last executing test programs: 46.685486969s ago: executing program 4 (id=1977): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bea200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) 46.659137839s ago: executing program 4 (id=1979): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYRES64], 0x1, 0x53b, &(0x7f0000000ac0)="$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") lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) 46.582489789s ago: executing program 4 (id=1982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x3, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000980), 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x8102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) sendfile(r10, r10, 0x0, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)='%-010d \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) shutdown(r0, 0x1) 46.53078955s ago: executing program 4 (id=1983): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_cmd={0x37, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x68c5}, 0x80) write$char_usb(r3, &(0x7f0000000000)='-0', 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000008c0)=@assoc_value={r8, 0x1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2082) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1000080, &(0x7f0000000900)={[], [{@seclabel}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 46.199311592s ago: executing program 4 (id=1992): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x3}}, 0x10) 46.044837763s ago: executing program 4 (id=1994): gettid() r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) flistxattr(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x20000000) inotify_rm_watch(r4, r6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r7, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 44.368638143s ago: executing program 3 (id=2012): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = memfd_secret(0x80000) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000180)=0x30) mount$nfs4(&(0x7f00000004c0)='ma\xba%f\xa6c\a#\x90\xac\x82\xce\xbf\x05h \xe1-\xb7;8\xaf\xd9\x00\x00\x00\x00\x00\x00\x00\xd9~cz\xf4\xdb\xb1\x1b\x81\x88\xde\n\xde\x94M$}(V\xc6Xl\x02\xf5\xae\xc6\xbe\xbd~:H\xaf/\xdfSE\xa96\xe7y\xf6\xb1\x82\x11\x15\x94\xe0\xcd\x85\x17\x86\x8f\xaf\x96\x9dd\xf9(j\x8f\xc4\xc0\xd7\xb9(\xea\x87K;\x160z\x12~f}\x9a\xdf\xe1\x91\xe2\xb7d\x11. \xe9\xa9(\xa9&\xc5N\xf6\xb25[j\x924\xc4\xdb\xa3\xc5\x11\az\xa27\x1ew\x18\x81Y\x9f0\x92\x1e\xb9\xab\xb0?\xd6\xd0\xce\xdd\xe8\x8cJV\xe1\x87I\xa53\x14\r\xd5\xda\x96i\xc2\x91\xa7d\xd2&\xfd\x84e\xce\xe7\x1c\x1cZ\xba\xb0\x9d\xed\xc3\x8d\xec\xcf\x8a\xf7\xe6\x02%\x83\xaf\x7f3\x066\xf7T\x13>\xc5^\xa2\x0f9\x91\xf8\x0f\b\xd3\xa1\xf0xT\xb5>\x01%\xc9\x9a\x0e\"\xf9\x16\a\n\xe5]\a(\x93\xf9<\x8e\x81b\xbc~\xf8\xcc\x83b\xf3\xc7\xea\xba\x9a\x86g\x91\xab^K\xa3\xde/\x84Z\xa5\x87\xef{C\xaae%Q\b\xd1j\xfdc87)\x91^\x17', &(0x7f0000000180)='.\x00', 0x0, 0x3201000, 0x0) fchownat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f6111"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 43.596010129s ago: executing program 3 (id=2017): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bea200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) 43.536826159s ago: executing program 3 (id=2019): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@local, 0x4d5, 0x33}, @in6=@private0, {0x3}, {0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x7fffffff, 0x100004}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 43.492305659s ago: executing program 3 (id=2021): r0 = socket(0x10, 0x3, 0x9) sendmsg$nl_route_sched_retired(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x10}, {0x6, 0x10}}}, 0x24}}, 0x4080) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x40, 0x32, 0x8, 0x0, 0x5, 0x10001, 0x46, 0xffff, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r1, @in={{0x2, 0x4e23, @multicast1}}, 0x2, 0x5}, &(0x7f0000000100)=0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f0000000ac0)=""/4113, 0x1011}], 0x1, 0x0, 0x0, 0x6) 43.256430561s ago: executing program 3 (id=2024): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) close(r0) 43.063522882s ago: executing program 3 (id=2025): r0 = creat(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) name_to_handle_at(r0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="180000000200000008000000070000d920a3bb8803e47f007c0c000001000000fabab89ac55a654920ca5c94cfe6734b8cbf6b2cd7a6eb97e58a6904415f1b"], &(0x7f0000000840), 0x200) 43.020244592s ago: executing program 32 (id=2025): r0 = creat(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) name_to_handle_at(r0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="180000000200000008000000070000d920a3bb8803e47f007c0c000001000000fabab89ac55a654920ca5c94cfe6734b8cbf6b2cd7a6eb97e58a6904415f1b"], &(0x7f0000000840), 0x200) 30.9407299s ago: executing program 33 (id=1994): gettid() r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) flistxattr(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x20000000) inotify_rm_watch(r4, r6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r7, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 3.220584239s ago: executing program 5 (id=2504): r0 = gettid() sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0xffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socket(0xa, 0x5, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4b3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.107483429s ago: executing program 0 (id=2506): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 2.978536451s ago: executing program 0 (id=2508): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000180)=0x30) mount$nfs4(&(0x7f00000004c0)='ma\xba%f\xa6c\a#\x90\xac\x82\xce\xbf\x05h \xe1-\xb7;8\xaf\xd9\x00\x00\x00\x00\x00\x00\x00\xd9~cz\xf4\xdb\xb1\x1b\x81\x88\xde\n\xde\x94M$}(V\xc6Xl\x02\xf5\xae\xc6\xbe\xbd~:H\xaf/\xdfSE\xa96\xe7y\xf6\xb1\x82\x11\x15\x94\xe0\xcd\x85\x17\x86\x8f\xaf\x96\x9dd\xf9(j\x8f\xc4\xc0\xd7\xb9(\xea\x87K;\x160z\x12~f}\x9a\xdf\xe1\x91\xe2\xb7d\x11. \xe9\xa9(\xa9&\xc5N\xf6\xb25[j\x924\xc4\xdb\xa3\xc5\x11\az\xa27\x1ew\x18\x81Y\x9f0\x92\x1e\xb9\xab\xb0?\xd6\xd0\xce\xdd\xe8\x8cJV\xe1\x87I\xa53\x14\r\xd5\xda\x96i\xc2\x91\xa7d\xd2&\xfd\x84e\xce\xe7\x1c\x1cZ\xba\xb0\x9d\xed\xc3\x8d\xec\xcf\x8a\xf7\xe6\x02%\x83\xaf\x7f3\x066\xf7T\x13>\xc5^\xa2\x0f9\x91\xf8\x0f\b\xd3\xa1\xf0xT\xb5>\x01%\xc9\x9a\x0e\"\xf9\x16\a\n\xe5]\a(\x93\xf9<\x8e\x81b\xbc~\xf8\xcc\x83b\xf3\xc7\xea\xba\x9a\x86g\x91\xab^K\xa3\xde/\x84Z\xa5\x87\xef{C\xaae%Q\b\xd1j\xfdc87)\x91^\x17', &(0x7f0000000180)='.\x00', 0x0, 0x3201000, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f6111"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.824932652s ago: executing program 6 (id=2512): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="09fc071200000f0000090000000000174a00bea431453cbe", 0x18}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x103000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0xffffffffffffffff, 0x6, 0xff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="bbbde6995bf3", 0x0, 0x80000000, 0x10024, 0x3, 0x0}) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r8, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2400, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x17, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 2.728024602s ago: executing program 6 (id=2513): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c0000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0x5b0) r3 = syz_genetlink_get_family_id$fou(0x0, r2) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0xd04, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, 0x0, &(0x7f00000001c0)=r4}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fremovexattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.627067713s ago: executing program 0 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 1.996589137s ago: executing program 6 (id=2517): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000106fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="30200200090000001c0012800bc1cf0001006d6163656300000c0002800561c6a5b56d"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') lseek(r2, 0x10001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x105a41) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000f80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="fc010000", @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf250600000014000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="580001801400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014746164763000b5b266ba8b6470ce4aabcbc2cd0ff25f00000000000000001400020076657468305f746467650008000300000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a800018014000200766c616e30000000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000014000200636169663000000000000000000000001400020076657468305f766c616e0000000000001400020077673100000000000000000000000000140002006d6163766c616e3000000000000000001400020076657468315f766972745f7769666900200001800800030001000000140002006d6163766c616e300000000000000000780001801400020074756e6c300000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030003000000140002006272696467653000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1fc}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) 1.827747648s ago: executing program 6 (id=2518): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_cmd={0x37, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x68c5}, 0x80) write$char_usb(r3, &(0x7f0000000000)='-0', 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000008c0)=@assoc_value={r8, 0x1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2082) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1000080, &(0x7f0000000900)={[], [{@seclabel}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.264155061s ago: executing program 0 (id=2520): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0xffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) 1.258404272s ago: executing program 2 (id=2521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 1.166838212s ago: executing program 6 (id=2522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x5, 0x3, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) ioctl(r0, 0x3, &(0x7f00000001c0)="4c5cb9c1b978d4541eecbbed0447e1d4f905d05b49cb7952610241593837c84b5d61e9d06d325965af9273bbdc4b306b7907fe744aad341d5a21a7bce480744bd0937e33ac137f63c2434ca0022258fb21f0cf3b7c2b333da148b99c1e23a03bbc58742954ac590d66fde0c29e4d98b73700e15dee8d164d6c712dc67a432421529f5a23f3e0b56fba0260d8ae80714ae707fbb0ca8a0336e5c53d21e66a3640b46f6240475f52fea199d2094c4d531ca011ac988f6a0f4191a384442e8cbafcea78153fece2c583a6271cc1149710653bdf8f6e32649d559b5d2af83605149fe2e0c25ae9988d10749f") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r1, 0x0, 0x3, 0x800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) 660.758435ms ago: executing program 2 (id=2523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000000)) 628.201926ms ago: executing program 1 (id=2524): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x1, 0x0) 568.707186ms ago: executing program 2 (id=2525): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmdt(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900), 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c00)={0x1, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd5) r5 = syz_io_uring_setup(0x32cf, &(0x7f0000001cc0)={0x0, 0xf07d, 0x8000, 0x40000, 0x102}, &(0x7f00000007c0)=0x0, &(0x7f0000000380)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffff001}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x11, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1003}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000700)=""/148, 0x94}, {&(0x7f0000001a40)=""/245, 0xf5}, {&(0x7f0000002940)=""/226, 0xe2}], 0x9, 0x1d}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRESDEC=r2], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001940)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b80000000b0000000a0000000000000e020000000000000010000000040000930d00000002000000080000000500000007000000000000000600000008000000b84d00003a00000002000000000000000a0f00000b0000000000000e05000000030000000b0100000000001102000000090000000000000000000003000000000400000001004a0bb83f00000e0000000000c8a667460000010000000000000000000003000000000100000004000000"], &(0x7f0000004b40)=""/4101, 0xdb, 0x1005, 0x1, 0xc3a}, 0x28) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001840)=ANY=[@ANYBLOB="63202a042a20776d003309f8fbed092c8f12e7e11d5cc672afcddac0c9bbdbc20364c07ac9579f17807e79635cf524a77f608e6f670a3cc857ac999f6c9b858f23b8dacde8d542e878e2a2f3b7cfac3f7f3deba2f710b4d069d4d50c6ef07fdfa91e0b9fcadc39b6d24c2f2b4880be372f3394217cac3401ee92edbb395a2f706f6f778cd3d8dc904cd0335fb66f9fb8b60bde56ac7795de79c3252ff6c4691cdfce3540cca802"], 0x9) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 568.392076ms ago: executing program 1 (id=2526): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x105a41) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000400)=r3}, 0x20) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) 546.542476ms ago: executing program 5 (id=2527): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000106fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="30200200090000001c0012800bc1cf0001006d6163656300000c0002800561c6a5b56d"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x42, 0x60) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') lseek(r2, 0x10001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x105a41) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000f80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="fc010000", @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf250600000014000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="580001801400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014746164763000b5b266ba8b6470ce4aabcbc2cd0ff25f00000000000000001400020076657468305f746467650008000300000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a800018014000200766c616e30000000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000014000200636169663000000000000000000000001400020076657468305f766c616e0000000000001400020077673100000000000000000000000000140002006d6163766c616e3000000000000000001400020076657468315f766972745f7769666900200001800800030001000000140002006d6163766c616e300000000000000000780001801400020074756e6c300000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030003000000140002006272696467653000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1fc}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) 533.502296ms ago: executing program 1 (id=2528): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmdt(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900), 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c00)={0x1, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd5) r5 = syz_io_uring_setup(0x32cf, &(0x7f0000001cc0)={0x0, 0xf07d, 0x8000, 0x40000, 0x102}, &(0x7f00000007c0)=0x0, &(0x7f0000000380)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffff001}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x11, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1003}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000700)=""/148, 0x94}, {&(0x7f0000001a40)=""/245, 0xf5}, {&(0x7f0000002940)=""/226, 0xe2}], 0x9, 0x1d}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRESDEC=r2], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001940)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b80000000b0000000a0000000000000e020000000000000010000000040000930d00000002000000080000000500000007000000000000000600000008000000b84d00003a00000002000000000000000a0f00000b0000000000000e05000000030000000b0100000000001102000000090000000000000000000003000000000400000001004a0bb83f00000e0000000000c8a667"], &(0x7f0000004b40)=""/4101, 0xdb, 0x1005, 0x1, 0xc3a}, 0x28) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001840)=ANY=[@ANYBLOB="63202a042a20776d003309f8fbed092c8f12e7e11d5cc672afcddac0c9bbdbc20364c07ac9579f17807e79635cf524a77f608e6f670a3cc857ac999f6c9b858f23b8dacde8d542e878e2a2f3b7cfac3f7f3deba2f710b4d069d4d50c6ef07fdfa91e0b9fcadc39b6d24c2f2b4880be372f3394217cac3401ee92edbb395a2f706f6f778cd3d8dc904cd0335fb66f9fb8b60bde56ac7795de79c3252ff6c4691cdfce3540cca802"], 0x9) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 510.329827ms ago: executing program 2 (id=2529): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = memfd_secret(0x80000) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000180)=0x30) mount$nfs4(&(0x7f00000004c0)='ma\xba%f\xa6c\a#\x90\xac\x82\xce\xbf\x05h \xe1-\xb7;8\xaf\xd9\x00\x00\x00\x00\x00\x00\x00\xd9~cz\xf4\xdb\xb1\x1b\x81\x88\xde\n\xde\x94M$}(V\xc6Xl\x02\xf5\xae\xc6\xbe\xbd~:H\xaf/\xdfSE\xa96\xe7y\xf6\xb1\x82\x11\x15\x94\xe0\xcd\x85\x17\x86\x8f\xaf\x96\x9dd\xf9(j\x8f\xc4\xc0\xd7\xb9(\xea\x87K;\x160z\x12~f}\x9a\xdf\xe1\x91\xe2\xb7d\x11. \xe9\xa9(\xa9&\xc5N\xf6\xb25[j\x924\xc4\xdb\xa3\xc5\x11\az\xa27\x1ew\x18\x81Y\x9f0\x92\x1e\xb9\xab\xb0?\xd6\xd0\xce\xdd\xe8\x8cJV\xe1\x87I\xa53\x14\r\xd5\xda\x96i\xc2\x91\xa7d\xd2&\xfd\x84e\xce\xe7\x1c\x1cZ\xba\xb0\x9d\xed\xc3\x8d\xec\xcf\x8a\xf7\xe6\x02%\x83\xaf\x7f3\x066\xf7T\x13>\xc5^\xa2\x0f9\x91\xf8\x0f\b\xd3\xa1\xf0xT\xb5>\x01%\xc9\x9a\x0e\"\xf9\x16\a\n\xe5]\a(\x93\xf9<\x8e\x81b\xbc~\xf8\xcc\x83b\xf3\xc7\xea\xba\x9a\x86g\x91\xab^K\xa3\xde/\x84Z\xa5\x87\xef{C\xaae%Q\b\xd1j\xfdc87)\x91^\x17', 0x0, 0x0, 0x3201000, 0x0) fchownat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f6111"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 438.447167ms ago: executing program 5 (id=2530): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='rpc_clnt_clone_err\x00'}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ff499fff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 419.010157ms ago: executing program 1 (id=2531): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 358.518547ms ago: executing program 0 (id=2532): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_cmd={0x37, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x68c5}, 0x80) write$char_usb(r3, &(0x7f0000000000)='-0', 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000008c0)=@assoc_value={r8, 0x1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2082) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1000080, &(0x7f0000000900)={[], [{@seclabel}]}, 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 275.686778ms ago: executing program 5 (id=2533): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) personality(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x800, 0xfffffffa) 257.853038ms ago: executing program 1 (id=2534): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="09fc071200000f0000090000000000174a00bea431453cbe", 0x18}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x103000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000140)={0x53, 0xffffffffffffffff, 0x6, 0xff, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="bbbde6995bf3", 0x0, 0x80000000, 0x10024, 0x3, 0x0}) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r5, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 244.566848ms ago: executing program 6 (id=2535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x7f, 0xe, 0x7ffffffe}]}) cachestat(r3, &(0x7f0000000140)={0xffffffffffffffff, 0x3}, &(0x7f00000001c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x20, r5, 0x70d, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x24000800) r6 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB="736c7a653d742c005863cd006dc5967939fce49bc5c05200ef84a5cddfe172c0"]) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 184.700418ms ago: executing program 2 (id=2536): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) personality(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x800, 0xfffffffa) 157.536338ms ago: executing program 1 (id=2537): r0 = gettid() sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0xffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socket(0xa, 0x5, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4b3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 98.959089ms ago: executing program 0 (id=2538): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = memfd_secret(0x80000) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000180)=0x30) mount$nfs4(&(0x7f00000004c0)='ma\xba%f\xa6c\a#\x90\xac\x82\xce\xbf\x05h \xe1-\xb7;8\xaf\xd9\x00\x00\x00\x00\x00\x00\x00\xd9~cz\xf4\xdb\xb1\x1b\x81\x88\xde\n\xde\x94M$}(V\xc6Xl\x02\xf5\xae\xc6\xbe\xbd~:H\xaf/\xdfSE\xa96\xe7y\xf6\xb1\x82\x11\x15\x94\xe0\xcd\x85\x17\x86\x8f\xaf\x96\x9dd\xf9(j\x8f\xc4\xc0\xd7\xb9(\xea\x87K;\x160z\x12~f}\x9a\xdf\xe1\x91\xe2\xb7d\x11. \xe9\xa9(\xa9&\xc5N\xf6\xb25[j\x924\xc4\xdb\xa3\xc5\x11\az\xa27\x1ew\x18\x81Y\x9f0\x92\x1e\xb9\xab\xb0?\xd6\xd0\xce\xdd\xe8\x8cJV\xe1\x87I\xa53\x14\r\xd5\xda\x96i\xc2\x91\xa7d\xd2&\xfd\x84e\xce\xe7\x1c\x1cZ\xba\xb0\x9d\xed\xc3\x8d\xec\xcf\x8a\xf7\xe6\x02%\x83\xaf\x7f3\x066\xf7T\x13>\xc5^\xa2\x0f9\x91\xf8\x0f\b\xd3\xa1\xf0xT\xb5>\x01%\xc9\x9a\x0e\"\xf9\x16\a\n\xe5]\a(\x93\xf9<\x8e\x81b\xbc~\xf8\xcc\x83b\xf3\xc7\xea\xba\x9a\x86g\x91\xab^K\xa3\xde/\x84Z\xa5\x87\xef{C\xaae%Q\b\xd1j\xfdc87)\x91^\x17', &(0x7f0000000180)='.\x00', 0x0, 0x3201000, 0x0) fchownat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 97.896959ms ago: executing program 5 (id=2539): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmdt(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900), 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c00)={0x1, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd5) r5 = syz_io_uring_setup(0x32cf, &(0x7f0000001cc0)={0x0, 0xf07d, 0x8000, 0x40000, 0x102}, &(0x7f00000007c0)=0x0, &(0x7f0000000380)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffff001}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x11, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1003}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000700)=""/148, 0x94}, {&(0x7f0000001a40)=""/245, 0xf5}, {&(0x7f0000002940)=""/226, 0xe2}], 0x9, 0x1d}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRESDEC=r2], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001940)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b80000000b0000000a0000000000000e020000000000000010000000040000930d00000002000000080000000500000007000000000000000600000008000000b84d00003a00000002000000000000000a0f00000b0000000000000e05000000030000000b0100000000001102000000090000000000000000000003000000000400000001004a0bb83f00000e0000000000c8a667460000010000000000000000000003000000000100000004000000"], &(0x7f0000004b40)=""/4101, 0xdb, 0x1005, 0x1, 0xc3a}, 0x28) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001840)=ANY=[@ANYBLOB="63202a042a20776d003309f8fbed092c8f12e7e11d5cc672afcddac0c9bbdbc20364c07ac9579f17807e79635cf524a77f608e6f670a3cc857ac999f6c9b858f23b8dacde8d542e878e2a2f3b7cfac3f7f3deba2f710b4d069d4d50c6ef07fdfa91e0b9fcadc39b6d24c2f2b4880be372f3394217cac3401ee92edbb395a2f706f6f778cd3d8dc904cd0335fb66f9fb8b60bde56ac7795de79c3252ff6c4691cdfce3540cca802"], 0x9) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 43.468539ms ago: executing program 2 (id=2540): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x758, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xa4}, 0x800, 0x0, 0xff, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0xff, 0x3, 0x0, 0x66c3}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r2, 0x5414, &(0x7f0000000040)) 0s ago: executing program 5 (id=2541): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): T9194] bridge0: port 1(macsec1) entered disabled state [ 140.436781][ T9194] bridge0: left allmulticast mode [ 140.598702][ T9211] bond0: (slave batadv0): Releasing active interface [ 140.780796][ T9219] lo speed is unknown, defaulting to 1000 [ 140.823527][ T9223] loop2: detected capacity change from 0 to 256 [ 140.880325][ T9227] loop3: detected capacity change from 0 to 164 [ 141.049966][ T9239] lo speed is unknown, defaulting to 1000 [ 141.172531][ T9246] loop3: detected capacity change from 0 to 256 [ 141.469701][ T9265] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.504442][ T9275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9275 comm=syz.3.1908 [ 141.691199][ T9295] FAULT_INJECTION: forcing a failure. [ 141.691199][ T9295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.704550][ T9295] CPU: 1 UID: 0 PID: 9295 Comm: syz.0.1920 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 141.704698][ T9295] Tainted: [W]=WARN [ 141.704706][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.704801][ T9295] Call Trace: [ 141.704808][ T9295] [ 141.704816][ T9295] __dump_stack+0x1d/0x30 [ 141.704845][ T9295] dump_stack_lvl+0xe8/0x140 [ 141.704873][ T9295] dump_stack+0x15/0x1b [ 141.704902][ T9295] should_fail_ex+0x265/0x280 [ 141.704929][ T9295] should_fail_alloc_page+0xf2/0x100 [ 141.704968][ T9295] __alloc_frozen_pages_noprof+0xff/0x360 [ 141.705070][ T9295] alloc_pages_mpol+0xb3/0x260 [ 141.705095][ T9295] folio_alloc_mpol_noprof+0x39/0x80 [ 141.705127][ T9295] shmem_get_folio_gfp+0x3cf/0xd60 [ 141.705182][ T9295] shmem_write_begin+0xa8/0x190 [ 141.705283][ T9295] generic_perform_write+0x184/0x490 [ 141.705360][ T9295] shmem_file_write_iter+0xc5/0xf0 [ 141.705394][ T9295] do_iter_readv_writev+0x4a1/0x540 [ 141.705455][ T9295] vfs_writev+0x2df/0x8b0 [ 141.705510][ T9295] __se_sys_pwritev2+0xfc/0x1c0 [ 141.705551][ T9295] __x64_sys_pwritev2+0x67/0x80 [ 141.705638][ T9295] x64_sys_call+0x2c59/0x3000 [ 141.705668][ T9295] do_syscall_64+0xd2/0x200 [ 141.705688][ T9295] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.705855][ T9295] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 141.705888][ T9295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.705982][ T9295] RIP: 0033:0x7f658055f6c9 [ 141.706020][ T9295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.706043][ T9295] RSP: 002b:00007f657efc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 141.706062][ T9295] RAX: ffffffffffffffda RBX: 00007f65807b5fa0 RCX: 00007f658055f6c9 [ 141.706075][ T9295] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 141.706087][ T9295] RBP: 00007f657efc7090 R08: 0000000000000000 R09: 0000000000000000 [ 141.706098][ T9295] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000002 [ 141.706140][ T9295] R13: 00007f65807b6038 R14: 00007f65807b5fa0 R15: 00007ffe32edb168 [ 141.706159][ T9295] [ 141.909895][ T9298] netlink: 'syz.4.1922': attribute type 13 has an invalid length. [ 141.971453][ T9304] lo speed is unknown, defaulting to 1000 [ 142.121159][ T9318] tipc: Started in network mode [ 142.126191][ T9318] tipc: Node identity da5aa84f4509, cluster identity 4711 [ 142.133477][ T9318] tipc: Enabled bearer , priority 0 [ 142.158355][ T9318] veth1_vlan: left promiscuous mode [ 142.163661][ T9318] veth1_vlan: entered promiscuous mode [ 142.169214][ T9318] veth1_vlan: entered allmulticast mode [ 142.177897][ T9317] tipc: Disabling bearer [ 142.253351][ T9329] loop1: detected capacity change from 0 to 512 [ 142.259212][ T9333] loop5: detected capacity change from 0 to 3847 [ 142.304197][ T3494] Buffer I/O error on dev loop5, logical block 480, async page read [ 142.337361][ T9333] loop5: detected capacity change from 3847 to 9007 [ 142.357233][ T3494] Buffer I/O error on dev loop5, logical block 1125, async page read [ 142.562817][ T9347] netlink: 'syz.3.1938': attribute type 13 has an invalid length. [ 142.578792][ T9347] macsec1: entered allmulticast mode [ 142.584267][ T9347] bridge0: entered allmulticast mode [ 142.590217][ T9347] bridge0: port 3(macsec1) entered blocking state [ 142.596728][ T9347] bridge0: port 3(macsec1) entered disabled state [ 142.610311][ T9347] bridge0: left allmulticast mode [ 142.754485][ T9362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9362 comm=syz.3.1948 [ 142.908754][ T9373] netlink: 'syz.0.1952': attribute type 13 has an invalid length. [ 142.923035][ T9373] macsec1: entered allmulticast mode [ 142.928468][ T9373] bridge0: entered allmulticast mode [ 142.934571][ T9373] bridge0: port 3(macsec1) entered blocking state [ 142.941114][ T9373] bridge0: port 3(macsec1) entered disabled state [ 143.051371][ T9373] bridge0: left allmulticast mode [ 143.128138][ T9376] lo speed is unknown, defaulting to 1000 [ 143.170188][ T9379] loop4: detected capacity change from 0 to 512 [ 143.198948][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 143.198967][ T29] audit: type=1326 audit(1762394649.407:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.426888][ T9384] FAULT_INJECTION: forcing a failure. [ 143.426888][ T9384] name failslab, interval 1, probability 0, space 0, times 0 [ 143.439597][ T9384] CPU: 0 UID: 0 PID: 9384 Comm: syz.0.1956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.439639][ T9384] Tainted: [W]=WARN [ 143.439646][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.439659][ T9384] Call Trace: [ 143.439667][ T9384] [ 143.439678][ T9384] __dump_stack+0x1d/0x30 [ 143.439709][ T9384] dump_stack_lvl+0xe8/0x140 [ 143.439738][ T9384] dump_stack+0x15/0x1b [ 143.439762][ T9384] should_fail_ex+0x265/0x280 [ 143.439790][ T9384] should_failslab+0x8c/0xb0 [ 143.439838][ T9384] kmem_cache_alloc_noprof+0x50/0x480 [ 143.439871][ T9384] ? mas_alloc_nodes+0x1a2/0x210 [ 143.439920][ T9384] mas_alloc_nodes+0x1a2/0x210 [ 143.439968][ T9384] mas_preallocate+0x2ca/0x510 [ 143.440021][ T9384] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 143.440054][ T9384] vma_link+0x8b/0x220 [ 143.440093][ T9384] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 143.440121][ T9384] copy_vma+0x43d/0x560 [ 143.440159][ T9384] move_vma+0x42e/0xce0 [ 143.440203][ T9384] ? __get_unmapped_area+0x2c9/0x2f0 [ 143.440234][ T9384] mremap_to+0x3d8/0x430 [ 143.440281][ T9384] __se_sys_mremap+0x632/0xb30 [ 143.440328][ T9384] ? __bpf_trace_sys_enter+0x10/0x30 [ 143.440367][ T9384] ? trace_sys_enter+0xd0/0xf0 [ 143.440400][ T9384] __x64_sys_mremap+0x67/0x80 [ 143.440432][ T9384] x64_sys_call+0x2a28/0x3000 [ 143.440457][ T9384] do_syscall_64+0xd2/0x200 [ 143.440477][ T9384] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.440508][ T9384] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.440546][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.440578][ T9384] RIP: 0033:0x7f658055f6c9 [ 143.440600][ T9384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.440620][ T9384] RSP: 002b:00007f657efc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 143.440642][ T9384] RAX: ffffffffffffffda RBX: 00007f65807b5fa0 RCX: 00007f658055f6c9 [ 143.440661][ T9384] RDX: 0000000000600000 RSI: 0000000000a00000 RDI: 0000200000000000 [ 143.440679][ T9384] RBP: 00007f657efc7090 R08: 0000200000a00000 R09: 0000000000000000 [ 143.440692][ T9384] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 143.440706][ T9384] R13: 00007f65807b6038 R14: 00007f65807b5fa0 R15: 00007ffe32edb168 [ 143.440734][ T9384] [ 143.440898][ T29] audit: type=1326 audit(1762394649.447:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.694870][ T29] audit: type=1326 audit(1762394649.447:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.718610][ T29] audit: type=1326 audit(1762394649.447:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.742307][ T29] audit: type=1326 audit(1762394649.447:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.757352][ T9392] __nla_validate_parse: 7 callbacks suppressed [ 143.757375][ T9392] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1958'. [ 143.766376][ T29] audit: type=1326 audit(1762394649.457:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.773127][ T9391] lo speed is unknown, defaulting to 1000 [ 143.781127][ T29] audit: type=1326 audit(1762394649.457:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.834427][ T29] audit: type=1326 audit(1762394649.457:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.857951][ T29] audit: type=1326 audit(1762394649.457:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.881562][ T29] audit: type=1326 audit(1762394649.457:14070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.3.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f861ff0f6c9 code=0x7ffc0000 [ 143.995900][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1961'. [ 144.005007][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1961'. [ 144.078207][ T9404] rdma_op ffff88810241bd80 conn xmit_rdma 0000000000000000 [ 144.094398][ T9404] FAULT_INJECTION: forcing a failure. [ 144.094398][ T9404] name failslab, interval 1, probability 0, space 0, times 0 [ 144.107213][ T9404] CPU: 1 UID: 0 PID: 9404 Comm: syz.4.1963 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.107271][ T9404] Tainted: [W]=WARN [ 144.107279][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.107296][ T9404] Call Trace: [ 144.107303][ T9404] [ 144.107312][ T9404] __dump_stack+0x1d/0x30 [ 144.107342][ T9404] dump_stack_lvl+0xe8/0x140 [ 144.107368][ T9404] dump_stack+0x15/0x1b [ 144.107397][ T9404] should_fail_ex+0x265/0x280 [ 144.107423][ T9404] should_failslab+0x8c/0xb0 [ 144.107460][ T9404] __kmalloc_noprof+0xa5/0x570 [ 144.107507][ T9404] ? copy_splice_read+0xc2/0x660 [ 144.107567][ T9404] copy_splice_read+0xc2/0x660 [ 144.107604][ T9404] ? __pfx_copy_splice_read+0x10/0x10 [ 144.107633][ T9404] splice_direct_to_actor+0x26f/0x680 [ 144.107667][ T9404] ? __pfx_direct_splice_actor+0x10/0x10 [ 144.107771][ T9404] do_splice_direct+0xda/0x150 [ 144.107842][ T9404] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 144.107881][ T9404] do_sendfile+0x380/0x650 [ 144.107959][ T9404] __x64_sys_sendfile64+0x105/0x150 [ 144.108003][ T9404] x64_sys_call+0x2bb4/0x3000 [ 144.108033][ T9404] do_syscall_64+0xd2/0x200 [ 144.108059][ T9404] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.108149][ T9404] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.108192][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.108221][ T9404] RIP: 0033:0x7faad936f6c9 [ 144.108250][ T9404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.108274][ T9404] RSP: 002b:00007faad7dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 144.108300][ T9404] RAX: ffffffffffffffda RBX: 00007faad95c5fa0 RCX: 00007faad936f6c9 [ 144.108318][ T9404] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 144.108334][ T9404] RBP: 00007faad7dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 144.108351][ T9404] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 144.108367][ T9404] R13: 00007faad95c6038 R14: 00007faad95c5fa0 R15: 00007ffea5c15748 [ 144.108393][ T9404] [ 144.192380][ T9410] sctp: [Deprecated]: syz.0.1966 (pid 9410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.192380][ T9410] Use struct sctp_sack_info instead [ 144.390538][ T9424] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 144.526853][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1971'. [ 144.540197][ T9429] loop4: detected capacity change from 0 to 4096 [ 144.555732][ T9432] macsec1: entered allmulticast mode [ 144.561191][ T9432] bridge0: entered allmulticast mode [ 144.568442][ T9432] bridge0: port 3(macsec1) entered blocking state [ 144.575139][ T9432] bridge0: port 3(macsec1) entered disabled state [ 144.583173][ T9429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.618888][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.635031][ T9432] bridge0: left allmulticast mode [ 144.818250][ T9446] loop4: detected capacity change from 0 to 164 [ 144.883960][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 144.897960][ T9454] rdma_op ffff88811941f180 conn xmit_rdma 0000000000000000 [ 145.043790][ T9463] sctp: [Deprecated]: syz.4.1983 (pid 9463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.043790][ T9463] Use struct sctp_sack_info instead [ 145.066708][ T9463] loop4: detected capacity change from 0 to 1024 [ 145.075176][ T9475] FAULT_INJECTION: forcing a failure. [ 145.075176][ T9475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.084551][ T9469] loop2: detected capacity change from 0 to 512 [ 145.088335][ T9475] CPU: 0 UID: 0 PID: 9475 Comm: syz.3.1985 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.088367][ T9475] Tainted: [W]=WARN [ 145.088409][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.088437][ T9475] Call Trace: [ 145.088446][ T9475] [ 145.088458][ T9475] __dump_stack+0x1d/0x30 [ 145.088493][ T9475] dump_stack_lvl+0xe8/0x140 [ 145.088523][ T9475] dump_stack+0x15/0x1b [ 145.088550][ T9475] should_fail_ex+0x265/0x280 [ 145.088597][ T9475] should_fail+0xb/0x20 [ 145.088619][ T9475] should_fail_usercopy+0x1a/0x20 [ 145.088650][ T9475] _copy_from_user+0x1c/0xb0 [ 145.088688][ T9475] __sys_bind+0x106/0x2a0 [ 145.088736][ T9475] __x64_sys_bind+0x3f/0x50 [ 145.088790][ T9475] x64_sys_call+0x2b72/0x3000 [ 145.088835][ T9475] do_syscall_64+0xd2/0x200 [ 145.088863][ T9475] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.088906][ T9475] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.089011][ T9475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.089042][ T9475] RIP: 0033:0x7f861ff0f6c9 [ 145.089105][ T9475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.089202][ T9475] RSP: 002b:00007f861e92d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 145.089231][ T9475] RAX: ffffffffffffffda RBX: 00007f8620166180 RCX: 00007f861ff0f6c9 [ 145.089250][ T9475] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 000000000000000d [ 145.089268][ T9475] RBP: 00007f861e92d090 R08: 0000000000000000 R09: 0000000000000000 [ 145.089286][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.089304][ T9475] R13: 00007f8620166218 R14: 00007f8620166180 R15: 00007ffd2101b708 [ 145.089366][ T9475] [ 145.220346][ T9463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.236456][ T9469] msdos: Unknown parameter 'dots˜¶' [ 145.287854][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.599431][ T9485] lo speed is unknown, defaulting to 1000 [ 145.943076][ T9489] tmpfs: Bad value for 'mpol' [ 146.478010][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 146.509511][ T9512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2005'. [ 146.655907][ T9514] sctp: [Deprecated]: syz.1.2006 (pid 9514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.655907][ T9514] Use struct sctp_sack_info instead [ 146.683536][ T9514] loop1: detected capacity change from 0 to 1024 [ 146.710105][ T9514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.767429][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.802309][ T9512] loop2: detected capacity change from 0 to 8192 [ 146.871459][ T52] Bluetooth: hci0: Frame reassembly failed (-90) [ 147.178412][ T9534] lo speed is unknown, defaulting to 1000 [ 147.271379][ T9533] validate_nla: 2 callbacks suppressed [ 147.271401][ T9533] netlink: 'syz.3.2012': attribute type 13 has an invalid length. [ 147.338855][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 147.481101][ T9537] macsec1: entered allmulticast mode [ 147.486699][ T9537] bridge0: entered allmulticast mode [ 147.557332][ T9537] bridge0: port 3(macsec1) entered blocking state [ 147.563920][ T9537] bridge0: port 3(macsec1) entered disabled state [ 147.643824][ T9537] bridge0: left allmulticast mode [ 147.964842][ T9553] loop1: detected capacity change from 0 to 128 [ 147.985983][ T9553] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 147.993999][ T9553] FAT-fs (loop1): Filesystem has been set read-only [ 148.004543][ T9555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=9555 comm=syz.3.2021 [ 148.027466][ T9553] +\{]: attempt to access beyond end of device [ 148.027466][ T9553] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 148.054475][ T9555] loop3: detected capacity change from 0 to 512 [ 148.060972][ T9553] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.068900][ T9553] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.083914][ T9553] +\{]: attempt to access beyond end of device [ 148.083914][ T9553] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.097225][ T9553] +\{]: attempt to access beyond end of device [ 148.097225][ T9553] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.111957][ T9555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.149304][ T9553] +\{]: attempt to access beyond end of device [ 148.149304][ T9553] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.163291][ T9553] +\{]: attempt to access beyond end of device [ 148.163291][ T9553] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.185733][ T9553] +\{]: attempt to access beyond end of device [ 148.185733][ T9553] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.200582][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.229336][ T9553] +\{]: attempt to access beyond end of device [ 148.229336][ T9553] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.251501][ T9553] +\{]: attempt to access beyond end of device [ 148.251501][ T9553] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.264436][ T9553] +\{]: attempt to access beyond end of device [ 148.264436][ T9553] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.287537][ T9553] +\{]: attempt to access beyond end of device [ 148.287537][ T9553] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.479170][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 148.485441][ T29] audit: type=1400 audit(1762394654.687:14431): avc: denied { mounton } for pid=9563 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 148.686777][ T9563] lo speed is unknown, defaulting to 1000 [ 148.836689][ T9563] chnl_net:caif_netlink_parms(): no params data found [ 148.879296][ T9524] Bluetooth: hci0: command 0x1003 tx timeout [ 148.885491][ T3671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.923215][ T29] audit: type=1326 audit(1762394655.137:14432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 148.950445][ T9584] netlink: 'syz.0.2030': attribute type 10 has an invalid length. [ 148.972350][ T9563] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.979551][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.983999][ T29] audit: type=1326 audit(1762394655.157:14433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 148.999435][ T9563] bridge_slave_0: entered allmulticast mode [ 149.010064][ T29] audit: type=1326 audit(1762394655.157:14434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 149.016689][ T9563] bridge_slave_0: entered promiscuous mode [ 149.039383][ T29] audit: type=1326 audit(1762394655.157:14435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 149.046233][ T9563] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.068657][ T29] audit: type=1326 audit(1762394655.157:14436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 149.075723][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.075919][ T9563] bridge_slave_1: entered allmulticast mode [ 149.099402][ T29] audit: type=1326 audit(1762394655.157:14437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 149.099441][ T29] audit: type=1326 audit(1762394655.157:14438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 149.138557][ T9563] bridge_slave_1: entered promiscuous mode [ 149.159725][ T29] audit: type=1326 audit(1762394655.157:14439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 149.188890][ T29] audit: type=1326 audit(1762394655.157:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9582 comm="syz.0.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 149.232284][ T9592] netlink: 'syz.0.2032': attribute type 10 has an invalid length. [ 149.260824][ T9563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.280958][ T9563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.332333][ T9563] team0: Port device team_slave_0 added [ 149.359724][ T9563] team0: Port device team_slave_1 added [ 149.396755][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.403782][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.429824][ T9563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.448694][ T9594] syz.0.2033(9594): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 149.500027][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.507214][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.533733][ T9563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.610028][ T9601] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2035'. [ 149.632548][ T9563] hsr_slave_0: entered promiscuous mode [ 149.638706][ T9563] hsr_slave_1: entered promiscuous mode [ 149.671389][ T9563] debugfs: 'hsr0' already exists in 'hsr' [ 149.677164][ T9563] Cannot create hsr debugfs directory [ 149.687578][ T9603] netlink: 'syz.0.2037': attribute type 13 has an invalid length. [ 149.705965][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 149.728523][ T9603] macsec1: entered allmulticast mode [ 149.729551][ T9605] netlink: 'syz.2.2036': attribute type 13 has an invalid length. [ 149.733943][ T9603] bridge0: entered allmulticast mode [ 149.759775][ T9603] bridge0: port 3(macsec1) entered blocking state [ 149.766317][ T9603] bridge0: port 3(macsec1) entered disabled state [ 149.774274][ T9603] bridge0: left allmulticast mode [ 149.785202][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 149.798252][ T9605] macsec1: entered allmulticast mode [ 149.803722][ T9605] bridge0: entered allmulticast mode [ 149.809618][ T9605] bridge0: port 3(macsec1) entered blocking state [ 149.816149][ T9605] bridge0: port 3(macsec1) entered disabled state [ 149.823740][ T9605] bridge0: left allmulticast mode [ 149.885963][ T9563] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.895250][ T9563] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.904713][ T9563] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.914146][ T9563] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.972248][ T9563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.985865][ T9563] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.997847][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.004975][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.101339][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.108509][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.286184][ T9563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.343133][ T9632] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 150.427577][ T9633] lo speed is unknown, defaulting to 1000 [ 151.109872][ T9657] netlink: 'syz.2.2048': attribute type 13 has an invalid length. [ 151.131174][ T9563] veth0_vlan: entered promiscuous mode [ 151.145231][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2048'. [ 151.146654][ T9563] veth1_vlan: entered promiscuous mode [ 151.191271][ T9652] macsec1: entered allmulticast mode [ 151.196618][ T9652] bridge0: entered allmulticast mode [ 151.206014][ T9652] bridge0: port 3(macsec1) entered blocking state [ 151.212606][ T9652] bridge0: port 3(macsec1) entered disabled state [ 151.221154][ T9652] bridge0: left allmulticast mode [ 151.283295][ T9563] veth0_macvtap: entered promiscuous mode [ 151.302967][ T9563] veth1_macvtap: entered promiscuous mode [ 151.324413][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.340992][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.360731][ T9670] netlink: 'syz.0.2053': attribute type 13 has an invalid length. [ 151.373552][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.397751][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.422763][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.442298][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.452073][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 151.465085][ T9666] macsec1: entered allmulticast mode [ 151.470535][ T9666] bridge0: entered allmulticast mode [ 151.489541][ T9666] bridge0: port 3(macsec1) entered blocking state [ 151.496048][ T9666] bridge0: port 3(macsec1) entered disabled state [ 151.510617][ T9666] bridge0: left allmulticast mode [ 151.599480][ T9678] netlink: 'syz.5.2026': attribute type 13 has an invalid length. [ 151.673831][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.681279][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.703679][ T9668] 9pnet_fd: Insufficient options for proto=fd [ 151.710545][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2026'. [ 151.781004][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.815725][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.895198][ T9682] macsec1: entered allmulticast mode [ 151.900596][ T9682] bridge0: entered allmulticast mode [ 151.929397][ T9682] bridge0: port 3(macsec1) entered blocking state [ 151.936002][ T9682] bridge0: port 3(macsec1) entered disabled state [ 151.952700][ T9682] bridge0: left allmulticast mode [ 151.961876][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.043258][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.072341][ T9692] sctp: [Deprecated]: syz.0.2060 (pid 9692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.072341][ T9692] Use struct sctp_sack_info instead [ 152.102995][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.139322][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.195513][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 152.305687][ T9706] sctp: [Deprecated]: syz.1.2066 (pid 9706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.305687][ T9706] Use struct sctp_sack_info instead [ 152.398424][ T9723] loop1: detected capacity change from 0 to 1024 [ 152.403420][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2071'. [ 152.416798][ T9720] macsec1: entered allmulticast mode [ 152.422174][ T9720] bridge0: entered allmulticast mode [ 152.428207][ T9720] bridge0: port 3(macsec1) entered blocking state [ 152.434729][ T9720] bridge0: port 3(macsec1) entered disabled state [ 152.455537][ T9720] bridge0: left allmulticast mode [ 152.472345][ T9723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.534127][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.609763][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 152.632499][ T9734] loop5: detected capacity change from 0 to 512 [ 152.649436][ T9737] 9pnet_fd: Insufficient options for proto=fd [ 152.869077][ T9747] netlink: 'syz.2.2079': attribute type 10 has an invalid length. [ 152.877004][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2079'. [ 152.953527][ T9747] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 153.066560][ T9746] loop2: detected capacity change from 0 to 1024 [ 153.103958][ T9746] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 153.115011][ T9746] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 153.129690][ T9746] JBD2: no valid journal superblock found [ 153.135480][ T9746] EXT4-fs (loop2): Could not load journal inode [ 153.156369][ T9746] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 153.254235][ T9766] netlink: 'syz.5.2085': attribute type 10 has an invalid length. [ 153.286724][ T9766] team0: Port device dummy0 added [ 153.318776][ T9769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9769 comm=syz.2.2086 [ 153.370238][ T9773] $Hÿ: renamed from bond0 [ 153.376900][ T9773] $Hÿ: entered promiscuous mode [ 153.382152][ T9773] bond_slave_0: entered promiscuous mode [ 153.387986][ T9773] bond_slave_1: entered promiscuous mode [ 153.621764][ T9774] lo speed is unknown, defaulting to 1000 [ 153.893895][ T9784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9784 comm=syz.5.2089 [ 153.911026][ T29] kauditd_printk_skb: 618 callbacks suppressed [ 153.911045][ T29] audit: type=1326 audit(1762394660.127:15059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 153.943851][ T29] audit: type=1326 audit(1762394660.127:15060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 153.943883][ T29] audit: type=1326 audit(1762394660.157:15061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 153.944005][ T29] audit: type=1326 audit(1762394660.157:15062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 153.944086][ T29] audit: type=1326 audit(1762394660.157:15063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 153.968717][ T29] audit: type=1326 audit(1762394660.187:15064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.2.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 153.968758][ T29] audit: type=1326 audit(1762394660.187:15065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 153.968817][ T29] audit: type=1326 audit(1762394660.187:15066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 153.968852][ T29] audit: type=1326 audit(1762394660.187:15067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 153.968886][ T29] audit: type=1326 audit(1762394660.187:15068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 154.010266][ T9789] netlink: 'syz.0.2093': attribute type 21 has an invalid length. [ 154.174009][ T9791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=594 sclass=netlink_route_socket pid=9791 comm=syz.0.2093 [ 154.209358][ T9789] netlink: 'syz.0.2093': attribute type 5 has an invalid length. [ 154.524226][ T9807] macsec1: entered allmulticast mode [ 154.529679][ T9807] bridge0: entered allmulticast mode [ 154.535823][ T9807] bridge0: port 3(macsec1) entered blocking state [ 154.542426][ T9807] bridge0: port 3(macsec1) entered disabled state [ 154.559926][ T9807] bridge0: left allmulticast mode [ 154.697106][ T9811] netlink: 'syz.5.2102': attribute type 10 has an invalid length. [ 154.738113][ T9812] loop2: detected capacity change from 0 to 4096 [ 154.750777][ T9812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.831973][ T9815] netlink: 'syz.5.2103': attribute type 3 has an invalid length. [ 154.903646][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.143633][ T9828] lo speed is unknown, defaulting to 1000 [ 155.467481][ T9835] loop5: detected capacity change from 0 to 512 [ 155.534364][ T9837] veth1_vlan: left promiscuous mode [ 155.539715][ T9837] veth1_vlan: left allmulticast mode [ 155.818027][ T9841] netlink: 'syz.0.2113': attribute type 10 has an invalid length. [ 155.834693][ T9843] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 155.873000][ T9845] netlink: 'syz.1.2115': attribute type 21 has an invalid length. [ 155.880930][ T9845] __nla_validate_parse: 6 callbacks suppressed [ 155.880948][ T9845] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2115'. [ 155.917886][ T9847] loop2: detected capacity change from 0 to 512 [ 155.921095][ T9845] netlink: 'syz.1.2115': attribute type 5 has an invalid length. [ 155.931967][ T9845] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2115'. [ 155.957536][ T9847] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.998621][ T9847] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 156.013505][ T9850] netlink: 'syz.0.2117': attribute type 3 has an invalid length. [ 156.022421][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2115'. [ 156.032201][ T9847] EXT4-fs (loop2): 1 truncate cleaned up [ 156.032438][ T9845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=594 sclass=netlink_route_socket pid=9845 comm=syz.1.2115 [ 156.038524][ T9847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.143905][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.218854][ T9863] loop2: detected capacity change from 0 to 128 [ 156.230058][ T9865] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2123'. [ 156.280565][ T9863] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 156.288497][ T9863] FAT-fs (loop2): Filesystem has been set read-only [ 156.295452][ T9863] bio_check_eod: 9863 callbacks suppressed [ 156.295470][ T9863] +\{]: attempt to access beyond end of device [ 156.295470][ T9863] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 156.339233][ T9863] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 156.347169][ T9863] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 156.379327][ T9863] +\{]: attempt to access beyond end of device [ 156.379327][ T9863] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.420455][ T9863] +\{]: attempt to access beyond end of device [ 156.420455][ T9863] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.466049][ T9863] +\{]: attempt to access beyond end of device [ 156.466049][ T9863] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.490401][ T9863] +\{]: attempt to access beyond end of device [ 156.490401][ T9863] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.522451][ T9863] +\{]: attempt to access beyond end of device [ 156.522451][ T9863] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.538240][ T9863] +\{]: attempt to access beyond end of device [ 156.538240][ T9863] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.551461][ T9863] +\{]: attempt to access beyond end of device [ 156.551461][ T9863] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.564794][ T9863] +\{]: attempt to access beyond end of device [ 156.564794][ T9863] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.577908][ T9863] +\{]: attempt to access beyond end of device [ 156.577908][ T9863] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 156.704653][ T9872] lo speed is unknown, defaulting to 1000 [ 156.870701][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2127'. [ 156.930874][ T9877] macsec1: entered allmulticast mode [ 156.936248][ T9877] bridge0: entered allmulticast mode [ 156.941984][ T9877] bridge0: port 3(macsec1) entered blocking state [ 156.948505][ T9877] bridge0: port 3(macsec1) entered disabled state [ 156.960314][ T9877] bridge0: left allmulticast mode [ 157.354985][ T9892] loop2: detected capacity change from 0 to 512 [ 157.395374][ T9892] EXT4-fs: Ignoring removed nobh option [ 157.564744][ T9899] loop5: detected capacity change from 0 to 1279 [ 157.601456][ T9892] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.2132: inode #0: comm syz.2.2132: iget: illegal inode # [ 157.679576][ T9902] sctp: [Deprecated]: syz.1.2135 (pid 9902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.679576][ T9902] Use struct sctp_sack_info instead [ 157.704023][ T9903] loop5: detected capacity change from 1279 to 2831 [ 157.724252][ T9892] EXT4-fs (loop2): Remounting filesystem read-only [ 157.731028][ T9892] EXT4-fs (loop2): get orphan inode failed [ 157.824593][ T12] bridge_slave_1: left allmulticast mode [ 157.830349][ T12] bridge_slave_1: left promiscuous mode [ 157.836195][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.899134][ T9892] EXT4-fs (loop2): mount failed [ 157.917626][ T12] bridge_slave_0: left allmulticast mode [ 157.921267][ T3494] Buffer I/O error on dev loop5, logical block 353, async page read [ 157.923509][ T12] bridge_slave_0: left promiscuous mode [ 157.937323][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.050155][ T3494] Buffer I/O error on dev loop5, logical block 353, async page read [ 158.105110][ T9897] loop1: detected capacity change from 0 to 1024 [ 158.170760][ T9897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.222045][ T12] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.231309][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.262903][ T12] bond_slave_0: left promiscuous mode [ 158.282362][ T12] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.299694][ T12] bond_slave_1: left promiscuous mode [ 158.313008][ T12] $Hÿ (unregistering): Released all slaves [ 158.385601][ T12] hsr_slave_0: left promiscuous mode [ 158.397981][ T12] hsr_slave_1: left promiscuous mode [ 158.529386][ T9936] validate_nla: 1 callbacks suppressed [ 158.529407][ T9936] netlink: 'syz.2.2141': attribute type 13 has an invalid length. [ 158.539484][ T12] team0 (unregistering): Port device team_slave_1 removed [ 158.581451][ T9942] netlink: 'syz.5.2142': attribute type 13 has an invalid length. [ 158.582275][ T12] team0 (unregistering): Port device team_slave_0 removed [ 158.619338][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2141'. [ 158.649388][ T12] team0 (unregistering): Port device dummy0 removed [ 158.702012][ T9944] macsec1: entered allmulticast mode [ 158.707481][ T9944] bridge0: entered allmulticast mode [ 158.719671][ T9944] bridge0: port 3(macsec1) entered blocking state [ 158.726206][ T9944] bridge0: port 3(macsec1) entered disabled state [ 158.736174][ T9944] bridge0: left allmulticast mode [ 158.931489][ T29] kauditd_printk_skb: 790 callbacks suppressed [ 158.931509][ T29] audit: type=1400 audit(1762394665.147:15859): avc: denied { create } for pid=9967 comm="syz.0.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 158.972686][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2145'. [ 158.993234][ T9969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9969 comm=syz.2.2146 [ 159.011185][ T9963] macsec1: entered allmulticast mode [ 159.016693][ T9963] bridge0: entered allmulticast mode [ 159.038900][ T9963] bridge0: port 3(macsec1) entered blocking state [ 159.045653][ T9963] bridge0: port 3(macsec1) entered disabled state [ 159.055773][ T9969] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 159.062434][ T9969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 159.070663][ T9969] vhci_hcd vhci_hcd.0: Device attached [ 159.080534][ T9973] loop1: detected capacity change from 0 to 512 [ 159.089447][ T9963] bridge0: left allmulticast mode [ 159.107595][ T9981] vhci_hcd vhci_hcd.0: port 0 already used [ 159.116123][ T9974] vhci_hcd: connection closed [ 159.116282][ T12] vhci_hcd: stop threads [ 159.125325][ T12] vhci_hcd: release socket [ 159.129779][ T12] vhci_hcd: disconnect device [ 159.266856][ T9993] FAULT_INJECTION: forcing a failure. [ 159.266856][ T9993] name failslab, interval 1, probability 0, space 0, times 0 [ 159.279660][ T9993] CPU: 0 UID: 0 PID: 9993 Comm: syz.0.2152 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.279702][ T9993] Tainted: [W]=WARN [ 159.279710][ T9993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.279722][ T9993] Call Trace: [ 159.279728][ T9993] [ 159.279735][ T9993] __dump_stack+0x1d/0x30 [ 159.279760][ T9993] dump_stack_lvl+0xe8/0x140 [ 159.279786][ T9993] dump_stack+0x15/0x1b [ 159.279919][ T9993] should_fail_ex+0x265/0x280 [ 159.279945][ T9993] should_failslab+0x8c/0xb0 [ 159.279981][ T9993] kmem_cache_alloc_noprof+0x50/0x480 [ 159.280010][ T9993] ? skb_clone+0x151/0x1f0 [ 159.280030][ T9993] skb_clone+0x151/0x1f0 [ 159.280096][ T9993] nfnetlink_rcv+0x2fc/0x16c0 [ 159.280132][ T9993] ? __account_obj_stock+0x211/0x350 [ 159.280171][ T9993] ? obj_cgroup_charge_account+0x122/0x1a0 [ 159.280213][ T9993] ? should_fail_ex+0x30/0x280 [ 159.280293][ T9993] ? xas_load+0x413/0x430 [ 159.280385][ T9993] ? xas_load+0x413/0x430 [ 159.280426][ T9993] ? __rcu_read_unlock+0x4f/0x70 [ 159.280468][ T9993] ? xa_load+0xb1/0xe0 [ 159.280490][ T9993] ? __account_obj_stock+0x211/0x350 [ 159.280582][ T9993] ? obj_cgroup_charge_account+0x122/0x1a0 [ 159.280679][ T9993] ? should_fail_ex+0x30/0x280 [ 159.280698][ T9993] ? __rcu_read_unlock+0x4f/0x70 [ 159.280722][ T9993] ? should_fail_ex+0xdb/0x280 [ 159.280747][ T9993] netlink_unicast+0x5c0/0x690 [ 159.280848][ T9993] netlink_sendmsg+0x58b/0x6b0 [ 159.280876][ T9993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.280901][ T9993] __sock_sendmsg+0x145/0x180 [ 159.280959][ T9993] ____sys_sendmsg+0x31e/0x4e0 [ 159.281093][ T9993] ___sys_sendmsg+0x17b/0x1d0 [ 159.281187][ T9993] __x64_sys_sendmsg+0xd4/0x160 [ 159.281212][ T9993] x64_sys_call+0x191e/0x3000 [ 159.281276][ T9993] do_syscall_64+0xd2/0x200 [ 159.281295][ T9993] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.281328][ T9993] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.281360][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.281460][ T9993] RIP: 0033:0x7f658055f6c9 [ 159.281474][ T9993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.281491][ T9993] RSP: 002b:00007f657efc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.281530][ T9993] RAX: ffffffffffffffda RBX: 00007f65807b5fa0 RCX: 00007f658055f6c9 [ 159.281583][ T9993] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 159.281599][ T9993] RBP: 00007f657efc7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.281615][ T9993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.281631][ T9993] R13: 00007f65807b6038 R14: 00007f65807b5fa0 R15: 00007ffe32edb168 [ 159.281656][ T9993] [ 159.633202][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2154'. [ 159.645409][ T9999] macsec1: entered allmulticast mode [ 159.650864][ T9999] bridge0: entered allmulticast mode [ 159.656537][ T9999] bridge0: port 3(macsec1) entered blocking state [ 159.663087][ T9999] bridge0: port 3(macsec1) entered disabled state [ 159.678474][ T9999] bridge0: left allmulticast mode [ 159.805603][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2156'. [ 159.814625][T10011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.822485][T10011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.919342][ T29] audit: type=1326 audit(1762394666.117:15860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 159.943184][ T29] audit: type=1326 audit(1762394666.117:15861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 159.966999][ T29] audit: type=1326 audit(1762394666.117:15862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 159.990657][ T29] audit: type=1326 audit(1762394666.117:15863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 160.014310][ T29] audit: type=1326 audit(1762394666.117:15864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 160.037917][ T29] audit: type=1326 audit(1762394666.117:15865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 160.061747][ T29] audit: type=1326 audit(1762394666.117:15866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 160.085514][ T29] audit: type=1326 audit(1762394666.117:15867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 160.109416][ T29] audit: type=1326 audit(1762394666.117:15868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 160.284565][T10038] lo speed is unknown, defaulting to 1000 [ 160.700406][T10064] loop5: detected capacity change from 0 to 256 [ 160.710149][T10064] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.769101][T10053] lo speed is unknown, defaulting to 1000 [ 160.778793][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2165'. [ 160.790630][T10058] geneve2: entered promiscuous mode [ 160.795923][T10058] geneve2: entered allmulticast mode [ 160.822429][ T313] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.836297][ T313] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.864899][T10075] random: crng reseeded on system resumption [ 160.876225][T10075] Restarting kernel threads ... [ 160.882010][T10075] Done restarting kernel threads. [ 160.915479][ T313] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.923774][ T313] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.006366][T10053] chnl_net:caif_netlink_parms(): no params data found [ 161.037841][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2172'. [ 161.114000][T10053] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.114019][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2173'. [ 161.130206][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.137868][T10053] bridge_slave_0: entered allmulticast mode [ 161.148617][T10053] bridge_slave_0: entered promiscuous mode [ 161.157285][T10092] FAULT_INJECTION: forcing a failure. [ 161.157285][T10092] name failslab, interval 1, probability 0, space 0, times 0 [ 161.170136][T10092] CPU: 1 UID: 0 PID: 10092 Comm: syz.2.2175 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.170196][T10092] Tainted: [W]=WARN [ 161.170205][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.170221][T10092] Call Trace: [ 161.170228][T10092] [ 161.170238][T10092] __dump_stack+0x1d/0x30 [ 161.170268][T10092] dump_stack_lvl+0xe8/0x140 [ 161.170295][T10092] dump_stack+0x15/0x1b [ 161.170312][T10092] should_fail_ex+0x265/0x280 [ 161.170342][T10092] should_failslab+0x8c/0xb0 [ 161.170392][T10092] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 161.170435][T10092] ? __alloc_skb+0x101/0x320 [ 161.170475][T10092] __alloc_skb+0x101/0x320 [ 161.170528][T10092] netlink_alloc_large_skb+0xbf/0xf0 [ 161.170565][T10092] netlink_sendmsg+0x3cf/0x6b0 [ 161.170586][T10092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.170649][T10092] __sock_sendmsg+0x145/0x180 [ 161.170714][T10092] ____sys_sendmsg+0x31e/0x4e0 [ 161.170749][T10092] ___sys_sendmsg+0x17b/0x1d0 [ 161.170779][T10092] __x64_sys_sendmsg+0xd4/0x160 [ 161.170801][T10092] x64_sys_call+0x191e/0x3000 [ 161.170900][T10092] do_syscall_64+0xd2/0x200 [ 161.170918][T10092] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 161.170944][T10092] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 161.170979][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.170999][T10092] RIP: 0033:0x7fa64ffef6c9 [ 161.171013][T10092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.171081][T10092] RSP: 002b:00007fa64ea4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.171098][T10092] RAX: ffffffffffffffda RBX: 00007fa650245fa0 RCX: 00007fa64ffef6c9 [ 161.171110][T10092] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000006 [ 161.171121][T10092] RBP: 00007fa64ea4f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.171196][T10092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.171206][T10092] R13: 00007fa650246038 R14: 00007fa650245fa0 R15: 00007fffdfc5ed18 [ 161.171223][T10092] [ 161.171390][T10053] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.385307][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.392630][T10053] bridge_slave_1: entered allmulticast mode [ 161.399259][T10053] bridge_slave_1: entered promiscuous mode [ 161.423145][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.438935][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.556219][T10102] lo speed is unknown, defaulting to 1000 [ 161.583150][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2177'. [ 161.653020][T10110] netlink: 'syz.2.2180': attribute type 10 has an invalid length. [ 161.674065][T10053] team0: Port device team_slave_0 added [ 161.691413][ T31] bridge_slave_1: left allmulticast mode [ 161.697313][ T31] bridge_slave_1: left promiscuous mode [ 161.703117][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.768181][ T31] bridge_slave_0: left allmulticast mode [ 161.773968][ T31] bridge_slave_0: left promiscuous mode [ 161.779650][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.931896][ T31] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.943828][ T31] bond_slave_0: left promiscuous mode [ 161.953808][T10134] netlink: 'syz.1.2183': attribute type 13 has an invalid length. [ 161.962109][ T31] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.966439][T10136] loop5: detected capacity change from 0 to 5063 [ 161.982288][ T31] bond_slave_1: left promiscuous mode [ 161.992937][T10136] loop5: detected capacity change from 5063 to 5775 [ 162.006235][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 162.008532][ T31] $Hÿ (unregistering): Released all slaves [ 162.035394][ T3494] Buffer I/O error on dev loop5, logical block 721, async page read [ 162.047885][ T3494] Buffer I/O error on dev loop5, logical block 721, async page read [ 162.059583][T10053] team0: Port device team_slave_1 added [ 162.090162][T10139] macsec1: entered allmulticast mode [ 162.095561][T10139] bridge0: entered allmulticast mode [ 162.109930][T10139] bridge0: port 1(macsec1) entered blocking state [ 162.116418][T10139] bridge0: port 1(macsec1) entered disabled state [ 162.124171][T10139] bridge0: left allmulticast mode [ 162.160796][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.167794][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.193845][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.229259][ T31] hsr_slave_0: left promiscuous mode [ 162.239459][ T31] hsr_slave_1: left promiscuous mode [ 162.295867][ T31] team0 (unregistering): Port device team_slave_1 removed [ 162.312451][ T31] team0 (unregistering): Port device team_slave_0 removed [ 162.322956][T10147] netlink: 'syz.0.2190': attribute type 21 has an invalid length. [ 162.331059][T10147] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2190'. [ 162.343111][ T31] team0 (unregistering): Port device dummy0 removed [ 162.362451][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.369483][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.395436][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.408443][T10147] netlink: 'syz.0.2190': attribute type 5 has an invalid length. [ 162.416346][T10147] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2190'. [ 162.433538][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2190'. [ 162.443051][T10147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=594 sclass=netlink_route_socket pid=10147 comm=syz.0.2190 [ 162.501267][T10053] hsr_slave_0: entered promiscuous mode [ 162.513021][T10053] hsr_slave_1: entered promiscuous mode [ 162.567843][T10162] random: crng reseeded on system resumption [ 162.590006][T10162] Restarting kernel threads ... [ 162.599129][T10162] Done restarting kernel threads. [ 162.674091][T10171] netlink: 'syz.1.2194': attribute type 13 has an invalid length. [ 162.685761][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2194'. [ 162.698682][T10171] macsec1: entered allmulticast mode [ 162.704072][T10171] bridge0: entered allmulticast mode [ 162.709747][T10171] bridge0: port 1(macsec1) entered blocking state [ 162.716214][T10171] bridge0: port 1(macsec1) entered disabled state [ 162.724646][T10171] bridge0: left allmulticast mode [ 162.755966][T10053] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.766304][T10053] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.785788][T10053] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.805355][T10053] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.881863][T10053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.906251][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'. [ 162.942161][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 162.958662][T10187] macsec1: entered allmulticast mode [ 162.964065][T10187] bridge0: entered allmulticast mode [ 162.970505][T10187] bridge0: port 3(macsec1) entered blocking state [ 162.977017][T10187] bridge0: port 3(macsec1) entered disabled state [ 162.995245][T10187] bridge0: left allmulticast mode [ 163.005344][T10053] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.016339][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.023542][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.548829][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.555999][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.736744][T10053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.970126][ T29] kauditd_printk_skb: 1006 callbacks suppressed [ 163.970163][ T29] audit: type=1326 audit(1762394670.187:16875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 164.025759][ T29] audit: type=1326 audit(1762394670.187:16876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658055f6c9 code=0x7ffc0000 [ 164.079714][ T29] audit: type=1326 audit(1762394670.277:16877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10247 comm="syz.5.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 164.103494][ T29] audit: type=1326 audit(1762394670.277:16878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10247 comm="syz.5.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 164.114556][T10053] veth0_vlan: entered promiscuous mode [ 164.127225][ T29] audit: type=1326 audit(1762394670.277:16879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10247 comm="syz.5.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 164.156239][ T29] audit: type=1326 audit(1762394670.277:16880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10247 comm="syz.5.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 164.179862][ T29] audit: type=1326 audit(1762394670.277:16881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10247 comm="syz.5.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96402fdf10 code=0x7ffc0000 [ 164.203613][ T29] audit: type=1326 audit(1762394670.277:16882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10247 comm="syz.5.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 164.227247][ T29] audit: type=1326 audit(1762394670.277:16883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10247 comm="syz.5.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 164.250947][ T29] audit: type=1326 audit(1762394670.277:16884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10247 comm="syz.5.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 164.297436][T10053] veth1_vlan: entered promiscuous mode [ 164.316390][T10053] veth0_macvtap: entered promiscuous mode [ 164.323803][T10053] veth1_macvtap: entered promiscuous mode [ 164.337590][T10053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.351892][T10053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.363469][ T2200] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.374222][ T2200] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.385074][ T2200] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.402206][T10211] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.516884][T10268] loop6: detected capacity change from 0 to 4096 [ 164.557672][T10268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.703311][T10053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.714785][T10277] netlink: 'syz.1.2210': attribute type 10 has an invalid length. [ 164.938081][T10299] sd 0:0:1:0: device reset [ 164.938320][T10300] loop5: detected capacity change from 0 to 8143 [ 164.953410][T10299] netlink: 'syz.1.2218': attribute type 10 has an invalid length. [ 164.967662][ T3494] Buffer I/O error on dev loop5, logical block 1017, async page read [ 164.970393][T10300] loop5: detected capacity change from 8143 to 11191 [ 164.984851][T10297] netlink: 'syz.6.2217': attribute type 13 has an invalid length. [ 165.033408][ T3494] Buffer I/O error on dev loop5, logical block 1398, async page read [ 165.079354][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.086639][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.135541][T10297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.145563][T10297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.212725][T10302] macsec1: entered allmulticast mode [ 165.218093][T10302] bridge0: entered allmulticast mode [ 165.249507][T10302] bridge0: port 3(macsec1) entered blocking state [ 165.256039][T10302] bridge0: port 3(macsec1) entered disabled state [ 165.280502][T10302] bridge0: left allmulticast mode [ 165.288460][ T2200] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.299126][ T2200] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.321969][ T2200] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.348643][ T2200] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.377332][T10316] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10316 comm=syz.0.2222 [ 165.414469][T10319] netlink: 'syz.5.2224': attribute type 13 has an invalid length. [ 165.429869][T10320] loop6: detected capacity change from 0 to 512 [ 165.430790][T10319] macsec1: entered allmulticast mode [ 165.437716][T10322] loop1: detected capacity change from 0 to 128 [ 165.441487][T10319] bridge0: entered allmulticast mode [ 165.451918][T10319] bridge0: port 3(macsec1) entered blocking state [ 165.454660][T10324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=64 sclass=netlink_audit_socket pid=10324 comm=syz.0.2222 [ 165.459626][T10319] bridge0: port 3(macsec1) entered disabled state [ 165.492653][T10320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.506049][T10319] bridge0: left allmulticast mode [ 165.532956][T10316] netlink: 'syz.0.2222': attribute type 4 has an invalid length. [ 165.543600][T10320] EXT4-fs (loop6): resizing filesystem from 256 to 1 blocks [ 165.551060][T10320] EXT4-fs warning (device loop6): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 165.619691][T10053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.813046][T10345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.840572][T10349] loop5: detected capacity change from 0 to 3655 [ 165.847454][T10345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.889619][T10349] loop5: detected capacity change from 3655 to 6767 [ 165.904394][ T3494] Buffer I/O error on dev loop5, logical block 845, async page read [ 165.917155][T10354] netlink: 'syz.5.2236': attribute type 15 has an invalid length. [ 165.918162][ T3494] Buffer I/O error on dev loop5, logical block 845, async page read [ 165.934438][T10354] netlink: 'syz.5.2236': attribute type 15 has an invalid length. [ 165.942434][ T2076] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 165.950833][ T2076] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 165.951797][T10351] loop2: detected capacity change from 0 to 2048 [ 165.959132][ T2076] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 165.992962][ T2076] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 165.993097][T10351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.014455][T10351] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.099481][T10351] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 166.151765][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.348800][T10368] netlink: 'syz.0.2238': attribute type 13 has an invalid length. [ 166.365440][ T2200] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.375530][T10368] __nla_validate_parse: 9 callbacks suppressed [ 166.375581][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 166.382893][T10371] loop1: detected capacity change from 0 to 512 [ 166.391825][ T2200] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.408679][T10371] EXT4-fs (loop1): orphan cleanup on readonly fs [ 166.416391][T10371] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2241: bad orphan inode 13 [ 166.427142][T10371] ext4_test_bit(bit=12, block=18) = 1 [ 166.432655][T10371] is_bad_inode(inode)=0 [ 166.436833][T10371] NEXT_ORPHAN(inode)=2130706432 [ 166.438447][T10368] macsec1: entered allmulticast mode [ 166.441759][T10371] max_ino=32 [ 166.441772][T10371] i_nlink=1 [ 166.442471][T10371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.447099][T10368] bridge0: entered allmulticast mode [ 166.471995][T10371] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 166.477132][T10368] bridge0: port 3(macsec1) entered blocking state [ 166.488038][T10368] bridge0: port 3(macsec1) entered disabled state [ 166.496883][T10368] bridge0: left allmulticast mode [ 166.503844][T10371] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2241: bg 0: block 248: padding at end of block bitmap is not set [ 166.520926][ T2200] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.534846][T10377] lo speed is unknown, defaulting to 1000 [ 166.541403][T10377] lo speed is unknown, defaulting to 1000 [ 166.546144][ T2200] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.549558][T10371] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2241: Failed to acquire dquot type 1 [ 166.566926][T10377] lo speed is unknown, defaulting to 1000 [ 166.588164][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2241'. [ 166.597286][T10375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2241'. [ 166.615617][T10377] infiniband sz1: set down [ 166.620260][T10377] infiniband sz1: added lo [ 166.625147][ T5099] lo speed is unknown, defaulting to 1000 [ 166.640188][T10371] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 166.658816][T10377] RDS/IB: sz1: added [ 166.663318][T10377] smc: adding ib device sz1 with port count 1 [ 166.669745][T10377] smc: ib device sz1 port 1 has no pnetid [ 166.675877][ T3419] lo speed is unknown, defaulting to 1000 [ 166.686149][T10377] lo speed is unknown, defaulting to 1000 [ 166.720421][T10377] lo speed is unknown, defaulting to 1000 [ 166.754441][T10377] lo speed is unknown, defaulting to 1000 [ 166.803689][T10377] lo speed is unknown, defaulting to 1000 [ 166.810684][T10371] syz.1.2241 (10371) used greatest stack depth: 9248 bytes left [ 166.835160][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.847800][T10389] loop5: detected capacity change from 0 to 128 [ 166.877371][T10377] lo speed is unknown, defaulting to 1000 [ 166.878249][T10389] bio_check_eod: 3851 callbacks suppressed [ 166.878269][T10389] syz.5.2246: attempt to access beyond end of device [ 166.878269][T10389] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 166.937280][T10389] syz.5.2246: attempt to access beyond end of device [ 166.937280][T10389] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 167.003099][T10389] syz.5.2246: attempt to access beyond end of device [ 167.003099][T10389] loop5: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 167.017335][T10389] syz.5.2246: attempt to access beyond end of device [ 167.017335][T10389] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 167.039423][T10389] syz.5.2246: attempt to access beyond end of device [ 167.039423][T10389] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 167.053199][T10389] syz.5.2246: attempt to access beyond end of device [ 167.053199][T10389] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 167.067057][T10389] syz.5.2246: attempt to access beyond end of device [ 167.067057][T10389] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 167.089647][T10389] syz.5.2246: attempt to access beyond end of device [ 167.089647][T10389] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 167.103387][T10389] syz.5.2246: attempt to access beyond end of device [ 167.103387][T10389] loop5: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 167.190594][T10399] lo speed is unknown, defaulting to 1000 [ 167.411930][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2251'. [ 167.421074][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2251'. [ 167.860689][T10421] loop1: detected capacity change from 0 to 512 [ 167.892083][T10423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10423 comm=syz.5.2258 [ 167.910516][T10421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.916273][T10430] netlink: 'syz.0.2261': attribute type 10 has an invalid length. [ 167.942365][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.056320][T10437] netlink: 'syz.1.2264': attribute type 13 has an invalid length. [ 168.071771][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 168.086017][T10437] macsec1: entered allmulticast mode [ 168.091413][T10437] bridge0: entered allmulticast mode [ 168.099678][T10437] bridge0: port 1(macsec1) entered blocking state [ 168.106241][T10437] bridge0: port 1(macsec1) entered disabled state [ 168.114753][T10437] bridge0: left allmulticast mode [ 168.168835][T10445] loop5: detected capacity change from 0 to 8343 [ 168.177885][ T3494] Buffer I/O error on dev loop5, logical block 1042, async page read [ 168.186406][T10445] loop5: detected capacity change from 8343 to 10655 [ 168.207530][ T3494] Buffer I/O error on dev loop5, logical block 1331, async page read [ 168.377464][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 168.743973][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'. [ 168.769384][T10465] macsec1: entered allmulticast mode [ 168.774760][T10465] bridge0: entered allmulticast mode [ 168.781073][T10465] bridge0: port 1(macsec1) entered blocking state [ 168.787659][T10465] bridge0: port 1(macsec1) entered disabled state [ 168.797017][T10465] bridge0: left allmulticast mode [ 168.860039][ T2200] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.875519][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2276'. [ 168.888187][ T2200] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.903042][T10467] macsec1: entered allmulticast mode [ 168.908417][T10467] bridge0: entered allmulticast mode [ 168.924597][T10467] bridge0: port 3(macsec1) entered blocking state [ 168.931465][T10467] bridge0: port 3(macsec1) entered disabled state [ 168.940848][T10467] bridge0: left allmulticast mode [ 168.951543][ T2200] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.970819][ T2200] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 169.015835][ T29] kauditd_printk_skb: 1119 callbacks suppressed [ 169.015851][ T29] audit: type=1326 audit(1762394675.227:18002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.045946][ T29] audit: type=1326 audit(1762394675.227:18003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.069573][ T29] audit: type=1326 audit(1762394675.227:18004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.093122][ T29] audit: type=1326 audit(1762394675.227:18005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.093181][ T29] audit: type=1326 audit(1762394675.227:18006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.140377][ T29] audit: type=1326 audit(1762394675.227:18007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.199632][ T29] audit: type=1326 audit(1762394675.287:18008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.211934][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2286'. [ 169.223524][ T29] audit: type=1326 audit(1762394675.287:18009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.236465][T10496] macsec1: entered allmulticast mode [ 169.256051][ T29] audit: type=1326 audit(1762394675.287:18010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.256088][ T29] audit: type=1326 audit(1762394675.287:18011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 169.308811][T10496] bridge0: entered allmulticast mode [ 169.338012][T10496] bridge0: port 3(macsec1) entered blocking state [ 169.344607][T10496] bridge0: port 3(macsec1) entered disabled state [ 169.409016][T10496] bridge0: left allmulticast mode [ 169.434575][T10500] lo speed is unknown, defaulting to 1000 [ 169.490583][T10503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10503 comm=syz.1.2288 [ 169.719580][T10514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10514 comm=syz.6.2292 [ 170.006210][T10520] lo speed is unknown, defaulting to 1000 [ 170.735591][T10524] macsec1: entered allmulticast mode [ 170.740977][T10524] bridge0: entered allmulticast mode [ 170.746760][T10524] bridge0: port 3(macsec1) entered blocking state [ 170.753602][T10524] bridge0: port 3(macsec1) entered disabled state [ 170.967436][T10524] bridge0: left allmulticast mode [ 171.282970][T10523] lo speed is unknown, defaulting to 1000 [ 171.333893][T10528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10528 comm=syz.1.2295 [ 171.645035][T10563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10563 comm=syz.1.2301 [ 172.068744][T10585] validate_nla: 5 callbacks suppressed [ 172.068761][T10585] netlink: 'syz.1.2305': attribute type 21 has an invalid length. [ 172.082330][T10585] __nla_validate_parse: 2 callbacks suppressed [ 172.082355][T10585] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2305'. [ 172.188682][T10585] netlink: 'syz.1.2305': attribute type 5 has an invalid length. [ 172.196553][T10585] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2305'. [ 172.227038][T10592] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2306'. [ 172.309826][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 172.338110][T10600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=594 sclass=netlink_route_socket pid=10600 comm=syz.1.2305 [ 172.587954][T10541] loop2: detected capacity change from 0 to 512 [ 172.620858][T10541] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.2297: invalid fast symlink length 39 [ 172.644546][T10541] EXT4-fs (loop2): get root inode failed [ 172.650341][T10541] EXT4-fs (loop2): mount failed [ 172.967304][T10645] netlink: 'syz.1.2314': attribute type 13 has an invalid length. [ 172.984843][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'. [ 173.028384][T10645] macsec1: entered allmulticast mode [ 173.033925][T10645] bridge0: entered allmulticast mode [ 173.059541][T10645] bridge0: port 1(macsec1) entered blocking state [ 173.066340][T10645] bridge0: port 1(macsec1) entered disabled state [ 173.080139][T10645] bridge0: left allmulticast mode [ 173.137774][T10650] netlink: 'syz.6.2316': attribute type 13 has an invalid length. [ 173.150108][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2316'. [ 173.183831][T10650] macsec1: entered allmulticast mode [ 173.189267][T10650] bridge0: entered allmulticast mode [ 173.195121][T10650] bridge0: port 3(macsec1) entered blocking state [ 173.201644][T10650] bridge0: port 3(macsec1) entered disabled state [ 173.211534][T10650] bridge0: left allmulticast mode [ 173.249673][T10655] loop2: detected capacity change from 0 to 2048 [ 173.280936][T10655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 173.418478][T10655] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.434117][T10655] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 173.446623][T10655] EXT4-fs (loop2): This should not happen!! Data will be lost [ 173.446623][T10655] [ 173.456442][T10655] EXT4-fs (loop2): Total free blocks count 0 [ 173.462497][T10655] EXT4-fs (loop2): Free/Dirty block details [ 173.468588][T10655] EXT4-fs (loop2): free_blocks=2415919104 [ 173.474362][T10655] EXT4-fs (loop2): dirty_blocks=3232 [ 173.479771][T10655] EXT4-fs (loop2): Block reservation details [ 173.486098][T10655] EXT4-fs (loop2): i_reserved_data_blocks=202 [ 173.531047][T10665] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 173.649458][T10677] lo speed is unknown, defaulting to 1000 [ 174.093903][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 174.093933][ T29] audit: type=1400 audit(1762394680.307:18305): avc: denied { bind } for pid=10654 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.120001][ T29] audit: type=1400 audit(1762394680.307:18306): avc: denied { node_bind } for pid=10654 comm="syz.2.2319" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 174.213180][T10655] nft_compat: unsupported protocol 5 [ 174.236475][ T29] audit: type=1400 audit(1762394680.427:18307): avc: denied { name_bind } for pid=10654 comm="syz.2.2319" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 174.257683][ T29] audit: type=1400 audit(1762394680.427:18308): avc: denied { connect } for pid=10654 comm="syz.2.2319" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.278995][ T29] audit: type=1400 audit(1762394680.437:18309): avc: denied { create } for pid=10654 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 174.299073][ T29] audit: type=1400 audit(1762394680.437:18310): avc: denied { ioctl } for pid=10654 comm="syz.2.2319" path="socket:[32888]" dev="sockfs" ino=32888 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 174.335242][T10688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10688 comm=syz.1.2328 [ 174.343569][ T29] audit: type=1400 audit(1762394680.537:18311): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 174.367515][ T29] audit: type=1400 audit(1762394680.547:18312): avc: denied { ioctl } for pid=10687 comm="syz.1.2328" path="socket:[33937]" dev="sockfs" ino=33937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.400383][T10690] FAULT_INJECTION: forcing a failure. [ 174.400383][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 174.400426][T10690] CPU: 0 UID: 0 PID: 10690 Comm: syz.6.2330 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.400460][T10690] Tainted: [W]=WARN [ 174.400478][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.400536][T10690] Call Trace: [ 174.400544][T10690] [ 174.400553][T10690] __dump_stack+0x1d/0x30 [ 174.400654][T10690] dump_stack_lvl+0xe8/0x140 [ 174.400682][T10690] dump_stack+0x15/0x1b [ 174.400707][T10690] should_fail_ex+0x265/0x280 [ 174.400726][T10690] ? nft_trans_table_add+0x36/0x190 [ 174.400750][T10690] should_failslab+0x8c/0xb0 [ 174.400793][T10690] __kmalloc_cache_noprof+0x4c/0x4a0 [ 174.400835][T10690] nft_trans_table_add+0x36/0x190 [ 174.400861][T10690] nf_tables_newtable+0x955/0xea0 [ 174.400940][T10690] nfnetlink_rcv+0xbc9/0x16c0 [ 174.401075][T10690] netlink_unicast+0x5c0/0x690 [ 174.401160][T10690] netlink_sendmsg+0x58b/0x6b0 [ 174.401189][T10690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.401214][T10690] __sock_sendmsg+0x145/0x180 [ 174.401247][T10690] ____sys_sendmsg+0x31e/0x4e0 [ 174.401383][T10690] ___sys_sendmsg+0x17b/0x1d0 [ 174.401419][T10690] __x64_sys_sendmsg+0xd4/0x160 [ 174.401442][T10690] x64_sys_call+0x191e/0x3000 [ 174.401469][T10690] do_syscall_64+0xd2/0x200 [ 174.401494][T10690] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.401546][T10690] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.401588][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.401616][T10690] RIP: 0033:0x7fbefb70f6c9 [ 174.401635][T10690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.401659][T10690] RSP: 002b:00007fbefa177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.401704][T10690] RAX: ffffffffffffffda RBX: 00007fbefb965fa0 RCX: 00007fbefb70f6c9 [ 174.401721][T10690] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 174.401738][T10690] RBP: 00007fbefa177090 R08: 0000000000000000 R09: 0000000000000000 [ 174.401754][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.401770][T10690] R13: 00007fbefb966038 R14: 00007fbefb965fa0 R15: 00007ffd365fca38 [ 174.401795][T10690] [ 174.479490][ T29] audit: type=1400 audit(1762394680.687:18313): avc: denied { execute } for pid=10692 comm="syz.6.2331" name="file1" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.479526][ T29] audit: type=1400 audit(1762394680.687:18314): avc: denied { execute_no_trans } for pid=10692 comm="syz.6.2331" path="/22/file1" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.518249][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'. [ 174.594269][T10704] tmpfs: Bad value for 'mpol' [ 174.637271][T10706] netlink: 'syz.2.2335': attribute type 13 has an invalid length. [ 174.643272][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 174.706751][T10711] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2337'. [ 174.864568][T10706] macsec1: entered allmulticast mode [ 174.869965][T10706] bridge0: entered allmulticast mode [ 174.876364][T10706] bridge0: port 3(macsec1) entered blocking state [ 174.883294][T10706] bridge0: port 3(macsec1) entered disabled state [ 174.892916][T10706] bridge0: left allmulticast mode [ 174.968875][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2341'. [ 175.026100][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.034694][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.147742][T10738] FAULT_INJECTION: forcing a failure. [ 175.147742][T10738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.160924][T10738] CPU: 1 UID: 0 PID: 10738 Comm: syz.2.2346 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.161035][T10738] Tainted: [W]=WARN [ 175.161042][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.161110][T10738] Call Trace: [ 175.161118][T10738] [ 175.161128][T10738] __dump_stack+0x1d/0x30 [ 175.161157][T10738] dump_stack_lvl+0xe8/0x140 [ 175.161227][T10738] dump_stack+0x15/0x1b [ 175.161267][T10738] should_fail_ex+0x265/0x280 [ 175.161363][T10738] should_fail+0xb/0x20 [ 175.161383][T10738] should_fail_usercopy+0x1a/0x20 [ 175.161404][T10738] strncpy_from_user+0x25/0x230 [ 175.161432][T10738] ? kmem_cache_alloc_noprof+0x242/0x480 [ 175.161462][T10738] ? getname_flags+0x80/0x3b0 [ 175.161566][T10738] getname_flags+0xae/0x3b0 [ 175.161600][T10738] do_sys_openat2+0x60/0x110 [ 175.161688][T10738] __x64_sys_openat+0xf2/0x120 [ 175.161739][T10738] x64_sys_call+0x2eab/0x3000 [ 175.161764][T10738] do_syscall_64+0xd2/0x200 [ 175.161790][T10738] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.161828][T10738] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.161917][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.161943][T10738] RIP: 0033:0x7fa64ffedf10 [ 175.161963][T10738] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 175.162054][T10738] RSP: 002b:00007fa64ea4ef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 175.162086][T10738] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa64ffedf10 [ 175.162103][T10738] RDX: 0000000000000000 RSI: 00007fa65007207e RDI: 00000000ffffff9c [ 175.162119][T10738] RBP: 00007fa65007207e R08: 0000000000000000 R09: 0000000000000000 [ 175.162134][T10738] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 175.162149][T10738] R13: 00007fa650246038 R14: 00007fa650245fa0 R15: 00007fffdfc5ed18 [ 175.162179][T10738] [ 175.463914][T10757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10757 comm=syz.0.2349 [ 175.505545][T10763] loop1: detected capacity change from 0 to 512 [ 175.511808][T10760] netlink: 'syz.2.2351': attribute type 13 has an invalid length. [ 175.526616][T10760] macsec1: entered allmulticast mode [ 175.532498][T10760] bridge0: entered allmulticast mode [ 175.532697][T10763] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 175.538995][T10760] bridge0: port 3(macsec1) entered blocking state [ 175.548111][T10763] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2352: bg 0: block 104: invalid block bitmap [ 175.552525][T10760] bridge0: port 3(macsec1) entered disabled state [ 175.565866][T10763] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 175.581280][T10763] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2352: invalid indirect mapped block 1 (level 1) [ 175.594923][T10760] bridge0: left allmulticast mode [ 175.595275][T10763] EXT4-fs (loop1): 1 truncate cleaned up [ 175.606320][T10763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.732670][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.751530][T10775] netlink: 'syz.2.2354': attribute type 12 has an invalid length. [ 175.753859][T10774] netlink: 'syz.0.2353': attribute type 13 has an invalid length. [ 175.775875][T10775] netlink: 'syz.2.2354': attribute type 1 has an invalid length. [ 175.831003][T10782] FAULT_INJECTION: forcing a failure. [ 175.831003][T10782] name failslab, interval 1, probability 0, space 0, times 0 [ 175.843987][T10782] CPU: 1 UID: 0 PID: 10782 Comm: syz.1.2356 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.844038][T10782] Tainted: [W]=WARN [ 175.844047][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.844063][T10782] Call Trace: [ 175.844071][T10782] [ 175.844082][T10782] __dump_stack+0x1d/0x30 [ 175.844112][T10782] dump_stack_lvl+0xe8/0x140 [ 175.844141][T10782] dump_stack+0x15/0x1b [ 175.844218][T10782] should_fail_ex+0x265/0x280 [ 175.844244][T10782] should_failslab+0x8c/0xb0 [ 175.844284][T10782] kmem_cache_alloc_noprof+0x50/0x480 [ 175.844375][T10782] ? getname_flags+0x80/0x3b0 [ 175.844410][T10782] getname_flags+0x80/0x3b0 [ 175.844491][T10782] user_path_at+0x28/0x130 [ 175.844519][T10782] __se_sys_mount_setattr+0x136/0x240 [ 175.844563][T10782] __x64_sys_mount_setattr+0x67/0x80 [ 175.844601][T10782] x64_sys_call+0x19ab/0x3000 [ 175.844711][T10782] do_syscall_64+0xd2/0x200 [ 175.844749][T10782] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.844787][T10782] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.844839][T10782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.844868][T10782] RIP: 0033:0x7f0bdd4df6c9 [ 175.844952][T10782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.845047][T10782] RSP: 002b:00007f0bdbf47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 175.845072][T10782] RAX: ffffffffffffffda RBX: 00007f0bdd735fa0 RCX: 00007f0bdd4df6c9 [ 175.845089][T10782] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000003 [ 175.845111][T10782] RBP: 00007f0bdbf47090 R08: 0000000000000020 R09: 0000000000000000 [ 175.845162][T10782] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 175.845175][T10782] R13: 00007f0bdd736038 R14: 00007f0bdd735fa0 R15: 00007ffcad7a16a8 [ 175.845193][T10782] [ 176.060023][T10770] macsec1: entered allmulticast mode [ 176.065379][T10770] bridge0: entered allmulticast mode [ 176.075831][T10770] bridge0: port 3(macsec1) entered blocking state [ 176.082669][T10770] bridge0: port 3(macsec1) entered disabled state [ 176.237832][T10770] bridge0: left allmulticast mode [ 176.407630][T10811] kernel profiling enabled (shift: 17) [ 176.467721][T10813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10813 comm=syz.2.2363 [ 176.599613][T10818] $Hÿ: renamed from bond0 [ 176.618988][T10818] $Hÿ: entered promiscuous mode [ 176.624129][T10818] bond_slave_0: entered promiscuous mode [ 176.630074][T10818] bond_slave_1: entered promiscuous mode [ 176.763844][T10827] netlink: 'syz.6.2369': attribute type 10 has an invalid length. [ 176.785565][T10827] team0: Port device dummy0 added [ 176.817469][T10820] macsec1: entered allmulticast mode [ 176.822880][T10820] bridge0: entered allmulticast mode [ 176.849633][T10820] bridge0: port 3(macsec1) entered blocking state [ 176.856157][T10820] bridge0: port 3(macsec1) entered disabled state [ 176.863223][T10833] loop5: detected capacity change from 0 to 6495 [ 176.880636][T10820] bridge0: left allmulticast mode [ 176.885772][T10833] loop5: detected capacity change from 6495 to 7695 [ 176.900669][ T3494] Buffer I/O error on dev loop5, logical block 961, async page read [ 176.932831][ T3494] Buffer I/O error on dev loop5, logical block 961, async page read [ 177.229163][T10841] lo speed is unknown, defaulting to 1000 [ 177.690206][ T3494] Buffer I/O error on dev loop5, logical block 961, async page read [ 177.863045][T10830] macvlan1: entered promiscuous mode [ 177.880579][T10860] unsupported nla_type 52263 [ 177.913392][T10830] ipvlan0: entered promiscuous mode [ 177.919896][T10830] ipvlan0: left promiscuous mode [ 177.928938][T10866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10866 comm=syz.6.2378 [ 177.949379][T10830] macvlan1: left promiscuous mode [ 178.298716][T10918] validate_nla: 1 callbacks suppressed [ 178.298733][T10918] netlink: 'syz.0.2384': attribute type 13 has an invalid length. [ 178.321203][T10908] __nla_validate_parse: 8 callbacks suppressed [ 178.321262][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2384'. [ 178.363000][T10908] macsec1: entered allmulticast mode [ 178.368460][T10908] bridge0: entered allmulticast mode [ 178.374663][T10908] bridge0: port 3(macsec1) entered blocking state [ 178.381274][T10908] bridge0: port 3(macsec1) entered disabled state [ 178.390323][T10908] bridge0: left allmulticast mode [ 178.594362][T10960] loop5: detected capacity change from 0 to 5439 [ 178.619886][T10960] loop5: detected capacity change from 5439 to 7135 [ 178.630298][ T3494] Buffer I/O error on dev loop5, logical block 891, async page read [ 178.650876][ T3494] Buffer I/O error on dev loop5, logical block 891, async page read [ 179.028425][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'. [ 179.037473][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'. [ 179.053327][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'. [ 179.062423][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'. [ 179.109507][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 179.109522][ T29] audit: type=1400 audit(1762394685.317:18656): avc: denied { ioctl } for pid=11014 comm="syz.5.2397" path="socket:[33375]" dev="sockfs" ino=33375 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.151082][ T29] audit: type=1400 audit(1762394685.327:18657): avc: denied { create } for pid=11014 comm="syz.5.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.293168][T11017] loop5: detected capacity change from 0 to 512 [ 179.311544][T11017] EXT4-fs: Ignoring removed i_version option [ 179.312121][ T29] audit: type=1326 audit(1762394685.527:18658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 179.317691][T11017] EXT4-fs: Ignoring removed bh option [ 179.341308][ T29] audit: type=1326 audit(1762394685.527:18659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 179.377963][ T29] audit: type=1326 audit(1762394685.587:18660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 179.401891][ T29] audit: type=1326 audit(1762394685.587:18661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 179.425518][ T29] audit: type=1326 audit(1762394685.587:18662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 179.427089][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2400'. [ 179.471031][T11025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11025 comm=syz.0.2402 [ 179.501034][T11017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.521677][T11026] macsec1: entered allmulticast mode [ 179.527046][T11026] bridge0: entered allmulticast mode [ 179.530738][ T29] audit: type=1326 audit(1762394685.587:18663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 179.533220][T11017] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.556061][ T29] audit: type=1326 audit(1762394685.587:18664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 179.566917][T11026] bridge0: port 1(macsec1) entered blocking state [ 179.589852][ T29] audit: type=1326 audit(1762394685.587:18665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64ffef6c9 code=0x7ffc0000 [ 179.620133][T11026] bridge0: port 1(macsec1) entered disabled state [ 179.653452][T11026] bridge0: left allmulticast mode [ 179.844443][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2398'. [ 180.079012][T11052] lo speed is unknown, defaulting to 1000 [ 180.251664][T11055] loop2: detected capacity change from 0 to 512 [ 180.417870][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.520158][T11063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11063 comm=syz.5.2416 [ 180.725179][T11071] loop5: detected capacity change from 0 to 8439 [ 180.755056][T11071] loop5: detected capacity change from 8439 to 10847 [ 180.775948][T11075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11075 comm=syz.2.2420 [ 180.789997][T11074] netlink: 'syz.6.2421': attribute type 10 has an invalid length. [ 180.804064][ T6560] Buffer I/O error on dev loop5, logical block 1355, async page read [ 180.826451][ T3494] Buffer I/O error on dev loop5, logical block 1355, async page read [ 180.831758][T11077] netlink: 'syz.0.2422': attribute type 13 has an invalid length. [ 180.852377][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2422'. [ 180.864568][T11077] macsec1: entered allmulticast mode [ 180.869973][T11077] bridge0: entered allmulticast mode [ 180.876085][T11077] bridge0: port 3(macsec1) entered blocking state [ 180.882644][T11077] bridge0: port 3(macsec1) entered disabled state [ 180.908249][T11077] bridge0: left allmulticast mode [ 180.927851][T11083] loop5: detected capacity change from 10847 to 22247 [ 180.937113][ T3494] Buffer I/O error on dev loop5, logical block 2780, async page read [ 180.991278][T11081] sctp: [Deprecated]: syz.2.2424 (pid 11081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.991278][T11081] Use struct sctp_sack_info instead [ 181.015557][T11081] loop2: detected capacity change from 0 to 1024 [ 181.048549][ T3494] Buffer I/O error on dev loop5, logical block 2780, async page read [ 181.088542][ T3494] Buffer I/O error on dev loop5, logical block 2780, async page read [ 181.103659][T11091] netlink: 'syz.5.2427': attribute type 21 has an invalid length. [ 181.111667][T11091] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2427'. [ 181.121807][T11081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.133949][T11091] netlink: 'syz.5.2427': attribute type 5 has an invalid length. [ 181.141789][T11091] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2427'. [ 181.162659][T11093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11093 comm=syz.0.2428 [ 181.190825][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.234120][T11094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=594 sclass=netlink_route_socket pid=11094 comm=syz.5.2427 [ 181.328649][T11101] macsec1: entered allmulticast mode [ 181.334061][T11101] bridge0: entered allmulticast mode [ 181.340062][T11101] bridge0: port 3(macsec1) entered blocking state [ 181.346549][T11101] bridge0: port 3(macsec1) entered disabled state [ 181.357512][T11101] bridge0: left allmulticast mode [ 181.500569][T11106] netlink: 'syz.1.2435': attribute type 13 has an invalid length. [ 181.533851][T11106] macsec1: entered allmulticast mode [ 181.539323][T11106] bridge0: entered allmulticast mode [ 181.557403][T11106] bridge0: port 1(macsec1) entered blocking state [ 181.564045][T11106] bridge0: port 1(macsec1) entered disabled state [ 181.574573][T11106] bridge0: left allmulticast mode [ 181.642490][T11110] macsec1: entered allmulticast mode [ 181.647842][T11110] bridge0: entered allmulticast mode [ 181.653856][T11110] bridge0: port 3(macsec1) entered blocking state [ 181.660533][T11110] bridge0: port 3(macsec1) entered disabled state [ 181.670020][T11110] bridge0: left allmulticast mode [ 182.674003][T11128] lo speed is unknown, defaulting to 1000 [ 182.853330][T11126] loop5: detected capacity change from 0 to 512 [ 182.882550][T11131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11131 comm=syz.6.2442 [ 182.972539][T11136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=11136 comm=syz.1.2445 [ 183.016979][T11126] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 183.031778][T11126] EXT4-fs (loop5): orphan cleanup on readonly fs [ 183.041808][T11126] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2441: corrupted inode contents [ 183.055418][T11126] EXT4-fs (loop5): Remounting filesystem read-only [ 183.078282][T11126] EXT4-fs (loop5): 1 truncate cleaned up [ 183.087287][T10991] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 183.097996][T10991] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 183.164786][T10991] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 183.205458][T11126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.246701][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.396199][T11155] netlink: 'syz.0.2453': attribute type 13 has an invalid length. [ 183.407284][T11155] __nla_validate_parse: 8 callbacks suppressed [ 183.407299][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2453'. [ 183.426323][T11155] macsec1: entered allmulticast mode [ 183.431860][T11155] bridge0: entered allmulticast mode [ 183.437641][T11155] bridge0: port 3(macsec1) entered blocking state [ 183.444159][T11155] bridge0: port 3(macsec1) entered disabled state [ 183.519213][T11155] bridge0: left allmulticast mode [ 183.529496][T11159] vlan0: entered allmulticast mode [ 183.534811][T11159] bridge_slave_0: entered allmulticast mode [ 183.753370][T11166] lo speed is unknown, defaulting to 1000 [ 184.699352][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 184.699369][ T29] audit: type=1400 audit(1762394690.897:18974): avc: denied { ioctl } for pid=11171 comm="syz.5.2458" path="socket:[34854]" dev="sockfs" ino=34854 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.789669][ T29] audit: type=1400 audit(1762394690.967:18975): avc: denied { create } for pid=11173 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 184.809346][ T29] audit: type=1400 audit(1762394690.977:18976): avc: denied { setopt } for pid=11173 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 184.922213][ T29] audit: type=1400 audit(1762394691.137:18977): avc: denied { connect } for pid=11173 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.014139][T11192] lo speed is unknown, defaulting to 1000 [ 185.178881][T11195] FAULT_INJECTION: forcing a failure. [ 185.178881][T11195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.192283][T11195] CPU: 1 UID: 0 PID: 11195 Comm: syz.1.2464 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.192357][T11195] Tainted: [W]=WARN [ 185.192363][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.192379][T11195] Call Trace: [ 185.192386][T11195] [ 185.192394][T11195] __dump_stack+0x1d/0x30 [ 185.192426][T11195] dump_stack_lvl+0xe8/0x140 [ 185.192452][T11195] dump_stack+0x15/0x1b [ 185.192532][T11195] should_fail_ex+0x265/0x280 [ 185.192552][T11195] should_fail_alloc_page+0xf2/0x100 [ 185.192647][T11195] __alloc_frozen_pages_noprof+0xff/0x360 [ 185.192689][T11195] alloc_pages_mpol+0xb3/0x260 [ 185.192716][T11195] vma_alloc_folio_noprof+0x1aa/0x300 [ 185.192747][T11195] handle_mm_fault+0xec2/0x2be0 [ 185.192920][T11195] ? __rcu_read_lock+0x37/0x50 [ 185.192959][T11195] ? __pte_offset_map_lock+0x1d4/0x230 [ 185.193003][T11195] __get_user_pages+0x102a/0x1ed0 [ 185.193034][T11195] __gup_longterm_locked+0x8ef/0xe60 [ 185.193131][T11195] ? finish_task_switch+0xad/0x2b0 [ 185.193223][T11195] ? __schedule+0x6b9/0xb30 [ 185.193356][T11195] pin_user_pages_remote+0x7e/0xb0 [ 185.193382][T11195] process_vm_rw+0x484/0x960 [ 185.193487][T11195] __x64_sys_process_vm_writev+0x78/0x90 [ 185.193525][T11195] x64_sys_call+0x2a80/0x3000 [ 185.193639][T11195] do_syscall_64+0xd2/0x200 [ 185.193696][T11195] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.193725][T11195] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 185.193764][T11195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.193792][T11195] RIP: 0033:0x7f0bdd4df6c9 [ 185.193827][T11195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.193851][T11195] RSP: 002b:00007f0bdbf26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 185.193907][T11195] RAX: ffffffffffffffda RBX: 00007f0bdd736090 RCX: 00007f0bdd4df6c9 [ 185.193920][T11195] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 00000000000004dd [ 185.193932][T11195] RBP: 00007f0bdbf26090 R08: 0000000000000001 R09: 0000000000000000 [ 185.193944][T11195] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 185.194016][T11195] R13: 00007f0bdd736128 R14: 00007f0bdd736090 R15: 00007ffcad7a16a8 [ 185.194039][T11195] [ 185.454435][T11198] netlink: 'syz.5.2465': attribute type 10 has an invalid length. [ 185.463426][ T29] audit: type=1326 audit(1762394691.667:18978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 185.487115][ T29] audit: type=1326 audit(1762394691.667:18979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 185.510789][ T29] audit: type=1326 audit(1762394691.667:18980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 185.534355][ T29] audit: type=1326 audit(1762394691.667:18981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 185.558137][ T29] audit: type=1326 audit(1762394691.667:18982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 185.558183][ T29] audit: type=1326 audit(1762394691.667:18983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.5.2465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96402ff6c9 code=0x7ffc0000 [ 185.675852][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2467'. [ 185.707641][T11203] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2468'. [ 185.759571][T11200] team0: Port device team_slave_1 removed [ 185.863636][T11221] FAULT_INJECTION: forcing a failure. [ 185.863636][T11221] name failslab, interval 1, probability 0, space 0, times 0 [ 185.876723][T11221] CPU: 1 UID: 0 PID: 11221 Comm: syz.6.2474 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.876778][T11221] Tainted: [W]=WARN [ 185.876852][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.876870][T11221] Call Trace: [ 185.876878][T11221] [ 185.876887][T11221] __dump_stack+0x1d/0x30 [ 185.876916][T11221] dump_stack_lvl+0xe8/0x140 [ 185.876938][T11221] dump_stack+0x15/0x1b [ 185.876957][T11221] should_fail_ex+0x265/0x280 [ 185.877064][T11221] should_failslab+0x8c/0xb0 [ 185.877103][T11221] __kmalloc_noprof+0xa5/0x570 [ 185.877212][T11221] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 185.877330][T11221] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 185.877371][T11221] genl_family_rcv_msg_doit+0x48/0x1b0 [ 185.877399][T11221] ? selinux_capable+0x31/0x40 [ 185.877422][T11221] ? security_capable+0x83/0x90 [ 185.877522][T11221] ? ns_capable+0x7d/0xb0 [ 185.877554][T11221] genl_rcv_msg+0x422/0x460 [ 185.877588][T11221] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 185.877638][T11221] netlink_rcv_skb+0x123/0x220 [ 185.877671][T11221] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.877713][T11221] genl_rcv+0x28/0x40 [ 185.877775][T11221] netlink_unicast+0x5c0/0x690 [ 185.877816][T11221] netlink_sendmsg+0x58b/0x6b0 [ 185.877837][T11221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.877856][T11221] __sock_sendmsg+0x145/0x180 [ 185.877908][T11221] ____sys_sendmsg+0x31e/0x4e0 [ 185.878027][T11221] ___sys_sendmsg+0x17b/0x1d0 [ 185.878107][T11221] __x64_sys_sendmsg+0xd4/0x160 [ 185.878138][T11221] x64_sys_call+0x191e/0x3000 [ 185.878169][T11221] do_syscall_64+0xd2/0x200 [ 185.878228][T11221] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.878264][T11221] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 185.878307][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.878335][T11221] RIP: 0033:0x7fbefb70f6c9 [ 185.878355][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.878457][T11221] RSP: 002b:00007fbefa177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.878482][T11221] RAX: ffffffffffffffda RBX: 00007fbefb965fa0 RCX: 00007fbefb70f6c9 [ 185.878499][T11221] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 185.878577][T11221] RBP: 00007fbefa177090 R08: 0000000000000000 R09: 0000000000000000 [ 185.878593][T11221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.878609][T11221] R13: 00007fbefb966038 R14: 00007fbefb965fa0 R15: 00007ffd365fca38 [ 185.878635][T11221] [ 186.191527][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2475'. [ 186.261714][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2475'. [ 186.273959][T11223] macsec1: entered allmulticast mode [ 186.279524][T11223] bridge0: entered allmulticast mode [ 186.303302][T11223] bridge0: port 3(macsec1) entered blocking state [ 186.309894][T11223] bridge0: port 3(macsec1) entered disabled state [ 186.338134][T11223] bridge0: left allmulticast mode [ 186.498998][T11232] netlink: 'syz.5.2478': attribute type 10 has an invalid length. [ 186.665949][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2477'. [ 186.680244][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'. [ 186.692868][T11236] macsec1: entered allmulticast mode [ 186.698191][T11236] bridge0: entered allmulticast mode [ 186.725935][T11236] bridge0: port 3(macsec1) entered blocking state [ 186.732504][T11236] bridge0: port 3(macsec1) entered disabled state [ 186.779280][T11236] bridge0: left allmulticast mode [ 186.836191][T11240] lo speed is unknown, defaulting to 1000 [ 187.234400][T11246] netlink: 'syz.2.2482': attribute type 21 has an invalid length. [ 187.242328][T11246] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2482'. [ 187.283880][T11246] netlink: 'syz.2.2482': attribute type 5 has an invalid length. [ 187.291712][T11246] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2482'. [ 187.428257][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'. [ 187.466947][T11249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=594 sclass=netlink_route_socket pid=11249 comm=syz.2.2482 [ 187.595511][T11274] program syz.1.2494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.803092][T11288] syzkaller0: entered allmulticast mode [ 187.811038][T11288] program syz.0.2499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.820514][T11288] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 187.832333][T11286] syzkaller0: left allmulticast mode [ 187.930150][T11289] lo speed is unknown, defaulting to 1000 [ 188.367045][T11303] team0: Port device team_slave_1 removed [ 188.558626][T11307] netlink: 'syz.0.2508': attribute type 13 has an invalid length. [ 188.608375][T11307] __nla_validate_parse: 3 callbacks suppressed [ 188.608396][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2508'. [ 188.638813][T11311] netlink: 'syz.1.2510': attribute type 10 has an invalid length. [ 188.649895][T11307] macsec1: entered allmulticast mode [ 188.655256][T11307] bridge0: entered allmulticast mode [ 188.664632][T11307] bridge0: port 3(macsec1) entered blocking state [ 188.671154][T11307] bridge0: port 3(macsec1) entered disabled state [ 188.680900][T11314] program syz.6.2512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.694235][T11307] bridge0: left allmulticast mode [ 188.809632][T11326] loop5: detected capacity change from 0 to 4143 [ 188.860163][T11323] lo speed is unknown, defaulting to 1000 [ 188.866391][T11330] loop5: detected capacity change from 4143 to 6055 [ 189.254400][ T3309] buffer_io_error: 1 callbacks suppressed [ 189.254415][ T3309] Buffer I/O error on dev loop5, logical block 756, async page read [ 189.383606][ T3494] Buffer I/O error on dev loop5, logical block 756, async page read [ 189.752229][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 189.752243][ T29] audit: type=1326 audit(1762394695.967:19465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 189.783447][T11342] sctp: [Deprecated]: syz.6.2518 (pid 11342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.783447][T11342] Use struct sctp_sack_info instead [ 189.812385][T11342] loop6: detected capacity change from 0 to 1024 [ 189.820359][ T29] audit: type=1326 audit(1762394695.997:19466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 189.844069][ T29] audit: type=1326 audit(1762394695.997:19467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 189.867600][ T29] audit: type=1326 audit(1762394695.997:19468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 189.891233][ T29] audit: type=1326 audit(1762394695.997:19469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 189.914909][ T29] audit: type=1326 audit(1762394695.997:19470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 189.938520][ T29] audit: type=1326 audit(1762394695.997:19471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 189.962228][ T29] audit: type=1326 audit(1762394695.997:19472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 189.985761][ T29] audit: type=1326 audit(1762394695.997:19473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 190.009364][ T29] audit: type=1326 audit(1762394695.997:19474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11341 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbefb70f6c9 code=0x7ffc0000 [ 190.050935][T11335] lo speed is unknown, defaulting to 1000 [ 190.099417][T11342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.309391][T10053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.439909][T11359] lo speed is unknown, defaulting to 1000 [ 190.631415][T11358] loop6: detected capacity change from 0 to 512 [ 190.765517][T11358] EXT4-fs: Ignoring removed oldalloc option [ 190.778251][T11358] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 190.805931][T11358] EXT4-fs (loop6): 1 truncate cleaned up [ 190.848603][T11358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.876444][T11367] netlink: 'syz.2.2525': attribute type 10 has an invalid length. [ 190.975167][T11374] netlink: 'syz.1.2528': attribute type 10 has an invalid length. [ 191.055457][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2529'. [ 191.095796][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 191.107855][T11376] macsec1: entered allmulticast mode [ 191.113264][T11376] bridge0: entered allmulticast mode [ 191.119315][T11376] bridge0: port 3(macsec1) entered blocking state [ 191.126023][T11376] bridge0: port 3(macsec1) entered disabled state [ 191.136826][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 191.146194][T11376] bridge0: left allmulticast mode [ 191.210093][T10053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.214404][T11384] sctp: [Deprecated]: syz.0.2532 (pid 11384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.214404][T11384] Use struct sctp_sack_info instead [ 191.389789][T11401] netlink: 'syz.5.2539': attribute type 10 has an invalid length. [ 191.431577][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 191.467303][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 191.479322][ T36] ================================================================== [ 191.487446][ T36] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 191.494473][ T36] [ 191.496793][ T36] read-write to 0xffff888237c29de4 of 4 bytes by task 10 on cpu 0: [ 191.504684][ T36] wq_worker_running+0x95/0x120 [ 191.509540][ T36] schedule_timeout+0xb7/0x170 [ 191.514304][ T36] msleep+0x50/0x90 [ 191.518114][ T36] nsim_fib_event_work+0x3b21/0x4790 [ 191.523397][ T36] process_scheduled_works+0x4ce/0x9d0 [ 191.528874][ T36] worker_thread+0x582/0x770 [ 191.533458][ T36] kthread+0x489/0x510 [ 191.537534][ T36] ret_from_fork+0x122/0x1b0 [ 191.542141][ T36] ret_from_fork_asm+0x1a/0x30 [ 191.546905][ T36] [ 191.549221][ T36] read to 0xffff888237c29de4 of 4 bytes by task 36 on cpu 1: [ 191.556579][ T36] kick_pool+0x49/0x2d0 [ 191.560734][ T36] __queue_work+0x8cb/0xb50 [ 191.565234][ T36] queue_work_on+0xd1/0x160 [ 191.569735][ T36] process_srcu+0x999/0xbc0 [ 191.574247][ T36] process_scheduled_works+0x4ce/0x9d0 [ 191.579728][ T36] worker_thread+0x582/0x770 [ 191.584316][ T36] kthread+0x489/0x510 [ 191.588392][ T36] ret_from_fork+0x122/0x1b0 [ 191.592987][ T36] ret_from_fork_asm+0x1a/0x30 [ 191.597768][ T36] [ 191.600102][ T36] value changed: 0x00000000 -> 0x00000001 [ 191.605810][ T36] [ 191.608123][ T36] Reported by Kernel Concurrency Sanitizer on: [ 191.614707][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.625901][ T36] Tainted: [W]=WARN [ 191.629699][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.639847][ T36] Workqueue: rcu_gp process_srcu [ 191.644816][ T36] ================================================================== [ 191.663810][T11399] macsec1: entered allmulticast mode [ 191.669276][T11399] bridge0: entered allmulticast mode [ 191.675514][T11399] bridge0: port 3(macsec1) entered blocking state [ 191.682059][T11399] bridge0: port 3(macsec1) entered disabled state [ 191.692568][T11399] bridge0: left allmulticast mode [ 191.756016][T11395] cgroup: fork rejected by pids controller in /syz6 [ 191.889109][T11532] lo speed is unknown, defaulting to 1000