m_csum={0xcc, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xa0, 0x5, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f7, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xd, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x15, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x98, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x6d, 0x6, "8850292e248ac4bb2ecd95dd3a5619db7af347b0687f0683db3cd63dedd7f9c3a5bb3167ac124dd18979a62419a29316d507e2a0abf181e4f9d6dc416b94912a7bf866cd425975578de62756ee0750f95d36d65a7455ad211b57c0a58834d2a3f82c1047a48f1819b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xc3}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.012024859s ago: executing program 1 (id=4827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 982.938181ms ago: executing program 4 (id=4828): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x1) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x1008, 0x103) r2 = fsopen(&(0x7f00000000c0)='v7\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000100)='freezer.state\x00', &(0x7f0000000140)="45b768212c2da676f5ff985bc66355267face9169597a0dca083d13887a74c712d836302200368b313ad0d3b8386a43c3bc349259780557b7e466c0d6afc7ccfc606ecedd7", 0x45) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file0\x00'}) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000200)={0xa, 0xb6, 0x1, 0x3}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x1412, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) mount_setattr(r1, &(0x7f0000000340)='./file0\x00', 0x6800, &(0x7f0000000380)={0x80, 0x4, 0x80000, {r3}}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000440)={r5, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) pread64(r1, &(0x7f0000000480)=""/136, 0x88, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x2b0, 0x14, 0x800, 0x70bd2c, 0x25dfdbff, {0x6, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "f28b613d2a76f73e2f818b7d61b31939359eafe43740e15d893d27211a730eaa3394714ed2ad8014"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "8b0a2ec60e58984112de9431b29740c174effd96138746dbcf9de04294fc48e24285e2a10bd4ff5af3c9ff1789b18ca48e4bf8a2fe922d3c9c5525a4d2cb31a28f8da5ddc73e404f1aa352e35cfabc3b4901adbc31a9952413008897936615cc6d8c2e692619fc508e16b04169cc9058275557240a9eabfe87e1407bd27cfeb096f61c66290da7993bc55c2b3df789"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "3fdd762e"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "51df9e88640deca5e81502d307fbf223068e685d6e017231fc3571eff73bfc642b6596e2d0cffd9e811839d119c2e24900fe74252fec5c681c0a4bff4c58f49a3bb841c9cf2ce50e62fe9e8aa0ae0ee064d41ca1e9b25cf173c46701c578eb6b3f0a8e00ae13b7badf187c9019e25f860867c4c86f03a3062b78975198a67a65f8d336e0baf71e8e2feabba7f5e39af5b3e91ac9bb1e932f60d71daa490956b997f3353dcd8a3a3dd14b789a9a37"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "da1b9be6f585a7be819c095c17a22cacc2cf7e57504c6933048f8b7643849d9f5cdff19aee398472be37b3ae5664b7014b8b42acb77c0a26ffcfb3fbc6cb2bc2e304e1e8fa6d6190174574c7f332c288e19737577753e0c1ff544630dd9d795cee4f098414e9a0f3a43007f5e519408ed1b6965afe77f494ff06a4a15cda29b880ed5ed539080bef6abeb069ca486e9bb1fcb241b8e5ddbfdb89240a943eb99feb0512d88bbca7f8060f2697e2"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "53b301429d707f0022871268bd8004f1fd40b2ecfabcfac131cd871fbc253fc4e7eed59d709849ca9d0e21c5c141f82295856d193c3372444e0eec1fb879a056d410bd615bd26a24cac74227c9ae1b5ce8bde59495f433519811c9c101bc33b3ddf8d319d87018dc"}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x85}, 0x80) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pipe2$watch_queue(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {}, {0x0, @struct}}) r7 = syz_io_uring_complete(0x0) write$tun(r7, &(0x7f0000000f40)={@val={0x0, 0x8808}, @void, @llc={@snap={0xab, 0xab, "a0f1", 'ESe', 0x880, "6de42c881df4388c7ea27316798405bd9e43c23041ad4ea881a7e1f23ad5eac88de306564feb95ed2607849324f8baeb4153a8232a8e086ad592c99877bf27d3bdd563d45542d6dc66d53c013a76ae7854b95affd59130045f3adf559025b27eeb7ed59e07e65abadfd84644e195228f62f68b56d292235c3e603f24ab6282a552285b4c71de2ae43b1b89cac1a73ce60150c0e9c5014b2325083ab6a95b41e0f66f19523da1a14e39e27da8d5abdf07e0dbad973b0928c173a33993969c5818111f17c5d53cbcf0dc1c1910ec05b63f1b78cb206215d994"}}}, 0xe5) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000001040)={{0x33, @loopback, 0x4e24, 0x1, 'nq\x00', 0x4, 0x5, 0xd}, {@rand_addr=0x64010102, 0x4e21, 0x2, 0x7f, 0x4, 0xfffffff8}}, 0x44) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) recvmsg$unix(r8, &(0x7f00000025c0)={&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000001180)=""/54, 0x36}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/210, 0xd2}, {&(0x7f00000022c0)=""/202, 0xca}, {&(0x7f00000023c0)=""/48, 0x30}, {&(0x7f0000002400)=""/224, 0xe0}], 0x6, &(0x7f0000002580)=[@cred={{0x1c}}], 0x20}, 0x100) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003840)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000002600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x2, 0x0, 0x0, 0x1, 0x5, 0x50, 0x4}, @ldst={0x2, 0x2, 0x7, 0x0, 0x0, 0x0, 0x10}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffffffff}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002700)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000002740)=""/4096, 0x40f00, 0x20, '\x00', r5, 0x1b, r6, 0x8, &(0x7f0000003740)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000003780)={0x5, 0x4, 0x7, 0xfffffc4a}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000037c0)=[r7, r8, r6, r6, r8, r7, r3, r6, r3], &(0x7f0000003800)=[{0x4, 0x2, 0x0, 0x1}], 0x10, 0x8}, 0x94) fcntl$setlease(r9, 0x400, 0x0) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x58, 0x12, 0x20, 0x1, 0x25dfdbff, {0xa, 0x5, 0x4, 0x8, {0x4e20, 0x4e24, [0xe, 0x9, 0x63ab, 0x8], [0x9, 0x3, 0x8, 0x6], r5, [0x6, 0x8]}, 0xffffff43, 0xd89}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "76b073b9c9d24c93"}]}, 0x58}}, 0x801) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003a40)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003e00)={0x6, 0x20, &(0x7f0000003a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x4, 0xa, 0x1, 0xfffffffffffffff4, 0x8}, @ldst={0x2, 0x0, 0x3, 0x2, 0xb, 0xfffffffffffffffd, 0xffffffffffffffff}, @map_fd={0x18, 0x4, 0x1, 0x0, r10}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0xc, 0x7, 0x7, 0x1000, 0x3c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x6}, @generic={0x7f, 0xf, 0x6, 0x25, 0x4}]}, &(0x7f0000003b80)='GPL\x00', 0x2, 0xe5, &(0x7f0000003bc0)=""/229, 0x41100, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000003cc0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000003d00)={0x5, 0x8, 0x10000, 0xb}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000003d40)=[r6], &(0x7f0000003d80)=[{0x2, 0x4, 0x7, 0x3}, {0x4, 0x5, 0x4, 0x9}, {0x1, 0x5, 0xf, 0x1}, {0x1, 0x5, 0x7, 0x5}, {0x1, 0x5, 0x0, 0xc}, {0x1, 0x3, 0xc, 0x8}, {0x1, 0x1, 0xe, 0x8}, {0x5, 0x1, 0x3, 0x2}]}, 0x94) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003ec0), 0x40000, 0x0) ioctl$FITHAW(r11, 0xc0045878) 951.209944ms ago: executing program 2 (id=4829): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000d80)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x40) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) poll(&(0x7f0000000040), 0x55, 0x0) 940.596535ms ago: executing program 1 (id=4830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000000007020000000000b70400000000000085000000030000009500"/70], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) 892.860149ms ago: executing program 4 (id=4831): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x96fa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='cpuhp_multi_enter\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) 817.726045ms ago: executing program 2 (id=4832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 817.068625ms ago: executing program 2 (id=4833): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c000000030600000a360001000700000000000000000000004640f7afd20a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x30000000}, 0x84085) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0100001a0001000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000890001006d6435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802"], 0x17c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 627.77844ms ago: executing program 5 (id=4834): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x20, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xfffffffffffffe2c}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) write$ppp(r0, &(0x7f0000000200)="4176adc3a0", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aad", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="5be3000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59f52fba1e000000d6e36e737491a1c6bd090000005cbaaf648c9100000000000000fc6a8f00000000000000", 0x65}, {&(0x7f0000000340)}, {&(0x7f0000000640)="2a03a0cba4b85fbbdf75673f3ded776f2b0901a584b15df3e3786478a31197705a76751c11d25805e6658f2b1cd202fc4625cd82d206d0e0", 0x38}], 0x3}}], 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r4, &(0x7f0000000d40)=""/43, 0x2b) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x100008, 0x99}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000024c0), 0x80000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) utime(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x7de3eb7dfc461075, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x80, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 435.926496ms ago: executing program 1 (id=4835): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x2, 0x7, 0xfffffff8, 0xd, 0x10, 0x2, 0x8}, &(0x7f0000000100)=0x9c) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc7, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c2354f66e94015f44215aa79ea38c482f4ec92b3552e7b6232db6f8736300d5845dc948128f60e4c1fdb3"}], 0x1}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) 236.177101ms ago: executing program 9 (id=4837): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @ldst={0x2, 0x1, 0x6, 0x5, 0xb, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffef}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffe00}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0xfffffffe, 0xee, &(0x7f0000000c00)=""/238, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x4, 0x0, 0x4, 0x5}, 0x10, 0x1ea04, 0xffffffffffffffff, 0x0, &(0x7f0000001080)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x10300, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r0], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x202}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) 233.694711ms ago: executing program 5 (id=4838): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x200980) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e3100000000"], 0xfc}}, 0x0) 221.708252ms ago: executing program 9 (id=4839): syz_emit_ethernet(0xd2, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xffffffff, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x3e, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x11, "ffd11634eea26b0faffa0dea2e9035"}, {0x0, 0x4, "ccf0"}]}, @timestamp_addr={0x44, 0x3c, 0xe9, 0x1, 0x5, [{@loopback, 0x80000001}, {@empty, 0x1}, {@private=0xa010100, 0x200}, {@empty, 0x2}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x39}]}]}}, "a804003d"}}}}}, 0x0) 194.769615ms ago: executing program 9 (id=4840): sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x21c, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x208, 0x1, [@m_csum={0xcc, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xa0, 0x5, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f7, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xd, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x15, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x98, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x6d, 0x6, "8850292e248ac4bb2ecd95dd3a5619db7af347b0687f0683db3cd63dedd7f9c3a5bb3167ac124dd18979a62419a29316d507e2a0abf181e4f9d6dc416b94912a7bf866cd425975578de62756ee0750f95d36d65a7455ad211b57c0a58834d2a3f82c1047a48f1819b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xc3}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 137.965789ms ago: executing program 9 (id=4841): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 34.857598ms ago: executing program 9 (id=4842): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x40) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) poll(&(0x7f0000000040), 0x55, 0x0) 21.898039ms ago: executing program 1 (id=4843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0x10, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000feffffff00000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0600000000000000000000001e46299b00000000", @ANYRES32, @ANYBLOB="0300000000000000010000000000"], 0x50) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='sched_switch\x00', r6}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xd}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xd0}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000001c00)={{r6}, "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"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x68, 0x0, 0x705, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa70b}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d646a6bacba59b0a9edf62cc888e0e1859e704d59f"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r11 = socket$packet(0x11, 0x2, 0x300) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYRES16=r12, @ANYRESHEX=r13, @ANYRES16=r13, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES16=0x0, @ANYRES8=r5, @ANYRES32=r7], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r14, 0x4) syz_emit_ethernet(0x11, &(0x7f0000000040)=ANY=[], 0x0) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r16 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r16, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020906090500000027bd7000fedbdf2503000700"], 0x28}}, 0x44000) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) fsmount(r15, 0x0, 0x6) 0s ago: executing program 9 (id=4844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 29][ T37] R13: ffff88810a02afa8 R14: ffff8881196da000 R15: 0000000000000000 [ 444.190196][ T37] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 444.199190][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.205925][ T37] CR2: ffffffffdfa50000 CR3: 00000001144ea000 CR4: 00000000003506f0 [ 444.214083][ T37] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 444.222097][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 444.230129][ T37] Call Trace: [ 444.233465][ T37] [ 444.236429][ T37] ops_undo_list+0x27b/0x410 [ 444.241061][ T37] cleanup_net+0x2de/0x4d0 [ 444.245610][ T37] process_scheduled_works+0x4cb/0x9d0 [ 444.251125][ T37] worker_thread+0x582/0x770 [ 444.255810][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 444.261677][ T37] kthread+0x489/0x510 [ 444.265863][ T37] ? finish_task_switch+0xad/0x2b0 [ 444.271010][ T37] ? __pfx_worker_thread+0x10/0x10 [ 444.276242][ T37] ? __pfx_kthread+0x10/0x10 [ 444.280859][ T37] ret_from_fork+0xda/0x150 [ 444.285423][ T37] ? __pfx_kthread+0x10/0x10 [ 444.290100][ T37] ret_from_fork_asm+0x1a/0x30 [ 444.294945][ T37] [ 444.297972][ T37] ---[ end trace 0000000000000000 ]--- [ 444.304315][ T37] ------------[ cut here ]------------ [ 444.309842][ T37] WARNING: CPU: 1 PID: 37 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 444.319813][ T37] Modules linked in: [ 444.323759][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 444.337799][ T37] Tainted: [W]=WARN [ 444.341653][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.351857][ T37] Workqueue: netns cleanup_net [ 444.356761][ T37] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 444.362849][ T37] Code: a1 5d ab fc 49 83 3c 1e 00 75 19 e8 55 8c 90 fc 48 81 fb f8 07 00 00 74 1d e8 47 8c 90 fc 48 83 c3 08 eb d7 e8 3c 8c 90 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 2a 8c 90 fc 5b 41 5e 41 5f [ 444.382521][ T37] RSP: 0018:ffffc90000143c78 EFLAGS: 00010293 [ 444.388666][ T37] RAX: ffffffff84c76d74 RBX: 0000000000000008 RCX: ffff8881002d1080 [ 444.396728][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881196da808 [ 444.404749][ T37] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 444.412847][ T37] R10: ffffc90012433b48 R11: 0001c90012433b48 R12: ffffffff86c93940 [ 444.420878][ T37] R13: ffff88810a02afa8 R14: ffff8881196da800 R15: 00000000000007f8 [ 444.429012][ T37] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 444.437980][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.444605][ T37] CR2: ffffffffdfa50000 CR3: 00000001144ea000 CR4: 00000000003506f0 [ 444.452628][ T37] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 444.460607][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 444.468697][ T37] Call Trace: [ 444.472041][ T37] [ 444.475021][ T37] ops_undo_list+0x27b/0x410 [ 444.479719][ T37] cleanup_net+0x2de/0x4d0 [ 444.484283][ T37] process_scheduled_works+0x4cb/0x9d0 [ 444.489784][ T37] worker_thread+0x582/0x770 [ 444.494428][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 444.500342][ T37] kthread+0x489/0x510 [ 444.504459][ T37] ? finish_task_switch+0xad/0x2b0 [ 444.509601][ T37] ? __pfx_worker_thread+0x10/0x10 [ 444.514858][ T37] ? __pfx_kthread+0x10/0x10 [ 444.519469][ T37] ret_from_fork+0xda/0x150 [ 444.524037][ T37] ? __pfx_kthread+0x10/0x10 [ 444.528656][ T37] ret_from_fork_asm+0x1a/0x30 [ 444.533472][ T37] [ 444.536499][ T37] ---[ end trace 0000000000000000 ]--- [ 444.613063][T15296] tipc: Resetting bearer [ 444.619717][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.626883][T15236] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.654100][T15236] bridge_slave_1: entered allmulticast mode [ 444.693589][T15236] bridge_slave_1: entered promiscuous mode [ 444.752534][T15291] tipc: Resetting bearer [ 444.775295][T15291] tipc: Disabling bearer [ 444.812062][ T37] ------------[ cut here ]------------ [ 444.817678][ T37] WARNING: CPU: 1 PID: 37 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 444.827185][ T37] Modules linked in: [ 444.831107][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 444.845190][ T37] Tainted: [W]=WARN [ 444.849005][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.859107][ T37] Workqueue: netns cleanup_net [ 444.863947][ T37] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 444.869611][ T37] Code: 48 8d bb 30 0e 00 00 e8 05 0a bd fc 48 8b bb 30 0e 00 00 e8 c9 8a c9 fc 5b 41 5e 41 5f 5d e9 0e 8d b3 00 cc e8 58 4c a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 4c a2 fc 90 0f 0b 90 4c 89 f7 e8 ce [ 444.889299][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 444.895490][ T37] RAX: ffffffff84b5ad58 RBX: ffff88810a02af80 RCX: ffff8881002d1080 [ 444.903573][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a02bd80 [ 444.911562][ T37] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 444.919606][ T37] R10: ffffc90000143be8 R11: 0001c90000143be8 R12: ffffffff86c8b7c0 [ 444.927636][ T37] R13: ffff88810a02afa8 R14: ffff88810a02bd80 R15: ffff88810a02af80 [ 444.935659][ T37] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 444.944655][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.951327][ T37] CR2: 0000200000c18000 CR3: 0000000131a2c000 CR4: 00000000003506f0 [ 444.959366][ T37] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 444.967385][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 444.975399][ T37] Call Trace: [ 444.978702][ T37] [ 444.981643][ T37] xfrm_net_exit+0x2d/0x60 [ 444.986143][ T37] ops_undo_list+0x27b/0x410 [ 444.990896][ T37] cleanup_net+0x2de/0x4d0 [ 444.995375][ T37] process_scheduled_works+0x4cb/0x9d0 [ 445.000919][ T37] worker_thread+0x582/0x770 [ 445.005582][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 445.011461][ T37] kthread+0x489/0x510 [ 445.015652][ T37] ? finish_task_switch+0xad/0x2b0 [ 445.020787][ T37] ? __pfx_worker_thread+0x10/0x10 [ 445.025962][ T37] ? __pfx_kthread+0x10/0x10 [ 445.030591][ T37] ret_from_fork+0xda/0x150 [ 445.035154][ T37] ? __pfx_kthread+0x10/0x10 [ 445.039774][ T37] ret_from_fork_asm+0x1a/0x30 [ 445.044613][ T37] [ 445.047657][ T37] ---[ end trace 0000000000000000 ]--- [ 445.055875][T15236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.084015][T15236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.238301][T15236] team0: Port device team_slave_0 added [ 445.259133][T15236] team0: Port device team_slave_1 added [ 445.829677][T15236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.836808][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.862749][T15236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.430431][T15236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.437481][T15236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.463578][T15236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.194503][T15236] hsr_slave_0: entered promiscuous mode [ 448.204853][T15236] hsr_slave_1: entered promiscuous mode [ 448.218591][T15236] debugfs: 'hsr0' already exists in 'hsr' [ 448.224401][T15236] Cannot create hsr debugfs directory [ 448.619954][T15366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15366 comm=syz.4.3908 [ 449.772608][T15377] loop5: detected capacity change from 0 to 512 [ 451.637380][T15377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.650120][T15377] ext4 filesystem being mounted at /432/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 451.704141][T15381] loop2: detected capacity change from 0 to 512 [ 451.750865][ T8100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.801175][T15236] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 451.841656][T15236] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 451.874280][T15236] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 451.909392][T15236] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 451.927415][T15381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.962612][T15381] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 452.039778][T15403] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3916'. [ 452.061178][T15236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.098024][T15236] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.134563][T12893] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.141665][T12893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.156275][T12680] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.173713][T12893] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.180794][T12893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.365404][T15236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.701687][T15236] veth0_vlan: entered promiscuous mode [ 452.715836][T15236] veth1_vlan: entered promiscuous mode [ 452.746581][T15236] veth0_macvtap: entered promiscuous mode [ 452.757506][T15236] veth1_macvtap: entered promiscuous mode [ 452.772003][T15236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.786310][T15236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.798891][ T9500] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.821138][ T9500] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.917067][ T9500] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.939740][ T9500] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.276634][T15463] loop5: detected capacity change from 0 to 512 [ 453.305445][T15463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.331549][T15463] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 453.395949][ T29] audit: type=1400 audit(1755239567.432:5281): avc: denied { append } for pid=15460 comm="syz.5.3932" path="/437/bus/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 453.487363][T15473] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3937'. [ 453.518519][ T8100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.528338][ T29] audit: type=1400 audit(1755239567.532:5282): avc: denied { ioctl } for pid=15460 comm="syz.5.3932" path="/437/bus/cgroup.controllers" dev="loop5" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 453.549178][T15477] tipc: Enabled bearer , priority 0 [ 453.641108][T15487] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3938'. [ 453.651676][T15477] syzkaller0: entered promiscuous mode [ 453.657283][T15477] syzkaller0: entered allmulticast mode [ 453.689742][T15476] tipc: Resetting bearer [ 453.700991][T15476] tipc: Disabling bearer [ 453.733067][T15492] loop2: detected capacity change from 0 to 512 [ 453.815823][T15492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.828533][T15492] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 454.960019][T15517] tipc: Started in network mode [ 454.964990][T15517] tipc: Node identity 5682482c3264, cluster identity 4711 [ 454.972290][T15517] tipc: Enabled bearer , priority 0 [ 455.010739][T15519] syzkaller0: entered promiscuous mode [ 455.016383][T15519] syzkaller0: entered allmulticast mode [ 455.070875][T15517] tipc: Resetting bearer [ 455.104085][T15516] tipc: Resetting bearer [ 455.156417][T15516] tipc: Disabling bearer [ 455.318024][T15534] loop5: detected capacity change from 0 to 512 [ 455.412008][T12680] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.516158][T15534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.589547][T15534] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 456.727898][ T8100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.054891][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3972'. [ 457.063881][T15566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3972'. [ 457.145030][T15574] loop2: detected capacity change from 0 to 512 [ 457.152965][T15574] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 457.164447][T15574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 457.172603][T15574] System zones: 1-12 [ 457.176888][T15574] EXT4-fs (loop2): 1 truncate cleaned up [ 457.183106][T15574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.426391][T15583] netlink: 316 bytes leftover after parsing attributes in process `syz.8.3978'. [ 457.469439][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3980'. [ 457.491874][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3980'. [ 458.028802][T12680] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.529220][T15626] 9pnet_fd: Insufficient options for proto=fd [ 458.581124][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3998'. [ 458.590078][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3998'. [ 458.607121][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3998'. [ 458.616104][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3998'. [ 458.940251][ T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:0) [ 459.112050][T15655] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4007'. [ 459.165602][T15655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.300204][T15814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15814 comm=syz.5.4075 [ 462.379017][T15822] __nla_validate_parse: 3 callbacks suppressed [ 462.379034][T15822] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4079'. [ 462.511301][T15840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15840 comm=syz.1.4088 [ 463.583600][T15870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15870 comm=syz.5.4101 [ 464.635377][T15904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15904 comm=syz.2.4114 [ 465.440272][T15924] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.4124'. [ 465.469157][T15927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15927 comm=syz.1.4125 [ 465.794155][T15956] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.4136'. [ 465.926839][T15961] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4138'. [ 466.668326][T15974] tipc: Enabled bearer , priority 0 [ 466.692519][T15974] syzkaller0: entered promiscuous mode [ 466.698068][T15974] syzkaller0: entered allmulticast mode [ 466.814514][T15974] tipc: Resetting bearer [ 466.842580][T15973] tipc: Resetting bearer [ 466.851301][T15973] tipc: Disabling bearer [ 468.002550][T15992] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4149'. [ 468.120405][T16000] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4151'. [ 468.160413][T16000] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4151'. [ 468.379748][T16012] veth1_macvtap: left promiscuous mode [ 468.456570][T16012] syzkaller0: entered promiscuous mode [ 468.462163][T16012] syzkaller0: entered allmulticast mode [ 469.115693][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4166'. [ 469.513420][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4166'. [ 469.899679][T16054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4171'. [ 470.054521][T16063] syzkaller0: entered promiscuous mode [ 470.060042][T16063] syzkaller0: entered allmulticast mode [ 470.682350][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'. [ 470.691339][T16073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4178'. [ 470.829832][T16086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4183'. [ 470.988011][T16091] veth1_macvtap: left promiscuous mode [ 471.088504][T16091] syzkaller0: entered promiscuous mode [ 471.094178][T16091] syzkaller0: entered allmulticast mode [ 472.042916][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4193'. [ 473.410782][T16155] __nla_validate_parse: 3 callbacks suppressed [ 473.410803][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 473.425959][T16155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4210'. [ 473.694123][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4215'. [ 474.657231][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4230'. [ 474.666315][T16204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4230'. [ 476.871798][T16263] tipc: Enabled bearer , priority 0 [ 476.884564][T16263] syzkaller0: entered promiscuous mode [ 476.890097][T16263] syzkaller0: entered allmulticast mode [ 476.915419][T16263] tipc: Resetting bearer [ 477.432499][T16262] tipc: Resetting bearer [ 477.450650][T16262] tipc: Disabling bearer [ 479.040935][T16306] tipc: Enabled bearer , priority 0 [ 479.069084][T16306] syzkaller0: entered promiscuous mode [ 479.074675][T16306] syzkaller0: entered allmulticast mode [ 479.134251][T16306] tipc: Resetting bearer [ 479.162405][T16305] tipc: Resetting bearer [ 479.177669][T16305] tipc: Disabling bearer [ 481.673430][T16400] tipc: Enabled bearer , priority 0 [ 481.684508][T16400] tipc: Resetting bearer [ 481.692957][T16399] tipc: Disabling bearer [ 481.741715][T16408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=16408 comm=syz.4.4304 [ 482.416952][T16443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4315'. [ 482.517264][T16445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=16445 comm=syz.5.4316 [ 482.610963][T16447] tipc: Enabled bearer , priority 0 [ 482.658144][T16447] tipc: Resetting bearer [ 482.686952][T16446] tipc: Disabling bearer [ 483.503581][T16476] tipc: Enabled bearer , priority 0 [ 483.569124][T16476] tipc: Resetting bearer [ 483.577307][T16475] tipc: Disabling bearer [ 483.793663][T16490] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4336'. [ 483.898514][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4340'. [ 483.907463][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4340'. [ 483.992268][T16502] loop8: detected capacity change from 0 to 512 [ 484.122782][T16502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.135763][T16502] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.483872][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4342'. [ 484.492822][T16510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4342'. [ 484.975918][T16517] syzkaller0: entered promiscuous mode [ 484.981461][T16517] syzkaller0: entered allmulticast mode [ 485.935059][T16532] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4349'. [ 486.060842][T15236] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.147751][T16541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4352'. [ 487.445976][ T29] audit: type=1400 audit(1755239601.472:5283): avc: denied { read } for pid=16557 comm="syz.8.4358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 487.474200][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'. [ 487.553874][T16569] syzkaller0: entered promiscuous mode [ 487.559404][T16569] syzkaller0: entered allmulticast mode [ 487.582021][ T29] audit: type=1326 audit(1755239601.612:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8284ebe9 code=0x7ffc0000 [ 487.605696][ T29] audit: type=1326 audit(1755239601.612:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8284ebe9 code=0x7ffc0000 [ 487.629255][ T29] audit: type=1326 audit(1755239601.612:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f4a8284ebe9 code=0x7ffc0000 [ 487.652889][ T29] audit: type=1326 audit(1755239601.612:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8284ebe9 code=0x7ffc0000 [ 487.676684][T16575] loop5: detected capacity change from 0 to 128 [ 487.691725][T16571] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4364'. [ 487.703555][T16575] vfat: Bad value for 'shortname' [ 487.714796][T16573] loop5: detected capacity change from 0 to 512 [ 487.809612][ T29] audit: type=1326 audit(1755239601.712:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a8284ebe9 code=0x7ffc0000 [ 487.833219][ T29] audit: type=1326 audit(1755239601.712:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8284ebe9 code=0x7ffc0000 [ 487.856811][ T29] audit: type=1326 audit(1755239601.712:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8284ebe9 code=0x7ffc0000 [ 487.890215][T16573] Quota error (device loop5): v2_read_file_info: Free block number 4294967294 out of range (1, 6). [ 487.904426][T16573] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 487.920382][T16573] EXT4-fs (loop5): mount failed [ 488.103117][ T29] audit: type=1326 audit(1755239602.142:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4a8284ebe9 code=0x7ffc0000 [ 488.253642][T16608] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4376'. [ 488.303834][T16610] FAULT_INJECTION: forcing a failure. [ 488.303834][T16610] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 488.317286][T16610] CPU: 1 UID: 0 PID: 16610 Comm: syz.8.4378 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 488.317329][T16610] Tainted: [W]=WARN [ 488.317356][T16610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.317372][T16610] Call Trace: [ 488.317381][T16610] [ 488.317390][T16610] __dump_stack+0x1d/0x30 [ 488.317414][T16610] dump_stack_lvl+0xe8/0x140 [ 488.317472][T16610] dump_stack+0x15/0x1b [ 488.317491][T16610] should_fail_ex+0x265/0x280 [ 488.317517][T16610] should_fail+0xb/0x20 [ 488.317536][T16610] should_fail_usercopy+0x1a/0x20 [ 488.317568][T16610] _copy_from_user+0x1c/0xb0 [ 488.317601][T16610] ___sys_sendmsg+0xc1/0x1d0 [ 488.317643][T16610] __x64_sys_sendmsg+0xd4/0x160 [ 488.317675][T16610] x64_sys_call+0x191e/0x2ff0 [ 488.317744][T16610] do_syscall_64+0xd2/0x200 [ 488.317770][T16610] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 488.317822][T16610] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 488.317853][T16610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.317880][T16610] RIP: 0033:0x7f0355f2ebe9 [ 488.317972][T16610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.317992][T16610] RSP: 002b:00007f0354997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.318011][T16610] RAX: ffffffffffffffda RBX: 00007f0356155fa0 RCX: 00007f0355f2ebe9 [ 488.318023][T16610] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 488.318055][T16610] RBP: 00007f0354997090 R08: 0000000000000000 R09: 0000000000000000 [ 488.318071][T16610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.318127][T16610] R13: 00007f0356156038 R14: 00007f0356155fa0 R15: 00007ffdc988fc18 [ 488.318149][T16610] [ 488.335858][T16615] syzkaller0: entered promiscuous mode [ 488.506340][T16615] syzkaller0: entered allmulticast mode [ 488.531513][T16629] FAULT_INJECTION: forcing a failure. [ 488.531513][T16629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.544772][T16629] CPU: 1 UID: 0 PID: 16629 Comm: syz.5.4383 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 488.544828][T16629] Tainted: [W]=WARN [ 488.544837][T16629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.544860][T16629] Call Trace: [ 488.544867][T16629] [ 488.544876][T16629] __dump_stack+0x1d/0x30 [ 488.544904][T16629] dump_stack_lvl+0xe8/0x140 [ 488.545009][T16629] dump_stack+0x15/0x1b [ 488.545028][T16629] should_fail_ex+0x265/0x280 [ 488.545049][T16629] should_fail+0xb/0x20 [ 488.545065][T16629] should_fail_usercopy+0x1a/0x20 [ 488.545158][T16629] _copy_from_user+0x1c/0xb0 [ 488.545195][T16629] ___sys_sendmsg+0xc1/0x1d0 [ 488.545235][T16629] __x64_sys_sendmsg+0xd4/0x160 [ 488.545268][T16629] x64_sys_call+0x191e/0x2ff0 [ 488.545295][T16629] do_syscall_64+0xd2/0x200 [ 488.545410][T16629] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 488.545440][T16629] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 488.545468][T16629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.545489][T16629] RIP: 0033:0x7f4a8284ebe9 [ 488.545586][T16629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.545609][T16629] RSP: 002b:00007f4a812af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.545633][T16629] RAX: ffffffffffffffda RBX: 00007f4a82a75fa0 RCX: 00007f4a8284ebe9 [ 488.545693][T16629] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 488.545710][T16629] RBP: 00007f4a812af090 R08: 0000000000000000 R09: 0000000000000000 [ 488.545725][T16629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.545736][T16629] R13: 00007f4a82a76038 R14: 00007f4a82a75fa0 R15: 00007ffc338008d8 [ 488.545815][T16629] [ 488.734961][T16633] pim6reg: entered allmulticast mode [ 488.771505][T16634] pim6reg: left allmulticast mode [ 488.809647][T16645] FAULT_INJECTION: forcing a failure. [ 488.809647][T16645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.822928][T16645] CPU: 1 UID: 0 PID: 16645 Comm: syz.2.4389 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 488.822965][T16645] Tainted: [W]=WARN [ 488.822973][T16645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.822988][T16645] Call Trace: [ 488.822995][T16645] [ 488.823030][T16645] __dump_stack+0x1d/0x30 [ 488.823057][T16645] dump_stack_lvl+0xe8/0x140 [ 488.823081][T16645] dump_stack+0x15/0x1b [ 488.823097][T16645] should_fail_ex+0x265/0x280 [ 488.823118][T16645] should_fail+0xb/0x20 [ 488.823134][T16645] should_fail_usercopy+0x1a/0x20 [ 488.823173][T16645] _copy_from_user+0x1c/0xb0 [ 488.823208][T16645] __sys_bpf+0x178/0x7b0 [ 488.823251][T16645] __x64_sys_bpf+0x41/0x50 [ 488.823281][T16645] x64_sys_call+0x2aea/0x2ff0 [ 488.823303][T16645] do_syscall_64+0xd2/0x200 [ 488.823463][T16645] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 488.823537][T16645] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 488.823562][T16645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.823583][T16645] RIP: 0033:0x7ffb43b2ebe9 [ 488.823601][T16645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.823695][T16645] RSP: 002b:00007ffb4258f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 488.823718][T16645] RAX: ffffffffffffffda RBX: 00007ffb43d55fa0 RCX: 00007ffb43b2ebe9 [ 488.823731][T16645] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 488.823747][T16645] RBP: 00007ffb4258f090 R08: 0000000000000000 R09: 0000000000000000 [ 488.823762][T16645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.823778][T16645] R13: 00007ffb43d56038 R14: 00007ffb43d55fa0 R15: 00007fff28d08f48 [ 488.823802][T16645] [ 489.146968][T16667] C: renamed from team_slave_0 (while UP) [ 489.156122][T16667] netlink: 'syz.8.4396': attribute type 1 has an invalid length. [ 489.165432][T16667] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 489.216245][T16658] can0: slcan on ttyS3. [ 489.221076][T16671] syzkaller0: entered promiscuous mode [ 489.226696][T16671] syzkaller0: entered allmulticast mode [ 489.232612][T16663] loop5: detected capacity change from 0 to 2048 [ 489.312813][T16658] can0 (unregistered): slcan off ttyS3. [ 489.399006][T16674] loop8: detected capacity change from 0 to 512 [ 489.468965][ T4276] loop5: p2 p3 p7 [ 489.516672][T16674] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 489.678842][T16663] loop5: p2 p3 p7 [ 489.715193][T16674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 489.748499][T16667] can0: slcan on ttyS3. [ 489.776714][T16674] System zones: 1-12 [ 489.781054][T16674] EXT4-fs (loop8): orphan cleanup on readonly fs [ 489.787983][T16674] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4396: bg 0: block 361: padding at end of block bitmap is not set [ 489.803883][T16674] EXT4-fs (loop8): Remounting filesystem read-only [ 489.816969][T16674] EXT4-fs (loop8): 1 truncate cleaned up [ 489.837081][T16674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 489.902482][T16657] can0 (unregistered): slcan off ttyS3. [ 489.933689][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4399'. [ 489.947592][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4399'. [ 489.956609][T16686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4399'. [ 489.969781][T16688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4402'. [ 490.000851][T15236] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 490.012246][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4399'. [ 490.021295][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4399'. [ 490.030282][T16686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4399'. [ 490.103506][T16706] FAULT_INJECTION: forcing a failure. [ 490.103506][T16706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.116661][T16706] CPU: 1 UID: 0 PID: 16706 Comm: syz.4.4405 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 490.116697][T16706] Tainted: [W]=WARN [ 490.116704][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.116717][T16706] Call Trace: [ 490.116723][T16706] [ 490.116730][T16706] __dump_stack+0x1d/0x30 [ 490.116818][T16706] dump_stack_lvl+0xe8/0x140 [ 490.116838][T16706] dump_stack+0x15/0x1b [ 490.116855][T16706] should_fail_ex+0x265/0x280 [ 490.116877][T16706] should_fail+0xb/0x20 [ 490.116909][T16706] should_fail_usercopy+0x1a/0x20 [ 490.116932][T16706] _copy_to_user+0x20/0xa0 [ 490.116963][T16706] simple_read_from_buffer+0xb5/0x130 [ 490.117032][T16706] proc_fail_nth_read+0x10e/0x150 [ 490.117072][T16706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.117099][T16706] vfs_read+0x1a5/0x770 [ 490.117130][T16706] ? __rcu_read_unlock+0x4f/0x70 [ 490.117152][T16706] ? __fget_files+0x184/0x1c0 [ 490.117203][T16706] ksys_read+0xda/0x1a0 [ 490.117259][T16706] __x64_sys_read+0x40/0x50 [ 490.117281][T16706] x64_sys_call+0x27bc/0x2ff0 [ 490.117303][T16706] do_syscall_64+0xd2/0x200 [ 490.117330][T16706] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 490.117356][T16706] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 490.117447][T16706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.117471][T16706] RIP: 0033:0x7fc0281dd5fc [ 490.117486][T16706] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 490.117583][T16706] RSP: 002b:00007fc026c1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.117602][T16706] RAX: ffffffffffffffda RBX: 00007fc028406090 RCX: 00007fc0281dd5fc [ 490.117615][T16706] RDX: 000000000000000f RSI: 00007fc026c1e0a0 RDI: 0000000000000006 [ 490.117703][T16706] RBP: 00007fc026c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 490.117741][T16706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.117754][T16706] R13: 00007fc028406128 R14: 00007fc028406090 R15: 00007ffea99094a8 [ 490.117775][T16706] [ 490.144932][T16712] syzkaller0: entered promiscuous mode [ 490.150872][T16713] netlink: 'syz.5.4399': attribute type 10 has an invalid length. [ 490.153584][T16712] syzkaller0: entered allmulticast mode [ 490.342870][T16719] loop5: detected capacity change from 0 to 1024 [ 490.358763][T16713] bond3: (slave dummy0): Releasing active interface [ 490.369362][T16713] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 490.372286][T16719] EXT4-fs: Ignoring removed orlov option [ 490.435934][T16719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.449242][T16719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.460297][T16736] loop8: detected capacity change from 0 to 512 [ 490.510142][T16736] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 490.548609][T16736] EXT4-fs (loop8): 1 orphan inode deleted [ 490.554577][T16736] EXT4-fs (loop8): 1 truncate cleaned up [ 490.555109][T16736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.565040][T16736] EXT4-fs error (device loop8): ext4_lookup:1779: inode #2: comm syz.8.4413: bad inode number: 12 [ 490.566915][T16736] EXT4-fs (loop8): Remounting filesystem read-only [ 490.567392][T16736] syz.8.4413 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 490.915323][T16782] syzkaller0: entered promiscuous mode [ 490.920961][T16782] syzkaller0: entered allmulticast mode [ 491.633484][T16800] loop2: detected capacity change from 0 to 128 [ 491.674991][T16800] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.688697][T16800] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 491.700739][T16800] FAULT_INJECTION: forcing a failure. [ 491.700739][T16800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.713914][T16800] CPU: 0 UID: 0 PID: 16800 Comm: syz.2.4433 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 491.714015][T16800] Tainted: [W]=WARN [ 491.714021][T16800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.714033][T16800] Call Trace: [ 491.714041][T16800] [ 491.714048][T16800] __dump_stack+0x1d/0x30 [ 491.714072][T16800] dump_stack_lvl+0xe8/0x140 [ 491.714090][T16800] dump_stack+0x15/0x1b [ 491.714107][T16800] should_fail_ex+0x265/0x280 [ 491.714133][T16800] should_fail+0xb/0x20 [ 491.714155][T16800] should_fail_usercopy+0x1a/0x20 [ 491.714218][T16800] _copy_to_user+0x20/0xa0 [ 491.714298][T16800] simple_read_from_buffer+0xb5/0x130 [ 491.714320][T16800] proc_fail_nth_read+0x10e/0x150 [ 491.714358][T16800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.714455][T16800] vfs_read+0x1a5/0x770 [ 491.714479][T16800] ? __rcu_read_unlock+0x4f/0x70 [ 491.714499][T16800] ? __fget_files+0x184/0x1c0 [ 491.714523][T16800] ksys_read+0xda/0x1a0 [ 491.714556][T16800] __x64_sys_read+0x40/0x50 [ 491.714580][T16800] x64_sys_call+0x27bc/0x2ff0 [ 491.714604][T16800] do_syscall_64+0xd2/0x200 [ 491.714635][T16800] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 491.714726][T16800] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 491.714748][T16800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.714767][T16800] RIP: 0033:0x7ffb43b2d5fc [ 491.714781][T16800] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 491.714802][T16800] RSP: 002b:00007ffb4258f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 491.714896][T16800] RAX: ffffffffffffffda RBX: 00007ffb43d55fa0 RCX: 00007ffb43b2d5fc [ 491.714912][T16800] RDX: 000000000000000f RSI: 00007ffb4258f0a0 RDI: 0000000000000006 [ 491.714937][T16800] RBP: 00007ffb4258f090 R08: 0000000000000000 R09: 0000000000000000 [ 491.714967][T16800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.715000][T16800] R13: 00007ffb43d56038 R14: 00007ffb43d55fa0 R15: 00007fff28d08f48 [ 491.715025][T16800] [ 491.988102][T12680] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.024775][T15236] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.073640][T16809] FAULT_INJECTION: forcing a failure. [ 492.073640][T16809] name failslab, interval 1, probability 0, space 0, times 1 [ 492.086402][T16809] CPU: 1 UID: 0 PID: 16809 Comm: syz.5.4437 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 492.086441][T16809] Tainted: [W]=WARN [ 492.086447][T16809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.086462][T16809] Call Trace: [ 492.086470][T16809] [ 492.086478][T16809] __dump_stack+0x1d/0x30 [ 492.086507][T16809] dump_stack_lvl+0xe8/0x140 [ 492.086532][T16809] dump_stack+0x15/0x1b [ 492.086563][T16809] should_fail_ex+0x265/0x280 [ 492.086598][T16809] should_failslab+0x8c/0xb0 [ 492.086626][T16809] kmem_cache_alloc_noprof+0x50/0x310 [ 492.086654][T16809] ? getname_flags+0x80/0x3b0 [ 492.086684][T16809] getname_flags+0x80/0x3b0 [ 492.086734][T16809] user_path_at+0x28/0x130 [ 492.086775][T16809] __se_sys_pivot_root+0xd0/0x710 [ 492.086807][T16809] __x64_sys_pivot_root+0x31/0x40 [ 492.086850][T16809] x64_sys_call+0x144/0x2ff0 [ 492.086877][T16809] do_syscall_64+0xd2/0x200 [ 492.086911][T16809] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 492.086963][T16809] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 492.086988][T16809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.087094][T16809] RIP: 0033:0x7f4a8284ebe9 [ 492.087114][T16809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.087139][T16809] RSP: 002b:00007f4a812af038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 492.087162][T16809] RAX: ffffffffffffffda RBX: 00007f4a82a75fa0 RCX: 00007f4a8284ebe9 [ 492.087177][T16809] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000200000000500 [ 492.087192][T16809] RBP: 00007f4a812af090 R08: 0000000000000000 R09: 0000000000000000 [ 492.087205][T16809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.087225][T16809] R13: 00007f4a82a76038 R14: 00007f4a82a75fa0 R15: 00007ffc338008d8 [ 492.087309][T16809] [ 492.391367][T16820] loop2: detected capacity change from 0 to 164 [ 492.412101][T16820] ISOFS: Unable to identify CD-ROM format. [ 492.780027][T16838] SELinux: Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped). [ 492.789927][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 492.789943][ T29] audit: type=1400 audit(1755239606.822:5330): avc: denied { relabelto } for pid=16836 comm="syz.8.4449" name="tty37" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:adjtime_t:s0" [ 492.822937][ T29] audit: type=1400 audit(1755239606.822:5331): avc: denied { associate } for pid=16836 comm="syz.8.4449" name="tty37" dev="devtmpfs" ino=55 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:adjtime_t:s0" [ 492.895341][T16840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.945491][T16843] FAULT_INJECTION: forcing a failure. [ 492.945491][T16843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.958772][T16843] CPU: 1 UID: 0 PID: 16843 Comm: syz.1.4450 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 492.958860][T16843] Tainted: [W]=WARN [ 492.958868][T16843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.958886][T16843] Call Trace: [ 492.958892][T16843] [ 492.958900][T16843] __dump_stack+0x1d/0x30 [ 492.958920][T16843] dump_stack_lvl+0xe8/0x140 [ 492.958940][T16843] dump_stack+0x15/0x1b [ 492.958961][T16843] should_fail_ex+0x265/0x280 [ 492.959022][T16843] should_fail+0xb/0x20 [ 492.959045][T16843] should_fail_usercopy+0x1a/0x20 [ 492.959119][T16843] _copy_to_iter+0xcf/0xe30 [ 492.959144][T16843] ? avc_has_perm+0xf7/0x180 [ 492.959209][T16843] ? selinux_file_open+0x2df/0x330 [ 492.959237][T16843] copy_page_to_iter+0x18f/0x2d0 [ 492.959267][T16843] sk_msg_recvmsg+0x1e4/0x900 [ 492.959294][T16843] unix_bpf_recvmsg+0x272/0x730 [ 492.959412][T16843] unix_stream_recvmsg+0xac/0xf0 [ 492.959438][T16843] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 492.959483][T16843] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 492.959548][T16843] sock_recvmsg+0x139/0x170 [ 492.959588][T16843] __sys_recvfrom+0x122/0x1f0 [ 492.959624][T16843] __x64_sys_recvfrom+0x76/0x90 [ 492.959789][T16843] x64_sys_call+0x2f20/0x2ff0 [ 492.959815][T16843] do_syscall_64+0xd2/0x200 [ 492.959841][T16843] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 492.959894][T16843] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 492.959959][T16843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.960064][T16843] RIP: 0033:0x7fa6daafebe9 [ 492.960082][T16843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.960099][T16843] RSP: 002b:00007fa6d953e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 492.960119][T16843] RAX: ffffffffffffffda RBX: 00007fa6dad26090 RCX: 00007fa6daafebe9 [ 492.960182][T16843] RDX: fffffffffffffedc RSI: 0000200000004000 RDI: 0000000000000004 [ 492.960196][T16843] RBP: 00007fa6d953e090 R08: 0000000000000000 R09: 0000000000000000 [ 492.960208][T16843] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000001 [ 492.960220][T16843] R13: 00007fa6dad26128 R14: 00007fa6dad26090 R15: 00007ffca9afcd28 [ 492.960239][T16843] [ 493.268455][T16840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.288662][ T29] audit: type=1326 audit(1755239607.322:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.8.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 493.312288][ T29] audit: type=1326 audit(1755239607.322:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.8.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 493.328198][T16853] loop5: detected capacity change from 0 to 164 [ 493.335983][ T29] audit: type=1326 audit(1755239607.322:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.8.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 493.365835][ T29] audit: type=1326 audit(1755239607.322:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.8.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 493.370596][T16853] ISOFS: Unable to identify CD-ROM format. [ 493.389607][ T29] audit: type=1326 audit(1755239607.322:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.8.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 493.418856][ T29] audit: type=1326 audit(1755239607.322:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.8.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 493.442373][ T29] audit: type=1326 audit(1755239607.322:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.8.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 493.466003][ T29] audit: type=1326 audit(1755239607.322:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16846 comm="syz.8.4454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 493.579643][T16840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.610879][T16859] netlink: 'syz.4.4456': attribute type 10 has an invalid length. [ 493.618784][T16859] __nla_validate_parse: 1 callbacks suppressed [ 493.618800][T16859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4456'. [ 493.638350][T16859] team0: Port device geneve1 added [ 493.648007][T16858] loop2: detected capacity change from 0 to 512 [ 493.648238][ T274] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.654743][T16858] EXT4-fs: Ignoring removed nobh option [ 493.668159][T16858] EXT4-fs: Ignoring removed oldalloc option [ 493.675156][T16858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 493.685056][T16858] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 493.705271][ T274] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.716112][T16840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.776658][ T274] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.814624][ T274] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.836331][ T274] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.864963][ T274] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.285831][T16900] loop2: detected capacity change from 0 to 512 [ 494.303601][T16900] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 494.318810][T16900] EXT4-fs (loop2): mount failed [ 495.395574][T16851] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.475052][T16851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.680049][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.706348][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.715014][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.745782][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.761485][T16946] tipc: Started in network mode [ 495.766470][T16946] tipc: Node identity be4a9622e16, cluster identity 4711 [ 495.773738][T16946] tipc: Enabled bearer , priority 0 [ 495.796987][T16946] tipc: Resetting bearer [ 495.813160][T16945] tipc: Disabling bearer [ 495.884271][T16954] netlink: 'syz.5.4487': attribute type 10 has an invalid length. [ 495.892384][T16954] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4487'. [ 495.906770][T16954] team0: Port device geneve1 added [ 495.914683][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.924570][T16944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.980210][ T8180] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.991612][ T8180] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.003644][ T8180] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.059675][ T8180] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.201916][T16997] loop8: detected capacity change from 0 to 512 [ 496.247312][T16997] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 496.270456][T16997] EXT4-fs (loop8): mount failed [ 496.299174][T17005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4512'. [ 496.345664][T17009] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.385661][T17009] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.409711][T17016] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.424588][T17017] FAULT_INJECTION: forcing a failure. [ 496.424588][T17017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.437732][T17017] CPU: 0 UID: 0 PID: 17017 Comm: syz.5.4514 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 496.437776][T17017] Tainted: [W]=WARN [ 496.437784][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.437848][T17017] Call Trace: [ 496.437856][T17017] [ 496.437865][T17017] __dump_stack+0x1d/0x30 [ 496.437942][T17017] dump_stack_lvl+0xe8/0x140 [ 496.438012][T17017] dump_stack+0x15/0x1b [ 496.438074][T17017] should_fail_ex+0x265/0x280 [ 496.438096][T17017] should_fail+0xb/0x20 [ 496.438112][T17017] should_fail_usercopy+0x1a/0x20 [ 496.438211][T17017] _copy_from_user+0x1c/0xb0 [ 496.438249][T17017] perf_copy_attr+0x145/0x610 [ 496.438310][T17017] __se_sys_perf_event_open+0x67/0x11c0 [ 496.438347][T17017] ? vfs_write+0x7e8/0x960 [ 496.438413][T17017] ? __rcu_read_unlock+0x4f/0x70 [ 496.438456][T17017] __x64_sys_perf_event_open+0x67/0x80 [ 496.438516][T17017] x64_sys_call+0x7bd/0x2ff0 [ 496.438539][T17017] do_syscall_64+0xd2/0x200 [ 496.438565][T17017] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 496.438613][T17017] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 496.438645][T17017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.438672][T17017] RIP: 0033:0x7f4a8284ebe9 [ 496.438773][T17017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.438796][T17017] RSP: 002b:00007f4a8128e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 496.438821][T17017] RAX: ffffffffffffffda RBX: 00007f4a82a76090 RCX: 00007f4a8284ebe9 [ 496.438866][T17017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 496.438880][T17017] RBP: 00007f4a8128e090 R08: 0000000000000000 R09: 0000000000000000 [ 496.438893][T17017] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 496.438909][T17017] R13: 00007f4a82a76128 R14: 00007f4a82a76090 R15: 00007ffc338008d8 [ 496.438977][T17017] [ 496.636405][T17009] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.679800][T17016] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.713590][T17009] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.744749][T17016] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.775682][T17024] netlink: 'syz.1.4517': attribute type 10 has an invalid length. [ 496.783661][T17024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4517'. [ 496.809850][T17024] team0: Port device geneve1 added [ 496.834272][T17016] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.909038][T17046] loop8: detected capacity change from 0 to 512 [ 497.049835][T17046] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 497.103756][T17046] EXT4-fs (loop8): mount failed [ 497.580287][T17054] loop8: detected capacity change from 0 to 256 [ 497.614986][T17054] netlink: 'syz.8.4528': attribute type 10 has an invalid length. [ 497.622925][T17054] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4528'. [ 497.637620][T17054] team0: Port device geneve1 added [ 497.686844][T17056] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.788544][T17056] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.865115][T17057] netlink: 'syz.4.4529': attribute type 10 has an invalid length. [ 497.873042][T17057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4529'. [ 497.884926][T17056] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.898908][ T8180] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.915035][T17068] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.946952][ T274] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.957813][ T274] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.969489][ T274] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.979990][T17070] FAULT_INJECTION: forcing a failure. [ 497.979990][T17070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.993225][T17070] CPU: 1 UID: 0 PID: 17070 Comm: syz.8.4533 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 497.993273][T17070] Tainted: [W]=WARN [ 497.993279][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.993338][T17070] Call Trace: [ 497.993345][T17070] [ 497.993354][T17070] __dump_stack+0x1d/0x30 [ 497.993381][T17070] dump_stack_lvl+0xe8/0x140 [ 497.993404][T17070] dump_stack+0x15/0x1b [ 497.993479][T17070] should_fail_ex+0x265/0x280 [ 497.993499][T17070] ? __pfx_ppp_ioctl+0x10/0x10 [ 497.993529][T17070] should_fail+0xb/0x20 [ 497.993546][T17070] should_fail_usercopy+0x1a/0x20 [ 497.993616][T17070] _copy_from_user+0x1c/0xb0 [ 497.993738][T17070] ppp_get_filter+0x3e/0x160 [ 497.993777][T17070] ppp_ioctl+0xb93/0x11c0 [ 497.993813][T17070] ? __fget_files+0x184/0x1c0 [ 497.993842][T17070] ? __pfx_ppp_ioctl+0x10/0x10 [ 497.993954][T17070] __se_sys_ioctl+0xcb/0x140 [ 497.993995][T17070] __x64_sys_ioctl+0x43/0x50 [ 497.994099][T17070] x64_sys_call+0x1816/0x2ff0 [ 497.994183][T17070] do_syscall_64+0xd2/0x200 [ 497.994210][T17070] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 497.994284][T17070] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 497.994315][T17070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.994366][T17070] RIP: 0033:0x7f0355f2ebe9 [ 497.994380][T17070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.994396][T17070] RSP: 002b:00007f0354976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.994412][T17070] RAX: ffffffffffffffda RBX: 00007f0356156090 RCX: 00007f0355f2ebe9 [ 497.994423][T17070] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 497.994433][T17070] RBP: 00007f0354976090 R08: 0000000000000000 R09: 0000000000000000 [ 497.994527][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.994543][T17070] R13: 00007f0356156128 R14: 00007f0356156090 R15: 00007ffdc988fc18 [ 497.994567][T17070] [ 497.995459][T17068] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.212360][ T8180] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.225718][ T8180] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.236576][ T8180] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.247516][T17068] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.269698][ T8180] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.278062][ T8180] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.310141][T17068] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.361078][ T8180] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.379496][ T8180] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.388266][ T8180] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.411610][ T8180] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.520730][T17080] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4536'. [ 498.595844][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 498.595859][ T29] audit: type=1400 audit(1755239612.632:5394): avc: denied { watch_reads } for pid=17086 comm="syz.4.4539" path="/326" dev="tmpfs" ino=1679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 499.299424][T17107] FAULT_INJECTION: forcing a failure. [ 499.299424][T17107] name failslab, interval 1, probability 0, space 0, times 0 [ 499.312178][T17107] CPU: 0 UID: 0 PID: 17107 Comm: syz.1.4547 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 499.312217][T17107] Tainted: [W]=WARN [ 499.312223][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.312304][T17107] Call Trace: [ 499.312312][T17107] [ 499.312320][T17107] __dump_stack+0x1d/0x30 [ 499.312344][T17107] dump_stack_lvl+0xe8/0x140 [ 499.312427][T17107] dump_stack+0x15/0x1b [ 499.312441][T17107] should_fail_ex+0x265/0x280 [ 499.312517][T17107] should_failslab+0x8c/0xb0 [ 499.312539][T17107] kmem_cache_alloc_noprof+0x50/0x310 [ 499.312641][T17107] ? getname_flags+0x80/0x3b0 [ 499.312735][T17107] getname_flags+0x80/0x3b0 [ 499.312759][T17107] do_sys_openat2+0x60/0x110 [ 499.312853][T17107] __x64_sys_openat+0xf2/0x120 [ 499.312890][T17107] x64_sys_call+0x2e9c/0x2ff0 [ 499.312993][T17107] do_syscall_64+0xd2/0x200 [ 499.313024][T17107] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 499.313053][T17107] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 499.313082][T17107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.313172][T17107] RIP: 0033:0x7fa6daafd550 [ 499.313195][T17107] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 499.313217][T17107] RSP: 002b:00007fa6d955eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 499.313263][T17107] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa6daafd550 [ 499.313342][T17107] RDX: 0000000000000000 RSI: 00007fa6d955ec10 RDI: 00000000ffffff9c [ 499.313356][T17107] RBP: 00007fa6d955ec10 R08: 0000000000000000 R09: 002367732f766564 [ 499.313370][T17107] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 499.313384][T17107] R13: 00007fa6dad26038 R14: 00007fa6dad25fa0 R15: 00007ffca9afcd28 [ 499.313401][T17107] [ 499.537101][T17115] program syz.5.4550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.594943][T17120] loop5: detected capacity change from 0 to 512 [ 499.649591][T17120] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 499.676332][T17120] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 499.679671][T17128] tipc: Enabled bearer , priority 0 [ 499.701526][T17120] EXT4-fs (loop5): mount failed [ 499.706703][T17128] tipc: Resetting bearer [ 499.715679][T17124] tipc: Disabling bearer [ 500.521231][T17087] syz.4.4539 (17087) used greatest stack depth: 7152 bytes left [ 501.060440][T17164] tipc: Enabled bearer , priority 0 [ 501.103324][T17164] tipc: Resetting bearer [ 501.110486][T17166] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4568'. [ 501.139996][T17163] tipc: Disabling bearer [ 501.238205][T17170] loop5: detected capacity change from 0 to 512 [ 501.299004][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 501.302888][T17170] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 501.358475][T17170] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 501.374125][T17170] EXT4-fs (loop5): mount failed [ 501.441511][ T29] audit: type=1400 audit(1755239615.392:5395): avc: denied { watch_reads } for pid=17173 comm="syz.2.4572" path="/282/file0" dev="tmpfs" ino=1476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 501.476604][T17190] FAULT_INJECTION: forcing a failure. [ 501.476604][T17190] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 501.490012][T17190] CPU: 0 UID: 0 PID: 17190 Comm: syz.2.4577 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 501.490097][T17190] Tainted: [W]=WARN [ 501.490104][T17190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.490117][T17190] Call Trace: [ 501.490122][T17190] [ 501.490129][T17190] __dump_stack+0x1d/0x30 [ 501.490159][T17190] dump_stack_lvl+0xe8/0x140 [ 501.490181][T17190] dump_stack+0x15/0x1b [ 501.490200][T17190] should_fail_ex+0x265/0x280 [ 501.490296][T17190] should_fail_alloc_page+0xf2/0x100 [ 501.490327][T17190] __alloc_frozen_pages_noprof+0xff/0x360 [ 501.490367][T17190] alloc_pages_mpol+0xb3/0x250 [ 501.490475][T17190] folio_alloc_mpol_noprof+0x39/0x80 [ 501.490530][T17190] shmem_get_folio_gfp+0x3cf/0xd60 [ 501.490566][T17190] ? simple_xattr_get+0xb9/0x120 [ 501.490604][T17190] shmem_write_begin+0xa8/0x190 [ 501.490659][T17190] generic_perform_write+0x181/0x490 [ 501.490719][T17190] shmem_file_write_iter+0xc5/0xf0 [ 501.490746][T17190] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 501.490772][T17190] vfs_write+0x527/0x960 [ 501.490801][T17190] ksys_write+0xda/0x1a0 [ 501.490826][T17190] __x64_sys_write+0x40/0x50 [ 501.490926][T17190] x64_sys_call+0x27fe/0x2ff0 [ 501.490950][T17190] do_syscall_64+0xd2/0x200 [ 501.490985][T17190] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 501.491038][T17190] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 501.491065][T17190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.491089][T17190] RIP: 0033:0x7ffb43b2ebe9 [ 501.491105][T17190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.491166][T17190] RSP: 002b:00007ffb4258f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 501.491187][T17190] RAX: ffffffffffffffda RBX: 00007ffb43d55fa0 RCX: 00007ffb43b2ebe9 [ 501.491200][T17190] RDX: 0000000000000069 RSI: 0000200000000000 RDI: 0000000000000003 [ 501.491214][T17190] RBP: 00007ffb4258f090 R08: 0000000000000000 R09: 0000000000000000 [ 501.491227][T17190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.491240][T17190] R13: 00007ffb43d56038 R14: 00007ffb43d55fa0 R15: 00007fff28d08f48 [ 501.491260][T17190] [ 501.781536][T17198] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4579'. [ 502.033309][T17203] netlink: 'syz.4.4580': attribute type 10 has an invalid length. [ 502.041226][T17203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4580'. [ 502.053983][ T29] audit: type=1326 audit(1755239616.062:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 502.077554][ T29] audit: type=1326 audit(1755239616.062:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 502.101040][ T29] audit: type=1326 audit(1755239616.062:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 502.124692][ T29] audit: type=1326 audit(1755239616.062:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 502.148233][ T29] audit: type=1326 audit(1755239616.062:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 502.171794][ T29] audit: type=1326 audit(1755239616.062:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17199 comm="syz.4.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 502.276051][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4581'. [ 502.290594][T17207] program syz.2.4583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.294931][T17205] team1: entered promiscuous mode [ 502.304970][T17205] team1: entered allmulticast mode [ 502.555601][T17229] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4590'. [ 503.214713][T17244] FAULT_INJECTION: forcing a failure. [ 503.214713][T17244] name failslab, interval 1, probability 0, space 0, times 0 [ 503.227515][T17244] CPU: 1 UID: 0 PID: 17244 Comm: syz.4.4597 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 503.227631][T17244] Tainted: [W]=WARN [ 503.227640][T17244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.227655][T17244] Call Trace: [ 503.227664][T17244] [ 503.227674][T17244] __dump_stack+0x1d/0x30 [ 503.227698][T17244] dump_stack_lvl+0xe8/0x140 [ 503.227716][T17244] dump_stack+0x15/0x1b [ 503.227772][T17244] should_fail_ex+0x265/0x280 [ 503.227798][T17244] should_failslab+0x8c/0xb0 [ 503.227828][T17244] kmem_cache_alloc_noprof+0x50/0x310 [ 503.227886][T17244] ? audit_log_start+0x365/0x6c0 [ 503.227988][T17244] audit_log_start+0x365/0x6c0 [ 503.228082][T17244] audit_seccomp+0x48/0x100 [ 503.228174][T17244] ? __seccomp_filter+0x68c/0x10d0 [ 503.228194][T17244] __seccomp_filter+0x69d/0x10d0 [ 503.228219][T17244] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 503.228245][T17244] ? vfs_write+0x7e8/0x960 [ 503.228289][T17244] __secure_computing+0x82/0x150 [ 503.228315][T17244] syscall_trace_enter+0xcf/0x1e0 [ 503.228373][T17244] do_syscall_64+0xac/0x200 [ 503.228403][T17244] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 503.228435][T17244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.228459][T17244] RIP: 0033:0x7fc0281debe9 [ 503.228473][T17244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.228553][T17244] RSP: 002b:00007fc026c3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.228590][T17244] RAX: ffffffffffffffda RBX: 00007fc028405fa0 RCX: 00007fc0281debe9 [ 503.228606][T17244] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffffff [ 503.228625][T17244] RBP: 00007fc026c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 503.228636][T17244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.228648][T17244] R13: 00007fc028406038 R14: 00007fc028405fa0 R15: 00007ffea99094a8 [ 503.228670][T17244] [ 503.624782][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 503.624799][ T29] audit: type=1326 audit(1755239617.662:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.693994][ T29] audit: type=1326 audit(1755239617.662:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.717576][ T29] audit: type=1326 audit(1755239617.662:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.741098][ T29] audit: type=1326 audit(1755239617.692:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.764829][ T29] audit: type=1326 audit(1755239617.692:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.788447][ T29] audit: type=1326 audit(1755239617.692:5470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.812142][ T29] audit: type=1326 audit(1755239617.692:5471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.835803][ T29] audit: type=1326 audit(1755239617.692:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.859327][ T29] audit: type=1326 audit(1755239617.692:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.883025][ T29] audit: type=1326 audit(1755239617.692:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.8.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0355f2ebe9 code=0x7ffc0000 [ 503.913061][T17268] loop2: detected capacity change from 0 to 512 [ 503.945042][T17268] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 503.966432][T17277] FAULT_INJECTION: forcing a failure. [ 503.966432][T17277] name failslab, interval 1, probability 0, space 0, times 0 [ 503.970362][T17268] EXT4-fs (loop2): mount failed [ 503.979195][T17277] CPU: 0 UID: 0 PID: 17277 Comm: syz.1.4612 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 503.979235][T17277] Tainted: [W]=WARN [ 503.979244][T17277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.979262][T17277] Call Trace: [ 503.979272][T17277] [ 503.979283][T17277] __dump_stack+0x1d/0x30 [ 503.979315][T17277] dump_stack_lvl+0xe8/0x140 [ 503.979402][T17277] dump_stack+0x15/0x1b [ 503.979425][T17277] should_fail_ex+0x265/0x280 [ 503.979471][T17277] should_failslab+0x8c/0xb0 [ 503.979506][T17277] kmem_cache_alloc_noprof+0x50/0x310 [ 503.979543][T17277] ? audit_log_start+0x365/0x6c0 [ 503.979610][T17277] audit_log_start+0x365/0x6c0 [ 503.979740][T17277] audit_seccomp+0x48/0x100 [ 503.979775][T17277] ? __seccomp_filter+0x68c/0x10d0 [ 503.979806][T17277] __seccomp_filter+0x69d/0x10d0 [ 503.979835][T17277] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 503.979926][T17277] ? vfs_write+0x7e8/0x960 [ 503.979954][T17277] ? __rcu_read_unlock+0x4f/0x70 [ 503.980056][T17277] ? __fget_files+0x184/0x1c0 [ 503.980157][T17277] __secure_computing+0x82/0x150 [ 503.980255][T17277] syscall_trace_enter+0xcf/0x1e0 [ 503.980315][T17277] do_syscall_64+0xac/0x200 [ 503.980353][T17277] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 503.980385][T17277] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 503.980419][T17277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.980466][T17277] RIP: 0033:0x7fa6daafebe9 [ 503.980558][T17277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.980583][T17277] RSP: 002b:00007fa6d955f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 503.980655][T17277] RAX: ffffffffffffffda RBX: 00007fa6dad25fa0 RCX: 00007fa6daafebe9 [ 503.980673][T17277] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.980691][T17277] RBP: 00007fa6d955f090 R08: 0000000000000000 R09: 0000000000000000 [ 503.980709][T17277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.980733][T17277] R13: 00007fa6dad26038 R14: 00007fa6dad25fa0 R15: 00007ffca9afcd28 [ 503.980761][T17277] [ 504.219769][T17288] loop8: detected capacity change from 0 to 512 [ 504.237698][T17293] capability: warning: `syz.4.4618' uses 32-bit capabilities (legacy support in use) [ 504.289467][T17297] FAULT_INJECTION: forcing a failure. [ 504.289467][T17297] name failslab, interval 1, probability 0, space 0, times 0 [ 504.302292][T17297] CPU: 0 UID: 0 PID: 17297 Comm: syz.2.4620 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 504.302349][T17297] Tainted: [W]=WARN [ 504.302436][T17297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.302451][T17297] Call Trace: [ 504.302458][T17297] [ 504.302467][T17297] __dump_stack+0x1d/0x30 [ 504.302495][T17297] dump_stack_lvl+0xe8/0x140 [ 504.302531][T17297] dump_stack+0x15/0x1b [ 504.302546][T17297] should_fail_ex+0x265/0x280 [ 504.302630][T17297] should_failslab+0x8c/0xb0 [ 504.302661][T17297] kmem_cache_alloc_noprof+0x50/0x310 [ 504.302695][T17297] ? audit_log_start+0x365/0x6c0 [ 504.302727][T17297] audit_log_start+0x365/0x6c0 [ 504.302797][T17297] audit_seccomp+0x48/0x100 [ 504.302890][T17297] ? __seccomp_filter+0x68c/0x10d0 [ 504.302912][T17297] __seccomp_filter+0x69d/0x10d0 [ 504.302933][T17297] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 504.302963][T17297] ? vfs_write+0x7e8/0x960 [ 504.302990][T17297] ? __rcu_read_unlock+0x4f/0x70 [ 504.303047][T17297] ? __fget_files+0x184/0x1c0 [ 504.303074][T17297] __secure_computing+0x82/0x150 [ 504.303096][T17297] syscall_trace_enter+0xcf/0x1e0 [ 504.303199][T17297] do_syscall_64+0xac/0x200 [ 504.303232][T17297] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 504.303254][T17297] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 504.303280][T17297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.303351][T17297] RIP: 0033:0x7ffb43b2ebe9 [ 504.303369][T17297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.303387][T17297] RSP: 002b:00007ffb4258f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 504.303405][T17297] RAX: ffffffffffffffda RBX: 00007ffb43d55fa0 RCX: 00007ffb43b2ebe9 [ 504.303417][T17297] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 504.303472][T17297] RBP: 00007ffb4258f090 R08: 0000000000000000 R09: 0000000000000000 [ 504.303487][T17297] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 504.303502][T17297] R13: 00007ffb43d56038 R14: 00007ffb43d55fa0 R15: 00007fff28d08f48 [ 504.303526][T17297] [ 504.585012][T17288] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.598558][T17288] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.658449][T17299] loop5: detected capacity change from 0 to 512 [ 504.725961][T17299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.749554][T17299] ext4 filesystem being mounted at /579/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.809759][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4621'. [ 504.819250][T17299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4621'. [ 504.896719][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4628'. [ 504.961146][ T8100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.989832][T17327] loop2: detected capacity change from 0 to 512 [ 505.022700][T17327] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 505.096449][T17327] EXT4-fs (loop2): mount failed [ 505.288244][T17336] loop2: detected capacity change from 0 to 512 [ 505.304306][T17336] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 505.327780][T17336] EXT4-fs (loop2): mount failed [ 506.878433][T17359] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4640'. [ 507.200705][T17369] netlink: 'syz.2.4642': attribute type 10 has an invalid length. [ 507.208653][T17369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4642'. [ 507.225240][T17369] team0: Port device geneve1 added [ 507.327407][ T8180] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.342386][ T8180] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.360962][ T8180] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.409650][ T8180] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.445288][T17382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17382 comm=syz.1.4648 [ 507.510071][T17382] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4648'. [ 507.524562][T17382] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4648'. [ 508.875430][T17429] 9pnet: Could not find request transport: r [ 508.997204][T17434] loop5: detected capacity change from 0 to 512 [ 509.008758][T17434] EXT4-fs: Ignoring removed nobh option [ 509.014483][T17434] EXT4-fs: Ignoring removed oldalloc option [ 509.022622][T17434] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 509.032576][T17434] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 509.068507][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 509.068523][ T29] audit: type=1326 audit(1755239623.102:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.124509][ T29] audit: type=1326 audit(1755239623.132:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.124659][T17427] loop2: detected capacity change from 0 to 8192 [ 509.148091][ T29] audit: type=1326 audit(1755239623.132:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.148125][ T29] audit: type=1326 audit(1755239623.132:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.201619][ T29] audit: type=1326 audit(1755239623.132:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.225116][ T29] audit: type=1326 audit(1755239623.132:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.248628][ T29] audit: type=1326 audit(1755239623.132:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.272236][ T29] audit: type=1326 audit(1755239623.132:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.295763][ T29] audit: type=1326 audit(1755239623.132:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.319283][ T29] audit: type=1326 audit(1755239623.132:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17431 comm="syz.4.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 509.383817][T15236] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.403079][T17437] netlink: 9004 bytes leftover after parsing attributes in process `syz.4.4669'. [ 509.524606][T17449] FAULT_INJECTION: forcing a failure. [ 509.524606][T17449] name failslab, interval 1, probability 0, space 0, times 0 [ 509.537330][T17449] CPU: 1 UID: 0 PID: 17449 Comm: syz.1.4672 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 509.537394][T17449] Tainted: [W]=WARN [ 509.537467][T17449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.537483][T17449] Call Trace: [ 509.537489][T17449] [ 509.537552][T17449] __dump_stack+0x1d/0x30 [ 509.537572][T17449] dump_stack_lvl+0xe8/0x140 [ 509.537593][T17449] dump_stack+0x15/0x1b [ 509.537611][T17449] should_fail_ex+0x265/0x280 [ 509.537666][T17449] should_failslab+0x8c/0xb0 [ 509.537695][T17449] __kmalloc_node_noprof+0xa9/0x410 [ 509.537729][T17449] ? load_msg+0x41/0x2f0 [ 509.537818][T17449] load_msg+0x41/0x2f0 [ 509.537867][T17449] do_mq_timedsend+0x23e/0x6b0 [ 509.537900][T17449] __x64_sys_mq_timedsend+0xd1/0x160 [ 509.538013][T17449] x64_sys_call+0x1d10/0x2ff0 [ 509.538037][T17449] do_syscall_64+0xd2/0x200 [ 509.538139][T17449] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 509.538168][T17449] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 509.538194][T17449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.538265][T17449] RIP: 0033:0x7fa6daafebe9 [ 509.538282][T17449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.538356][T17449] RSP: 002b:00007fa6d953e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 509.538373][T17449] RAX: ffffffffffffffda RBX: 00007fa6dad26090 RCX: 00007fa6daafebe9 [ 509.538385][T17449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 509.538396][T17449] RBP: 00007fa6d953e090 R08: 0000000000000000 R09: 0000000000000000 [ 509.538409][T17449] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 509.538501][T17449] R13: 00007fa6dad26128 R14: 00007fa6dad26090 R15: 00007ffca9afcd28 [ 509.538542][T17449] [ 509.888312][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4677'. [ 509.949766][T17464] FAULT_INJECTION: forcing a failure. [ 509.949766][T17464] name failslab, interval 1, probability 0, space 0, times 0 [ 509.962553][T17464] CPU: 1 UID: 0 PID: 17464 Comm: syz.2.4678 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 509.962604][T17464] Tainted: [W]=WARN [ 509.962611][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.962722][T17464] Call Trace: [ 509.962728][T17464] [ 509.962734][T17464] __dump_stack+0x1d/0x30 [ 509.962754][T17464] dump_stack_lvl+0xe8/0x140 [ 509.962774][T17464] dump_stack+0x15/0x1b [ 509.962793][T17464] should_fail_ex+0x265/0x280 [ 509.962882][T17464] should_failslab+0x8c/0xb0 [ 509.962904][T17464] kmem_cache_alloc_noprof+0x50/0x310 [ 509.963043][T17464] ? audit_log_start+0x365/0x6c0 [ 509.963073][T17464] audit_log_start+0x365/0x6c0 [ 509.963112][T17464] audit_seccomp+0x48/0x100 [ 509.963139][T17464] ? __seccomp_filter+0x68c/0x10d0 [ 509.963161][T17464] __seccomp_filter+0x69d/0x10d0 [ 509.963186][T17464] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 509.963235][T17464] ? vfs_write+0x7e8/0x960 [ 509.963255][T17464] ? __rcu_read_unlock+0x4f/0x70 [ 509.963305][T17464] ? __fget_files+0x184/0x1c0 [ 509.963334][T17464] __secure_computing+0x82/0x150 [ 509.963357][T17464] syscall_trace_enter+0xcf/0x1e0 [ 509.963385][T17464] do_syscall_64+0xac/0x200 [ 509.963513][T17464] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 509.963543][T17464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.963614][T17464] RIP: 0033:0x7ffb43b2ebe9 [ 509.963626][T17464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.963640][T17464] RSP: 002b:00007ffb4258f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 509.963655][T17464] RAX: ffffffffffffffda RBX: 00007ffb43d55fa0 RCX: 00007ffb43b2ebe9 [ 509.963665][T17464] RDX: 0000200000bbdffc RSI: 0000200000533fa0 RDI: 0000000000000000 [ 509.963682][T17464] RBP: 00007ffb4258f090 R08: 0000000000000000 R09: 0000000000000000 [ 509.963692][T17464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.963701][T17464] R13: 00007ffb43d56038 R14: 00007ffb43d55fa0 R15: 00007fff28d08f48 [ 509.963717][T17464] [ 510.243933][T17470] loop5: detected capacity change from 0 to 512 [ 510.254651][T17470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.267539][T17470] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.290464][ T8100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.336263][T17479] FAULT_INJECTION: forcing a failure. [ 510.336263][T17479] name failslab, interval 1, probability 0, space 0, times 0 [ 510.349011][T17479] CPU: 1 UID: 0 PID: 17479 Comm: syz.5.4682 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 510.349062][T17479] Tainted: [W]=WARN [ 510.349070][T17479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.349085][T17479] Call Trace: [ 510.349094][T17479] [ 510.349103][T17479] __dump_stack+0x1d/0x30 [ 510.349129][T17479] dump_stack_lvl+0xe8/0x140 [ 510.349230][T17479] dump_stack+0x15/0x1b [ 510.349251][T17479] should_fail_ex+0x265/0x280 [ 510.349277][T17479] should_failslab+0x8c/0xb0 [ 510.349326][T17479] kmem_cache_alloc_noprof+0x50/0x310 [ 510.349416][T17479] ? audit_log_start+0x365/0x6c0 [ 510.349447][T17479] audit_log_start+0x365/0x6c0 [ 510.349535][T17479] audit_seccomp+0x48/0x100 [ 510.349592][T17479] ? __seccomp_filter+0x68c/0x10d0 [ 510.349617][T17479] __seccomp_filter+0x69d/0x10d0 [ 510.349644][T17479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 510.349695][T17479] ? vfs_write+0x7e8/0x960 [ 510.349719][T17479] ? __rcu_read_unlock+0x4f/0x70 [ 510.349744][T17479] ? __fget_files+0x184/0x1c0 [ 510.349783][T17479] __secure_computing+0x82/0x150 [ 510.349853][T17479] syscall_trace_enter+0xcf/0x1e0 [ 510.349881][T17479] do_syscall_64+0xac/0x200 [ 510.349913][T17479] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 510.349941][T17479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 510.350056][T17479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.350082][T17479] RIP: 0033:0x7f4a8284ebe9 [ 510.350100][T17479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.350122][T17479] RSP: 002b:00007f4a812af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 510.350146][T17479] RAX: ffffffffffffffda RBX: 00007f4a82a75fa0 RCX: 00007f4a8284ebe9 [ 510.350162][T17479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 510.350177][T17479] RBP: 00007f4a812af090 R08: 0000000000000000 R09: 0000000000000000 [ 510.350202][T17479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.350217][T17479] R13: 00007f4a82a76038 R14: 00007f4a82a75fa0 R15: 00007ffc338008d8 [ 510.350239][T17479] [ 510.692732][T17497] netlink: 'syz.1.4690': attribute type 4 has an invalid length. [ 510.727291][T17500] FAULT_INJECTION: forcing a failure. [ 510.727291][T17500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.740473][T17500] CPU: 0 UID: 0 PID: 17500 Comm: syz.1.4691 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 510.740513][T17500] Tainted: [W]=WARN [ 510.740520][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.740534][T17500] Call Trace: [ 510.740542][T17500] [ 510.740550][T17500] __dump_stack+0x1d/0x30 [ 510.740626][T17500] dump_stack_lvl+0xe8/0x140 [ 510.740648][T17500] dump_stack+0x15/0x1b [ 510.740666][T17500] should_fail_ex+0x265/0x280 [ 510.740689][T17500] should_fail+0xb/0x20 [ 510.740776][T17500] should_fail_usercopy+0x1a/0x20 [ 510.740809][T17500] _copy_from_user+0x1c/0xb0 [ 510.740840][T17500] ___sys_sendmsg+0xc1/0x1d0 [ 510.740927][T17500] __x64_sys_sendmsg+0xd4/0x160 [ 510.740955][T17500] x64_sys_call+0x191e/0x2ff0 [ 510.740978][T17500] do_syscall_64+0xd2/0x200 [ 510.741072][T17500] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 510.741098][T17500] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 510.741125][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.741157][T17500] RIP: 0033:0x7fa6daafebe9 [ 510.741174][T17500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.741196][T17500] RSP: 002b:00007fa6d955f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.741217][T17500] RAX: ffffffffffffffda RBX: 00007fa6dad25fa0 RCX: 00007fa6daafebe9 [ 510.741254][T17500] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000004 [ 510.741268][T17500] RBP: 00007fa6d955f090 R08: 0000000000000000 R09: 0000000000000000 [ 510.741281][T17500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.741294][T17500] R13: 00007fa6dad26038 R14: 00007fa6dad25fa0 R15: 00007ffca9afcd28 [ 510.741315][T17500] [ 510.749559][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4685'. [ 510.930079][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4685'. [ 510.939695][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4685'. [ 511.036271][T17498] loop5: detected capacity change from 0 to 512 [ 511.042979][T17498] EXT4-fs: Ignoring removed nobh option [ 511.048583][T17498] EXT4-fs: Ignoring removed oldalloc option [ 511.055619][T17498] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 511.065575][T17498] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 511.137606][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4685'. [ 511.334596][T17519] loop2: detected capacity change from 0 to 512 [ 511.354635][T17519] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 511.375168][T17519] EXT4-fs (loop2): mount failed [ 511.491537][T17530] FAULT_INJECTION: forcing a failure. [ 511.491537][T17530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.504684][T17530] CPU: 1 UID: 0 PID: 17530 Comm: syz.8.4701 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 511.504735][T17530] Tainted: [W]=WARN [ 511.504741][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.504757][T17530] Call Trace: [ 511.504765][T17530] [ 511.504773][T17530] __dump_stack+0x1d/0x30 [ 511.504827][T17530] dump_stack_lvl+0xe8/0x140 [ 511.504889][T17530] dump_stack+0x15/0x1b [ 511.504909][T17530] should_fail_ex+0x265/0x280 [ 511.504936][T17530] should_fail+0xb/0x20 [ 511.504957][T17530] should_fail_usercopy+0x1a/0x20 [ 511.504983][T17530] _copy_from_user+0x1c/0xb0 [ 511.505041][T17530] ___sys_recvmsg+0xaa/0x370 [ 511.505068][T17530] ? _parse_integer+0x27/0x40 [ 511.505110][T17530] do_recvmmsg+0x1ef/0x540 [ 511.505137][T17530] ? fput+0x8f/0xc0 [ 511.505203][T17530] __x64_sys_recvmmsg+0xe5/0x170 [ 511.505250][T17530] x64_sys_call+0x27a6/0x2ff0 [ 511.505276][T17530] do_syscall_64+0xd2/0x200 [ 511.505303][T17530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 511.505334][T17530] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 511.505429][T17530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.505455][T17530] RIP: 0033:0x7f0355f2ebe9 [ 511.505474][T17530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.505497][T17530] RSP: 002b:00007f0354997038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 511.505520][T17530] RAX: ffffffffffffffda RBX: 00007f0356155fa0 RCX: 00007f0355f2ebe9 [ 511.505536][T17530] RDX: 0000000000000001 RSI: 0000200000004f40 RDI: 0000000000000003 [ 511.505552][T17530] RBP: 00007f0354997090 R08: 0000000000000000 R09: 0000000000000000 [ 511.505645][T17530] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 511.505661][T17530] R13: 00007f0356156038 R14: 00007f0356155fa0 R15: 00007ffdc988fc18 [ 511.505681][T17530] [ 511.804484][T17538] loop2: detected capacity change from 0 to 512 [ 511.834632][T17544] loop8: detected capacity change from 0 to 512 [ 511.854538][T17544] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 511.875580][T17538] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 511.886050][T17544] EXT4-fs (loop8): mount failed [ 511.904532][T17538] EXT4-fs (loop2): mount failed [ 512.014295][T17553] __nla_validate_parse: 7 callbacks suppressed [ 512.014382][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4709'. [ 512.179474][T17555] loop8: detected capacity change from 0 to 256 [ 512.393360][T17563] loop5: detected capacity change from 0 to 512 [ 512.433664][T17563] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.4713: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 512.483390][T15236] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 512.491080][T15236] FAT-fs (loop8): Filesystem has been set read-only [ 512.504502][T17563] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.4713: Bad quota inode: 3, type: 0 [ 512.516417][T15236] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 512.565965][T17563] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 512.603438][T17563] EXT4-fs (loop5): mount failed [ 512.655274][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4713'. [ 512.716691][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4713'. [ 512.744864][T17563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=17563 comm=syz.5.4713 [ 512.853589][ T8180] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.896473][T17578] loop5: detected capacity change from 0 to 128 [ 512.915427][ T8180] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.986145][ T8180] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.034913][ T8180] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.130685][ T8180] bridge_slave_1: left allmulticast mode [ 513.136437][ T8180] bridge_slave_1: left promiscuous mode [ 513.142121][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.150491][ T8180] bridge_slave_0: left allmulticast mode [ 513.156351][ T8180] bridge_slave_0: left promiscuous mode [ 513.162088][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.225149][T17599] loop5: detected capacity change from 0 to 512 [ 513.258616][T17599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.286500][T17599] ext4 filesystem being mounted at /600/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 513.336963][ T8180] team0: Port device geneve1 removed [ 513.374737][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.384781][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.395825][ T8180] bond0 (unregistering): Released all slaves [ 513.445599][ T8180] tipc: Left network mode [ 513.453791][ T8180] hsr_slave_0: left promiscuous mode [ 513.459962][ T8180] hsr_slave_1: left promiscuous mode [ 513.467926][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.475349][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.513607][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.521041][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.565156][ T8180] veth0_macvtap: left promiscuous mode [ 513.622163][ T8180] veth1_vlan: left promiscuous mode [ 513.632412][ T8180] veth0_vlan: left promiscuous mode [ 513.769699][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 513.780942][ T8180] team0 (unregistering): Port device C removed [ 513.845373][T17611] tipc: Enabling of bearer rejected, failed to enable media [ 513.864528][T17571] chnl_net:caif_netlink_parms(): no params data found [ 514.006751][T17571] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.014021][T17571] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.032313][T17571] bridge_slave_0: entered allmulticast mode [ 514.048424][T17571] bridge_slave_0: entered promiscuous mode [ 514.069888][T17571] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.077153][T17571] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.115602][T17571] bridge_slave_1: entered allmulticast mode [ 514.128759][T17571] bridge_slave_1: entered promiscuous mode [ 514.188725][T17571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.210816][T17571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.260540][T17571] team0: Port device team_slave_0 added [ 514.277886][T17571] team0: Port device team_slave_1 added [ 514.325249][T17571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.332347][T17571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.358325][T17571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.453079][T17571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.460073][T17571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.486039][T17571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.543779][T17635] netlink: 'syz.4.4731': attribute type 10 has an invalid length. [ 514.570028][T17635] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.603018][T17636] netlink: 'syz.4.4731': attribute type 10 has an invalid length. [ 514.613431][T17635] bond0: (slave team0): Enslaving as an active interface with an up link [ 514.624418][T17571] hsr_slave_0: entered promiscuous mode [ 514.630635][T17571] hsr_slave_1: entered promiscuous mode [ 514.646732][T17571] debugfs: 'hsr0' already exists in 'hsr' [ 514.652568][T17571] Cannot create hsr debugfs directory [ 514.663347][T17636] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 514.673917][T17637] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 514.783091][T17571] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 514.827886][T17571] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 514.864398][T17571] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 514.884399][T17571] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 514.955296][T17647] loop2: detected capacity change from 0 to 512 [ 515.036343][T17647] __quota_error: 275 callbacks suppressed [ 515.036364][T17647] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 515.093292][T17647] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 515.149092][T17647] EXT4-fs (loop2): mount failed [ 515.164452][T17571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.230824][T17571] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.257596][T12893] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.264719][T12893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.500228][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.507381][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.578200][T17571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.588664][T17571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.690907][T17571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.745109][T17670] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4737'. [ 515.773400][T17670] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4737'. [ 516.002134][T17571] veth0_vlan: entered promiscuous mode [ 516.024516][T17571] veth1_vlan: entered promiscuous mode [ 516.070976][T17571] veth0_macvtap: entered promiscuous mode [ 516.087981][T17571] veth1_macvtap: entered promiscuous mode [ 516.121325][T17571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.168374][T17571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.193976][ T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.212151][ T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.227211][ T29] audit: type=1400 audit(1755239630.262:5981): avc: denied { mount } for pid=17571 comm="syz-executor" name="/" dev="gadgetfs" ino=5273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 516.288428][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.322576][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.186790][T17719] C: renamed from team_slave_0 [ 517.210929][ T29] audit: type=1326 audit(1755239631.242:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.4.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 517.234629][ T29] audit: type=1326 audit(1755239631.242:5983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.4.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 517.258194][ T29] audit: type=1326 audit(1755239631.242:5984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.4.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 517.281730][ T29] audit: type=1326 audit(1755239631.242:5985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.4.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 517.305320][ T29] audit: type=1326 audit(1755239631.242:5986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.4.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 517.335915][T17719] netlink: 'syz.2.4750': attribute type 1 has an invalid length. [ 517.343758][T17719] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 517.367891][T17718] can0: slcan on ttyS3. [ 517.377832][ T29] audit: type=1326 audit(1755239631.362:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.4.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 517.401493][ T29] audit: type=1326 audit(1755239631.362:5988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.4.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 517.425039][ T29] audit: type=1326 audit(1755239631.362:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17720 comm="syz.4.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0281debe9 code=0x7ffc0000 [ 517.492375][T17718] can0 (unregistered): slcan off ttyS3. [ 517.504375][T17719] can0: slcan on ttyS3. [ 517.517254][T17718] loop2: detected capacity change from 0 to 512 [ 517.543531][T17718] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 517.563723][ T8100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.583352][T17718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 517.629547][T17718] System zones: 1-12 [ 517.635295][T17718] EXT4-fs (loop2): orphan cleanup on readonly fs [ 517.642607][T17718] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4750: bg 0: block 361: padding at end of block bitmap is not set [ 517.660113][T17718] EXT4-fs (loop2): Remounting filesystem read-only [ 517.667214][T17718] EXT4-fs (loop2): 1 truncate cleaned up [ 517.673666][T17718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 517.747759][ T2740] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.802301][T17717] can0 (unregistered): slcan off ttyS3. [ 517.815338][ T2740] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.863800][ T2740] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.887278][T12680] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 517.917055][ T2740] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.029322][ T2740] bridge_slave_1: left allmulticast mode [ 518.035105][ T2740] bridge_slave_1: left promiscuous mode [ 518.040877][ T2740] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.054146][ T2740] bridge_slave_0: left allmulticast mode [ 518.060052][ T2740] bridge_slave_0: left promiscuous mode [ 518.066037][ T2740] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.098086][ T2740] team0: Port device geneve1 removed [ 518.134426][ T2740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.143959][ T2740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.153574][ T2740] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 518.162774][ T2740] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 518.171732][ T2740] bond0 (unregistering): Released all slaves [ 518.180681][ T2740] bond1 (unregistering): (slave veth3): Releasing active interface [ 518.189289][ T2740] bond1 (unregistering): Released all slaves [ 518.198798][ T2740] bond2 (unregistering): (slave veth5): Releasing active interface [ 518.207452][ T2740] bond2 (unregistering): Released all slaves [ 518.216364][ T2740] bond3 (unregistering): (slave veth7): Releasing active interface [ 518.224794][ T2740] bond3 (unregistering): Released all slaves [ 518.288201][ T2740] tipc: Left network mode [ 518.316783][ T2740] hsr_slave_0: left promiscuous mode [ 518.325071][ T2740] hsr_slave_1: left promiscuous mode [ 518.338085][ T2740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.345613][ T2740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.355891][ T2740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.427321][T17768] loop2: detected capacity change from 0 to 2048 [ 518.433996][ T2740] team0 (unregistering): Port device team_slave_1 removed [ 518.449644][ T2740] team0 (unregistering): Port device team_slave_0 removed [ 518.477528][ T4276] loop2: p2 p3 p7 [ 518.500812][T17768] loop2: p2 p3 p7 [ 518.539122][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 518.548080][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 518.564854][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 518.604953][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 518.613915][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 518.634504][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 518.645893][T17730] chnl_net:caif_netlink_parms(): no params data found [ 518.695009][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 518.704065][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 518.717507][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 518.755261][T17730] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.762576][T17730] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.770084][T17730] bridge_slave_0: entered allmulticast mode [ 518.779274][T17730] bridge_slave_0: entered promiscuous mode [ 518.786501][T17730] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.793633][T17730] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.803451][T17730] bridge_slave_1: entered allmulticast mode [ 518.810650][T17730] bridge_slave_1: entered promiscuous mode [ 518.833059][T17730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.844118][T17730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.867787][T17730] team0: Port device team_slave_0 added [ 518.875100][T17730] team0: Port device team_slave_1 added [ 518.895475][T17730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.902556][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.928505][T17730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.940584][T17730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.947765][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.973766][T17730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.007081][ T2740] ------------[ cut here ]------------ [ 519.012731][ T2740] WARNING: CPU: 0 PID: 2740 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 519.022415][ T2740] Modules linked in: [ 519.026454][ T2740] CPU: 0 UID: 0 PID: 2740 Comm: kworker/u8:6 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 519.040914][ T2740] Tainted: [W]=WARN [ 519.044962][ T2740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.055093][ T2740] Workqueue: netns cleanup_net [ 519.059935][ T2740] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 519.065609][ T2740] Code: 48 8d bb 30 0e 00 00 e8 05 0a bd fc 48 8b bb 30 0e 00 00 e8 c9 8a c9 fc 5b 41 5e 41 5f 5d e9 0e 8d b3 00 cc e8 58 4c a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 4c a2 fc 90 0f 0b 90 4c 89 f7 e8 ce [ 519.085294][ T2740] RSP: 0018:ffffc90002ba7c60 EFLAGS: 00010293 [ 519.091391][ T2740] RAX: ffffffff84b5ad58 RBX: ffff88810a02c740 RCX: ffff888103e73180 [ 519.099454][ T2740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a02d540 [ 519.107538][ T2740] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 519.115663][ T2740] R10: ffffc90002ba7be8 R11: 0001c90002ba7be8 R12: ffffffff86c8b7c0 [ 519.123698][ T2740] R13: ffff88810a02c768 R14: ffff88810a02d540 R15: ffff88810a02c740 [ 519.131695][ T2740] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 519.140693][ T2740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.147324][ T2740] CR2: ffffffffdfa50000 CR3: 0000000131c56000 CR4: 00000000003506f0 [ 519.155367][ T2740] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 519.163464][ T2740] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 519.171457][ T2740] Call Trace: [ 519.174775][ T2740] [ 519.177722][ T2740] xfrm_net_exit+0x2d/0x60 [ 519.182246][ T2740] ops_undo_list+0x27b/0x410 [ 519.186882][ T2740] cleanup_net+0x2de/0x4d0 [ 519.191373][ T2740] process_scheduled_works+0x4cb/0x9d0 [ 519.197015][ T2740] worker_thread+0x582/0x770 [ 519.201647][ T2740] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 519.207550][ T2740] kthread+0x489/0x510 [ 519.211680][ T2740] ? finish_task_switch+0xad/0x2b0 [ 519.216926][ T2740] ? __pfx_worker_thread+0x10/0x10 [ 519.222131][ T2740] ? __pfx_kthread+0x10/0x10 [ 519.226827][ T2740] ret_from_fork+0xda/0x150 [ 519.231410][ T2740] ? __pfx_kthread+0x10/0x10 [ 519.236086][ T2740] ret_from_fork_asm+0x1a/0x30 [ 519.240890][ T2740] [ 519.243978][ T2740] ---[ end trace 0000000000000000 ]--- [ 519.269335][T17730] hsr_slave_0: entered promiscuous mode [ 519.296626][T17730] hsr_slave_1: entered promiscuous mode [ 519.310822][T17730] debugfs: 'hsr0' already exists in 'hsr' [ 519.316772][T17730] Cannot create hsr debugfs directory [ 519.420628][T17802] loop9: detected capacity change from 0 to 1024 [ 519.427740][T17802] EXT4-fs: Ignoring removed orlov option [ 519.450736][T17802] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.497828][T17571] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.693527][T17730] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 519.720917][T17730] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 519.730109][T17730] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 519.748186][T17730] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 519.788715][T17817] loop9: detected capacity change from 0 to 2048 [ 519.820136][T17730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.833949][T17730] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.834615][ T4276] loop9: p2 p3 p7 [ 519.846165][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.853273][ T2740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.862912][ T2740] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.869370][T17817] loop9: p2 p3 p7 [ 519.870014][ T2740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.973802][T17730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.084538][T17730] veth0_vlan: entered promiscuous mode [ 520.092427][T17730] veth1_vlan: entered promiscuous mode [ 520.108116][T17730] veth0_macvtap: entered promiscuous mode [ 520.115612][T17730] veth1_macvtap: entered promiscuous mode [ 520.126919][T17730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.138262][T17730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.149604][ T274] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.159161][ T274] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.170666][ T274] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.179730][ T274] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.228781][T17844] netlink: 'syz.5.4753': attribute type 10 has an invalid length. [ 520.239381][T17844] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.248722][T17844] bond0: (slave team0): Enslaving as an active interface with an up link [ 520.258720][T17844] netlink: 'syz.5.4753': attribute type 10 has an invalid length. [ 520.270960][T17844] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 520.289847][T17844] siw: device registration error -23 [ 520.323550][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4779'. [ 520.386045][T17857] 0{X功: renamed from gretap0 [ 520.403077][T17857] 0{X功: entered allmulticast mode [ 520.419110][T17857] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 520.665132][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 520.665150][ T29] audit: type=1326 audit(1755239634.702:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 520.695231][ T29] audit: type=1326 audit(1755239634.702:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 520.699890][T17880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17880 comm=syz.5.4793 [ 520.718966][ T29] audit: type=1326 audit(1755239634.702:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 520.755260][ T29] audit: type=1326 audit(1755239634.702:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 520.778920][ T29] audit: type=1326 audit(1755239634.702:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 520.802816][ T29] audit: type=1326 audit(1755239634.702:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 520.826631][ T29] audit: type=1326 audit(1755239634.702:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 520.850235][ T29] audit: type=1326 audit(1755239634.702:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 520.873848][ T29] audit: type=1326 audit(1755239634.702:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 520.897479][ T29] audit: type=1326 audit(1755239634.702:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17879 comm="syz.5.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e46eebe9 code=0x7ffc0000 [ 521.029418][T17903] netlink: 'syz.4.4801': attribute type 27 has an invalid length. [ 521.041672][T17903] 0{X功: left allmulticast mode [ 521.064536][T17903] vlan2: left promiscuous mode [ 521.069349][T17903] 0{X功: left promiscuous mode [ 521.153566][T17903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.164316][T17903] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.174345][T17903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.562124][T17942] loop2: detected capacity change from 0 to 512 [ 521.621304][T17942] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.646169][T17942] EXT4-fs (loop2): mount failed [ 522.229734][T17983] loop2: detected capacity change from 0 to 2048 [ 522.251889][T17984] loop5: detected capacity change from 0 to 256 [ 522.320284][ T4276] loop2: p2 p3 p7 [ 522.345556][T17984] netlink: 'syz.5.4834': attribute type 10 has an invalid length. [ 522.390485][T17983] loop2: p2 p3 p7 [ 522.404544][T17984] team0: Port device geneve1 added [ 522.433017][T17986] netlink: 'syz.1.4835': attribute type 10 has an invalid length. [ 522.459917][T17986] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.487925][T17986] bond0: (slave team0): Enslaving as an active interface with an up link [ 522.524480][T17986] netlink: 'syz.1.4835': attribute type 10 has an invalid length. [ 522.577788][T17989] siw: device registration error -23 [ 522.674517][T17986] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 522.862521][ T1034] ================================================================== [ 522.870660][ T1034] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 522.877679][ T1034] [ 522.879995][ T1034] read-write to 0xffff888237c29d64 of 4 bytes by task 3611 on cpu 0: [ 522.888079][ T1034] wq_worker_running+0x95/0x120 [ 522.892996][ T1034] schedule_timeout+0xb7/0x170 [ 522.897768][ T1034] msleep+0x50/0x90 [ 522.901590][ T1034] nsim_fib_event_work+0x1ebc/0x21a0 [ 522.906891][ T1034] process_scheduled_works+0x4cb/0x9d0 [ 522.912355][ T1034] worker_thread+0x582/0x770 [ 522.916954][ T1034] kthread+0x489/0x510 [ 522.921021][ T1034] ret_from_fork+0xda/0x150 [ 522.925522][ T1034] ret_from_fork_asm+0x1a/0x30 [ 522.930300][ T1034] [ 522.932617][ T1034] read to 0xffff888237c29d64 of 4 bytes by task 1034 on cpu 1: [ 522.940147][ T1034] kick_pool+0x49/0x2d0 [ 522.944294][ T1034] __queue_work+0x8cb/0xb50 [ 522.948788][ T1034] queue_work_on+0xd1/0x160 [ 522.953284][ T1034] process_srcu+0x999/0xbc0 [ 522.957788][ T1034] process_scheduled_works+0x4cb/0x9d0 [ 522.963251][ T1034] worker_thread+0x582/0x770 [ 522.967847][ T1034] kthread+0x489/0x510 [ 522.971914][ T1034] ret_from_fork+0xda/0x150 [ 522.976410][ T1034] ret_from_fork_asm+0x1a/0x30 [ 522.981192][ T1034] [ 522.983525][ T1034] value changed: 0x00000000 -> 0x00000001 [ 522.989232][ T1034] [ 522.991546][ T1034] Reported by Kernel Concurrency Sanitizer on: [ 522.997690][ T1034] CPU: 1 UID: 0 PID: 1034 Comm: kworker/1:2 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 523.011751][ T1034] Tainted: [W]=WARN [ 523.015548][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.025596][ T1034] Workqueue: rcu_gp process_srcu [ 523.030536][ T1034] ================================================================== [ 523.079057][T18003] netlink: 'syz.1.4843': attribute type 13 has an invalid length. [ 523.281088][T18003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.