last executing test programs: 1m20.607515379s ago: executing program 2 (id=186): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getrusage(0x0, &(0x7f0000000400)) 1m20.607181669s ago: executing program 2 (id=187): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c0021"], 0x70}}, 0x0) 1m20.562886102s ago: executing program 2 (id=188): io_uring_setup(0x11f8b, &(0x7f00000011c0)={0x0, 0x8092, 0x0, 0x1, 0x19f}) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x47a2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x28000}, &(0x7f0000000240)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x39) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m20.428437653s ago: executing program 2 (id=189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='fsi_slave_init\x00', r1, 0x0, 0x7}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@grpquota}, {@lazytime}]}, 0x3, 0xbc0, &(0x7f0000000bc0)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x9, 0xfffffffb, 0x9, 0x820, r5, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r9, &(0x7f0000000000)='./file0\x00', 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400005f56059746a0c8b1fce114c656b197e0e5ae27a5f76b4f1ef254f69265cf502b00", @ANYRES16=r3, @ANYBLOB="dbbf000000000000000004000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1m20.375377877s ago: executing program 2 (id=192): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000b1f000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r7 = socket(0x5, 0x3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xf}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}}, 0x44080) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r6, 0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000000b94400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x3, 0x8, 0x8, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r14}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x1, 0x4038a06, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x0, 0x1, 0xb3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r10, &(0x7f0000000300), &(0x7f0000000000)=""/49}, 0x20) 1m19.920077213s ago: executing program 2 (id=200): socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x33, &(0x7f0000000180)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4620, 0x11, 0x0, @opaque="0a8f7c13b0b1236135"}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x9}, 0x18) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000005ec0)={&(0x7f0000004880), 0xc, &(0x7f0000005e80)={&(0x7f0000005e00)=@ipv6_getaddr={0x50, 0x16, 0x300, 0x70bd2c, 0x25dfdbfe, {0xa, 0x18, 0x4, 0xfd, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x7a0c16ed, 0x33, 0x40, 0x8}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_LOCAL={0x14, 0x2, @private2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040095}, 0x40080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x5, {0x0, 0x0, 0x0, r3, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0xffe0}}}, 0x24}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) 1m19.919795873s ago: executing program 32 (id=200): socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x33, &(0x7f0000000180)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4620, 0x11, 0x0, @opaque="0a8f7c13b0b1236135"}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x9}, 0x18) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000005ec0)={&(0x7f0000004880), 0xc, &(0x7f0000005e80)={&(0x7f0000005e00)=@ipv6_getaddr={0x50, 0x16, 0x300, 0x70bd2c, 0x25dfdbfe, {0xa, 0x18, 0x4, 0xfd, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x7a0c16ed, 0x33, 0x40, 0x8}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_LOCAL={0x14, 0x2, @private2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040095}, 0x40080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x5, {0x0, 0x0, 0x0, r3, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0xffe0}}}, 0x24}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) 9.637911476s ago: executing program 5 (id=1123): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000060000000f00000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 9.556668622s ago: executing program 5 (id=1124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="009e642f00db2add8900"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9b0fbba3637d1823, &(0x7f0000000880)={@local}, &(0x7f00000008c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f6c4be3c1016ed1090000003000000030000000040000000200000000000007000000000100000038fa5c3700000000000000000100008500000000000000000200000000000000"], &(0x7f0000001540)=""/4096, 0x4c, 0x1000, 0xa}, 0x28) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000940)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 9.45185782s ago: executing program 5 (id=1128): syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465f, 0x20000, 0x3, 0x381}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getuid() ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000300)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}}, 0x0) 9.406180504s ago: executing program 5 (id=1129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x29484, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x0, 0x1, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xfffc, 0x2}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000f001c0000001c00000005000000040000000000001101000000040000000e00000000000002030000000030302e31"], &(0x7f0000000580)=""/176, 0x39, 0xb0, 0x1, 0x6, 0x10000}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c00)=@security={'security\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0x140, 0x140, 0x140, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0x0, 0xff000000, 0xffffff00], [0xff, 0x0, 0xff, 0xffffffff], 'macvlan1\x00', 'macvlan1\x00', {}, {0xff}, 0x3c, 0x6, 0x4, 0x8}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x3}}, @common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x6, 0xf, 0x1, 0x0, 0x8, 0x7, 0x1, 0x70f5, 0x3, 0x5, 0x57a1, 0x40, 0x4, 0x2, 0x2, 0x8], 0xd}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @loopback, [0xff, 0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0xff, 0xffffff00, 0xffffffff], 'veth0\x00', 'veth0_macvtap\x00', {}, {}, 0x33, 0x2, 0x1, 0x64}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x6, 0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0x0, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0x1fe000080, 0xff, 0xffffff00], 'ipvlan1\x00', 'macsec0\x00', {}, {0xff}, 0x39, 0xda, 0x1, 0xa}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@mh={{0x28}, {"09c4"}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:policy_config_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000640)}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x22, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000d00000000000000ca00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70a0000000000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000060000008520000005000000950000000000000004f7000002000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xc016, 0xab, &(0x7f0000000240)=""/171, 0x40f00, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x6, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000640)=[{0x5, 0x4, 0x8, 0x3}, {0x2, 0x1, 0x3, 0x1}], 0x10, 0xd47}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4013, 0x0, 0x9, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="060004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) 9.376091186s ago: executing program 5 (id=1130): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") syz_io_uring_setup(0x3333, &(0x7f0000000340)={0x0, 0x8dce, 0x4000, 0x0, 0x292, 0x0, r1}, &(0x7f00000004c0), &(0x7f0000000540)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000c40)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c00", @ANYBLOB='ZO'], 0x124}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a8"}]}], {0x14}}, 0x88}}, 0x8000) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x0) fallocate(r7, 0x0, 0xbf5, 0x2000402) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r7, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 9.312747581s ago: executing program 5 (id=1131): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x56c2}}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$eJzs3M1vFOUfAPDvTLuF/oBfq+ILL2oVjQ1qSwGVgwc1mnjAxEQPGk9NWwhSqKE1EUIUjMGTMSbejUf/BU96MUYvJl71bkiI6QXw4prZnWl3l90tLbtdYD+fZOB55qXP99uZZ/eZeXYbQN8ay/5JIrZHxB8RMVKt1u8wVv3v2vL5mevL52eSKJff+jup7Hd1+fxMsWtx3La8Mp5GpJ8lsadJu4tnz52cnp+fO5PXJ5dOfTC5ePbcsydOTR+fOz53+uCRI4cPTb3w/MHnmgc+tL48s5iu7v54Ye+u19/96o2jX9Tl35BHh4y12/hkudzh5nprR005GexhIKzLQERkp6tU6f8jMRCrJ28kXvu0p8EBXVUul8vbWm++UG6QNq4A7mBJ1Ndv6PLAXap4o8/uf4ulcRDwUveGHz135eXqDVCW97V8qW4ZjDTfp9Rwf9tJYxHxzoV/vsmW6M5zCACAOj9k459nmo3/0nigZr//53NDoxFxT0TcGxH3RcTOiLg/orLvgxHxUOXIWBk7raVxkuTG8U96+ZYSXEM2/nsxn9sazsZ/pZV2i8LoQF7bUcm/lBw7MT93IP+djEdpS1afatPGj6/+/mWrbbXjv2zJ4ijGgnkclwe31B8zO700vfGM6125GLF7sMi1dvybrMwEJBGxKyJ2b7CNE/u/29tq29r5t9GBeabytxFPVc//hViuz7+QtJ+fnNwa83MHJour4ka//HbpzVbtV/Lfv8H8OyA7///Lr/9rzfMfTWrnaxfX38alPz9veU+z0et/KHm7Ui6mgT+aXlo6MxUxlBytBl27/uDqsUW92D/Lf3xfs/zTymtc8ZvYExHZRfxwRDwSEY/msT8WEY9HxL42+f/8yhPvN92Q3uL13wFZ/rPrOv+rhaFoXNO8MHDyp+/rGh1dLeb5X29//g9XSuP5mpt5/buZuDZ2NQMAAMCdJ42I7ZGkEyvlNJ2YqH5efmdEOr+wuPT0sYUPT89WvyMwGqW0eNI1UvM8dCq/ra/WL0ZE9aMFxfZD+XPjrweGK/WJmYX52V4nD31uW4v+n/lroNfRAV3n+1rQv/R/6F/N+v/WHsQBbD7v/9C/mvT/4V7EAWy+Zu//n7Q/5N9uxQJsrob+b9oP+sj67/9/fa8rgQCbrmX/v5v/8g9Q4fk/9KXF4Vj7S/JtC8VP2uDht0shiYiO/sAo3RZ53XqhnDQ9uZFmhdLtEKFCFwq9fV0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADolP8CAAD//3fv18M=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 2.072768218s ago: executing program 0 (id=1207): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x1}, 0x18) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x8004}, 0x24028094) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) 1.884440223s ago: executing program 4 (id=1208): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xfffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x20, 0x0, 0x204, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd109, 0x2, @perf_config_ext={0x6, 0x1}, 0x100412, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) syz_emit_ethernet(0x11e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x1, 0x1, [0xcbd, 0xa66, 0x6d8, 0x62b]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) 1.289511369s ago: executing program 4 (id=1214): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') pipe2(&(0x7f0000000180), 0x800) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.227645684s ago: executing program 0 (id=1217): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000c00)="$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") openat2(r0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) rmdir(&(0x7f0000000000)='./bus\x00') 1.208110846s ago: executing program 4 (id=1218): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) 1.02515786s ago: executing program 4 (id=1221): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfba, 0x10000000, 0x0, 0x8}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46043900030700000000000000020003"], 0x58) close(0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)={0x2c, 0x2e, 0x1, 0x70bd27, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xb3}]}]}, 0x2c}], 0x1}, 0x0) 966.814155ms ago: executing program 0 (id=1222): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f00000001c0)="ca5d052e9e4ad6a44855b9d06c0258297b7b818b0903a5eca508f8682533cdb80d218462f44f3851b81d104186d62cf4bc838f5f69546a50344145348114a2ac2766ad"}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f00000000c0)=0x34, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_submit(0x0, 0x2, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="b4", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r3, 0x0}]) syz_clone(0x24000600, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) setns(r5, 0x24020000) 623.411992ms ago: executing program 3 (id=1227): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002"], 0x50) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0x92, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) 562.971886ms ago: executing program 3 (id=1228): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') pipe2(&(0x7f0000000180), 0x800) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 478.031243ms ago: executing program 3 (id=1229): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x800400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x32, 0x34, 0x39, 0x2d, 0x34, 0x2c]}}}}]}) 458.797704ms ago: executing program 3 (id=1230): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) (async, rerun: 32) r2 = socket$kcm(0x29, 0x0, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1, @multicast2}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x4, 0x7fff, 0x2, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x1, 0x4}}) (async) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x0, 0x6, 0x69, @loopback, @rand_addr=' \x01\x00', 0x8000, 0x8000, 0xe3a}}) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000007c0)={@private1, 0x0}, &(0x7f0000000800)=0x14) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x901004}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x118, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40040894}, 0x4000890) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000a80)={0x1, 0x0, 0x5, 0x80000001, 0x2, 0x80000000}) sendmsg$rds(r0, &(0x7f0000000e00)={&(0x7f0000000ac0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/132, 0x84}, {&(0x7f0000000bc0)=""/13, 0xd}, {&(0x7f0000000c00)=""/233, 0xe9}, {&(0x7f0000000d00)=""/139, 0x8b}], 0x4, 0x0, 0x0, 0x8000}, 0x80) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) ioctl$FICLONE(r1, 0x40049409, r0) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000e40)) io_setup(0x101, &(0x7f0000000e80)=0x0) (async) r13 = eventfd2(0x2, 0x80800) io_submit(r12, 0x2, &(0x7f00000010c0)=[&(0x7f0000000f40)={0x0, 0x0, 0x0, 0x6, 0x8, r2, &(0x7f0000000ec0)="bb066f44cec6ef4ecd6afeb179ab91dacaba154bcca2bd09325861b0dd953019fefaaa8e285e34000628abf93ae3c850768fd53e369532a4a4a7f748f0513e6a1f87a3", 0x43, 0x5, 0x0, 0x0, r0}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000f80)="8121f8c2dfc5f8c727ed01bb4f4e5b2a94eac1e3faedc38c3015f42f23072389d9b4554a88c472607a241b8e5cf389f826bf9a38bcd35d64e20e0c1b868112f48fb38035193365f1b4a62610c1b3faf09ecb87955eabf2a6a36fbfe49717ceba223029b6f0f67fba5e680cce67943162e85880d944745809594a6eb1dfeba49825f1d15d25253fd5b831d77afbd33baadd0effae215549d032872a254448a5cf6dedcf4ababedbc54cec389ef69e2dab5fd2cbbd9bf7c799062affe057a4b931d039677c4d5487f533c4368e5227f0bbc9", 0xd1, 0xc9, 0x0, 0x0, r13}]) (async) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4000010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3d8d, &(0x7f0000001100)={0x0, 0xdfc7, 0x1, 0x2, 0x110}, &(0x7f0000001180), &(0x7f00000011c0)=0x0) (async) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r14, r15, &(0x7f0000001200)=@IORING_OP_FALLOCATE={0x11, 0x8, 0x0, @fd_index=0x6, 0x401, 0x0, 0x0, 0x0, 0x0, {0x0, r16}}) (async, rerun: 32) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000001240)={'filter\x00', 0x4}, 0x68) (rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x9c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdde}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4881}, 0x40004) 443.674905ms ago: executing program 3 (id=1231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[], 0x40000) r4 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000380)=""/236, 0xec, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, 0x0, 0x1) sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x4000004) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x2c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x2c}}, 0x8000) 405.080879ms ago: executing program 3 (id=1232): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1}, &(0x7f0000000980), &(0x7f0000000800)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xdb}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000880)='R\x91;ust\xe3c\a\xe8q\bC\x0fB\x19\xb94\x16\xda\xc6\xcd\xd9A\x8a\xd3\x97\xe7\xf6\x92\xa0\xf0\xec\x89@\x9b\x9c1\xb1\xef\x9cN\xca\x9b\xfarwB\x0eCT@z\xc3\"\xd3{\x9dZ\x87\xe2\xd8\xf2\xaf\xc2\x06u\xe1I\x1d`\x89\x8bP\tw7h\xb5\x8d\xf3\xbb\x14\xc8\xe9\xaf\xb3\x86\x1d\x91\xb1S\xdd\xfe}\x1f\xdb\xf3\xc0F', r10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000380)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x9, 0x1, 0x2}, {0xa4, 0x5, 0x90, 0x400}, {0x6, 0x5f, 0x6, 0xfffffffa}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 320.503425ms ago: executing program 1 (id=1233): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x22}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000000)={@private=0xa010100, 0x1, 0x0, 0x70, 0x0, [{@remote}, {@dev}, {@broadcast}, {@loopback}, {@multicast2}, {@private}, {@multicast1}]}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x6, &(0x7f0000001700)=[{0x7, 0xff, 0x8, 0x7}, {0x1, 0x2, 0xfc, 0x7ff}, {0x9, 0x3, 0xff, 0x3}, {0x573, 0x1, 0xc, 0xe72}, {0x5, 0xff, 0xb, 0x1979}, {0x3, 0x0, 0x3, 0x4f81}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r6, 0x0, 0x5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) flock(r7, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000001540)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001940)={0x114, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8f}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_virt_wifi\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0x101}, 0x48004) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000010000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) setpgid(0x0, 0x0) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7GtwjAYBOB7eQlJCsRKsAENm7APFQ1TULEGJWMEQWyYACGk7yvs8y+dLYev+nul4bn+l9M26zk0ZbC8DJmmsdbGdG3OSRbHW/rHpN60X5Vw7ZPNWPvtvB2m7v1wszt97mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DvuAQAA//8yUgpN") sendmsg$nl_route(r5, &(0x7f00000016c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001680)={&(0x7f0000001640)=@ipv4_deladdr={0x38, 0x15, 0x400, 0x70bd2a, 0x25dfdbff, {0x2, 0x10, 0x2, 0x3}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) 266.01259ms ago: executing program 1 (id=1234): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r3}, 0x10) setgroups(0x0, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r4, 0x0, 0x0, 0x1001f0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r8}, 0x10) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr=0xc0000200}]}}}]}, 0x38}}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000940)='fscache_cookie\x00', r5, 0x0, 0x400000000000002}, 0x18) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9b0fbba3637d1823, &(0x7f0000000880)={@local}, &(0x7f00000008c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f6c4be3c1016ed1090000003000000030000000040000000200000000000007000000000100000038fa5c3700000000000000000100008500000000000000000200000000000000005f4f00"], &(0x7f0000001540)=""/4096, 0x4c, 0x1000, 0xa}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 160.617768ms ago: executing program 1 (id=1236): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e0008000500000001000000001000000600000069bf07f0ae7d851bb191753ff9c03d32312f0959526a281707fae1511145103e3c51eebf90df718f47865da3fd2029adcdcf2f4d659a02b7e5e06beccaa4552e28d4f147b758399b0d168a1b4ec4359e6196532beed05c6e88e4f2f862e66a62ddccace9ea4155915a8b931af53fe321092483f7764f6d2fc5cf5a8747eefd10d0049029caa5a8ae6f0000000000"], 0x1a6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) (async) write$UHID_CREATE2(r0, &(0x7f0000000680)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xd0, 0x6, 0x737c, 0x498, 0x80000001, 0x6b4, "515fc863426ff37b2987e54ec541d274a9fe56962066565541d00c5d3ac90329efce15f3b1243df194d290d28296217c2de4753d434cbf4151796cf03e457f8f8f4b34509c6cb62f06d80539ded536d64969b4df3fcfbf0ddcaa19d5219426ff83cf5efd8b91eea3b934858f168222853b36f5bfc1f4881c2138be6e9d7fd1c10647b69424b7cc1f07d9d943851d0b597f0538e8f52c7807b164c02f4edb51631ef6c4bcfd0edee65ab04795261308de12a279819b1c341b1985efdc0c59f9e7e87cddabcf65d8d3288219fdcda1db4d"}}, 0x1e8) (async) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)=@v3={0x3000000, [{}, {0x3, 0x9}], r5}, 0x18, 0x2) (async) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000000500)={0xa113, 0xfffffffffffffff7, 0x30000000, 0x7, 0xfffffffffffffffc, 0x0, 0x800, 0x17d6, 0xd81e}) (async) setreuid(r4, r5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 160.455248ms ago: executing program 1 (id=1237): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getrusage(0x0, &(0x7f0000000400)) 145.944269ms ago: executing program 1 (id=1238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x6}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r11, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) read(r11, &(0x7f0000000000)=""/269, 0xfffffdef) (async) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000680)='./file1\x00', 0x10280bc, &(0x7f0000000680)=ANY=[], 0x3, 0x7e9, &(0x7f0000001f80)="$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") pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f00000004c0)='./file1\x00') (async) r12 = gettid() (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYRESDEC=r9, @ANYRES32, @ANYRESOCT=r10, @ANYBLOB="040000000500"/28], 0x50) syz_open_procfs(r12, &(0x7f0000000300)='sessionid\x00') (async) r13 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r13, 0x0) 0s ago: executing program 4 (id=1241): r0 = syz_open_procfs(0x0, &(0x7f0000000040)) unlinkat(r0, &(0x7f0000000000)='./cgroup\x00', 0x200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r1, &(0x7f0000005640)=ANY=[@ANYRES16=r3], 0x69) close(r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000003c0), 0xfffffffa, r4}, 0x38) (async, rerun: 64) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): g attributes in process `syz.0.368'. [ 64.137099][ T29] audit: type=1326 audit(1765797702.444:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ec234df90 code=0x7ffc0000 [ 64.169262][ T29] audit: type=1326 audit(1765797702.444:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 64.192607][ T29] audit: type=1326 audit(1765797702.444:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 64.215899][ T29] audit: type=1326 audit(1765797702.444:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 64.298090][ T4992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.370'. [ 64.324966][ T4995] loop5: detected capacity change from 0 to 128 [ 64.547725][ T5021] tipc: Enabling of bearer rejected, already enabled [ 64.588429][ T5024] openvswitch: netlink: Missing key (keys=40, expected=100) [ 64.601782][ T4989] loop4: detected capacity change from 0 to 8192 [ 64.962078][ T5054] tipc: Enabling of bearer rejected, already enabled [ 65.002385][ T5058] FAULT_INJECTION: forcing a failure. [ 65.002385][ T5058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.015459][ T5058] CPU: 1 UID: 0 PID: 5058 Comm: syz.0.391 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.015531][ T5058] Tainted: [W]=WARN [ 65.015539][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.015552][ T5058] Call Trace: [ 65.015559][ T5058] [ 65.015566][ T5058] __dump_stack+0x1d/0x30 [ 65.015587][ T5058] dump_stack_lvl+0xe8/0x140 [ 65.015609][ T5058] dump_stack+0x15/0x1b [ 65.015704][ T5058] should_fail_ex+0x265/0x280 [ 65.015785][ T5058] should_fail+0xb/0x20 [ 65.015802][ T5058] should_fail_usercopy+0x1a/0x20 [ 65.015877][ T5058] _copy_from_user+0x1c/0xb0 [ 65.015907][ T5058] memdup_user+0x5e/0xd0 [ 65.015927][ T5058] strndup_user+0x68/0xb0 [ 65.015947][ T5058] __se_sys_request_key+0x11e/0x290 [ 65.016046][ T5058] ? fput+0x8f/0xc0 [ 65.016079][ T5058] __x64_sys_request_key+0x55/0x70 [ 65.016113][ T5058] x64_sys_call+0x2321/0x3000 [ 65.016155][ T5058] do_syscall_64+0xd8/0x2c0 [ 65.016189][ T5058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.016268][ T5058] RIP: 0033:0x7f3ec234f749 [ 65.016280][ T5058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.016356][ T5058] RSP: 002b:00007f3ec0daf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 65.016377][ T5058] RAX: ffffffffffffffda RBX: 00007f3ec25a5fa0 RCX: 00007f3ec234f749 [ 65.016415][ T5058] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040 [ 65.016427][ T5058] RBP: 00007f3ec0daf090 R08: 0000000000000000 R09: 0000000000000000 [ 65.016493][ T5058] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 65.016507][ T5058] R13: 00007f3ec25a6038 R14: 00007f3ec25a5fa0 R15: 00007ffda58ad9e8 [ 65.016580][ T5058] [ 65.525134][ T5081] syz.5.397 uses obsolete (PF_INET,SOCK_PACKET) [ 65.628673][ T5093] tipc: Enabling of bearer rejected, already enabled [ 65.665133][ T5095] FAULT_INJECTION: forcing a failure. [ 65.665133][ T5095] name failslab, interval 1, probability 0, space 0, times 0 [ 65.677872][ T5095] CPU: 0 UID: 0 PID: 5095 Comm: syz.3.403 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.677905][ T5095] Tainted: [W]=WARN [ 65.677913][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.677991][ T5095] Call Trace: [ 65.677996][ T5095] [ 65.678004][ T5095] __dump_stack+0x1d/0x30 [ 65.678037][ T5095] dump_stack_lvl+0xe8/0x140 [ 65.678057][ T5095] dump_stack+0x15/0x1b [ 65.678079][ T5095] should_fail_ex+0x265/0x280 [ 65.678104][ T5095] should_failslab+0x8c/0xb0 [ 65.678125][ T5095] kmem_cache_alloc_noprof+0x69/0x4b0 [ 65.678160][ T5095] ? prepare_creds+0x39/0x550 [ 65.678235][ T5095] prepare_creds+0x39/0x550 [ 65.678253][ T5095] lookup_user_key+0x1fa/0xd10 [ 65.678280][ T5095] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 65.678457][ T5095] __se_sys_request_key+0x174/0x290 [ 65.678490][ T5095] ? fput+0x8f/0xc0 [ 65.678520][ T5095] __x64_sys_request_key+0x55/0x70 [ 65.678552][ T5095] x64_sys_call+0x2321/0x3000 [ 65.678641][ T5095] do_syscall_64+0xd8/0x2c0 [ 65.678669][ T5095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.678730][ T5095] RIP: 0033:0x7f3d5515f749 [ 65.678742][ T5095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.678756][ T5095] RSP: 002b:00007f3d53bbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 65.678771][ T5095] RAX: ffffffffffffffda RBX: 00007f3d553b5fa0 RCX: 00007f3d5515f749 [ 65.678860][ T5095] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040 [ 65.678870][ T5095] RBP: 00007f3d53bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 65.678949][ T5095] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 65.678959][ T5095] R13: 00007f3d553b6038 R14: 00007f3d553b5fa0 R15: 00007ffdcdf0b548 [ 65.678975][ T5095] [ 65.872761][ T5098] loop5: detected capacity change from 0 to 512 [ 65.888088][ T5098] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.404: Parent and EA inode have the same ino 15 [ 65.900832][ T5098] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.404: Parent and EA inode have the same ino 15 [ 65.913393][ T5098] EXT4-fs (loop5): 1 orphan inode deleted [ 65.913447][ T5101] loop3: detected capacity change from 0 to 512 [ 65.919606][ T5098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.937600][ T5101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.941531][ T5097] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 65.962308][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.974662][ T5101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.987284][ T5101] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.992629][ T5109] loop5: detected capacity change from 0 to 512 [ 66.020200][ T5101] hsr_slave_0: left promiscuous mode [ 66.025932][ T5101] hsr_slave_1: left promiscuous mode [ 66.125675][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.835196][ T5133] tipc: Enabling of bearer rejected, already enabled [ 67.057945][ T5139] FAULT_INJECTION: forcing a failure. [ 67.057945][ T5139] name failslab, interval 1, probability 0, space 0, times 0 [ 67.070668][ T5143] loop3: detected capacity change from 0 to 512 [ 67.076949][ T5139] CPU: 1 UID: 0 PID: 5139 Comm: syz.4.415 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.076983][ T5139] Tainted: [W]=WARN [ 67.077011][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.077021][ T5139] Call Trace: [ 67.077027][ T5139] [ 67.077032][ T5139] __dump_stack+0x1d/0x30 [ 67.077053][ T5139] dump_stack_lvl+0xe8/0x140 [ 67.077124][ T5139] dump_stack+0x15/0x1b [ 67.077140][ T5139] should_fail_ex+0x265/0x280 [ 67.077161][ T5139] should_failslab+0x8c/0xb0 [ 67.077183][ T5139] __kmalloc_noprof+0xb9/0x5a0 [ 67.077207][ T5139] ? security_prepare_creds+0x52/0x120 [ 67.077255][ T5139] security_prepare_creds+0x52/0x120 [ 67.077369][ T5139] prepare_creds+0x37f/0x550 [ 67.077388][ T5139] lookup_user_key+0x1fa/0xd10 [ 67.077484][ T5139] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 67.077514][ T5139] __se_sys_request_key+0x174/0x290 [ 67.077598][ T5139] ? fput+0x8f/0xc0 [ 67.077627][ T5139] __x64_sys_request_key+0x55/0x70 [ 67.077655][ T5139] x64_sys_call+0x2321/0x3000 [ 67.077800][ T5139] do_syscall_64+0xd8/0x2c0 [ 67.077827][ T5139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.077845][ T5139] RIP: 0033:0x7f364b2ef749 [ 67.077861][ T5139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.077880][ T5139] RSP: 002b:00007f3649d57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 67.077961][ T5139] RAX: ffffffffffffffda RBX: 00007f364b545fa0 RCX: 00007f364b2ef749 [ 67.077975][ T5139] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040 [ 67.077988][ T5139] RBP: 00007f3649d57090 R08: 0000000000000000 R09: 0000000000000000 [ 67.078001][ T5139] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 67.078026][ T5139] R13: 00007f364b546038 R14: 00007f364b545fa0 R15: 00007ffd54a61b28 [ 67.078042][ T5139] [ 67.147502][ T5143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.417: Parent and EA inode have the same ino 15 [ 67.280188][ T5143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.417: Parent and EA inode have the same ino 15 [ 67.292594][ T5143] EXT4-fs (loop3): 1 orphan inode deleted [ 67.300044][ T5143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.315835][ T5143] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 67.338948][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.447391][ T5159] __nla_validate_parse: 8 callbacks suppressed [ 67.447407][ T5159] netlink: 260 bytes leftover after parsing attributes in process `syz.1.421'. [ 67.493136][ T5155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.545484][ T5165] loop3: detected capacity change from 0 to 512 [ 67.561771][ T5165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.637101][ T5155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.835858][ T5155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.009065][ T5165] EXT4-fs (loop3): 1 truncate cleaned up [ 68.016959][ T5165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.682573][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 68.682589][ T29] audit: type=1326 audit(1765797707.346:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 68.701459][ T5155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.730975][ T29] audit: type=1326 audit(1765797707.357:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 68.754354][ T29] audit: type=1326 audit(1765797707.357:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 68.777730][ T29] audit: type=1326 audit(1765797707.378:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 68.801166][ T29] audit: type=1326 audit(1765797707.378:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 68.824492][ T29] audit: type=1326 audit(1765797707.388:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 68.847654][ T29] audit: type=1326 audit(1765797707.388:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 68.871237][ T29] audit: type=1326 audit(1765797707.388:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 68.895063][ T29] audit: type=1326 audit(1765797707.420:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 68.918409][ T29] audit: type=1326 audit(1765797707.420:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="Ptp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 68.944077][ T5176] kthread_run failed with err -4 [ 68.992311][ T5179] netlink: 'syz.4.425': attribute type 12 has an invalid length. [ 69.000155][ T5179] netlink: 132 bytes leftover after parsing attributes in process `syz.4.425'. [ 69.016368][ T5184] @0Ù: renamed from bond_slave_1 (while UP) [ 69.151427][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.162628][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.178878][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.395291][ T5203] macvtap0: refused to change device tx_queue_len [ 69.551105][ T5206] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 69.612031][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.632203][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.672349][ T5215] FAULT_INJECTION: forcing a failure. [ 69.672349][ T5215] name failslab, interval 1, probability 0, space 0, times 0 [ 69.685079][ T5215] CPU: 0 UID: 0 PID: 5215 Comm: syz.0.436 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.685117][ T5215] Tainted: [W]=WARN [ 69.685126][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.685141][ T5215] Call Trace: [ 69.685149][ T5215] [ 69.685158][ T5215] __dump_stack+0x1d/0x30 [ 69.685252][ T5215] dump_stack_lvl+0xe8/0x140 [ 69.685281][ T5215] dump_stack+0x15/0x1b [ 69.685382][ T5215] should_fail_ex+0x265/0x280 [ 69.685408][ T5215] should_failslab+0x8c/0xb0 [ 69.685479][ T5215] kmem_cache_alloc_noprof+0x69/0x4b0 [ 69.685572][ T5215] ? key_alloc+0x27d/0x9a0 [ 69.685643][ T5215] key_alloc+0x27d/0x9a0 [ 69.685671][ T5215] keyring_alloc+0x45/0xb0 [ 69.685756][ T5215] lookup_user_key+0x35f/0xd10 [ 69.685787][ T5215] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 69.685859][ T5215] __se_sys_request_key+0x174/0x290 [ 69.685897][ T5215] ? fput+0x8f/0xc0 [ 69.685924][ T5215] __x64_sys_request_key+0x55/0x70 [ 69.686038][ T5215] x64_sys_call+0x2321/0x3000 [ 69.686071][ T5215] do_syscall_64+0xd8/0x2c0 [ 69.686108][ T5215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.686133][ T5215] RIP: 0033:0x7f3ec234f749 [ 69.686211][ T5215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.686228][ T5215] RSP: 002b:00007f3ec0daf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 69.686249][ T5215] RAX: ffffffffffffffda RBX: 00007f3ec25a5fa0 RCX: 00007f3ec234f749 [ 69.686265][ T5215] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040 [ 69.686281][ T5215] RBP: 00007f3ec0daf090 R08: 0000000000000000 R09: 0000000000000000 [ 69.686297][ T5215] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 69.686312][ T5215] R13: 00007f3ec25a6038 R14: 00007f3ec25a5fa0 R15: 00007ffda58ad9e8 [ 69.686393][ T5215] [ 69.961773][ T5223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.435'. [ 70.006354][ T5218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.429'. [ 70.054939][ T5227] netlink: 260 bytes leftover after parsing attributes in process `syz.0.437'. [ 70.132343][ T5228] loop5: detected capacity change from 0 to 512 [ 70.145644][ T5228] EXT4-fs (loop5): 1 orphan inode deleted [ 70.152816][ T5228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.197286][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.329292][ T5212] loop3: detected capacity change from 0 to 8192 [ 70.392008][ T5237] tipc: Enabling of bearer rejected, already enabled [ 70.420639][ T5237] tipc: Enabling of bearer rejected, already enabled [ 70.463341][ T5239] lo speed is unknown, defaulting to 1000 [ 70.547819][ T5239] lo speed is unknown, defaulting to 1000 [ 70.572665][ T5240] loop5: detected capacity change from 0 to 8192 [ 70.635063][ T5240] loop5: detected capacity change from 0 to 1024 [ 70.884199][ T5240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.153134][ T5264] @0Ù: renamed from bond_slave_1 (while UP) [ 71.171437][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.224350][ T5268] loop5: detected capacity change from 0 to 512 [ 71.271154][ T5268] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.447: Parent and EA inode have the same ino 15 [ 71.297087][ T5268] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.447: Parent and EA inode have the same ino 15 [ 71.316579][ T5275] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5275 comm=syz.0.449 [ 71.349817][ T5268] EXT4-fs (loop5): 1 orphan inode deleted [ 71.356155][ T5268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.456435][ T5268] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 71.483788][ T5283] loop4: detected capacity change from 0 to 128 [ 71.492194][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.919453][ T5292] loop3: detected capacity change from 0 to 2048 [ 71.942514][ T5292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.992253][ T3322] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 72.018509][ T5298] FAULT_INJECTION: forcing a failure. [ 72.018509][ T5298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.031613][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: syz.1.455 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.031665][ T5298] Tainted: [W]=WARN [ 72.031711][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.031721][ T5298] Call Trace: [ 72.031726][ T5298] [ 72.031802][ T5298] __dump_stack+0x1d/0x30 [ 72.031822][ T5298] dump_stack_lvl+0xe8/0x140 [ 72.031842][ T5298] dump_stack+0x15/0x1b [ 72.031861][ T5298] should_fail_ex+0x265/0x280 [ 72.031934][ T5298] should_fail+0xb/0x20 [ 72.031955][ T5298] should_fail_usercopy+0x1a/0x20 [ 72.031979][ T5298] _copy_from_user+0x1c/0xb0 [ 72.032052][ T5298] ___sys_sendmsg+0xc1/0x1d0 [ 72.032089][ T5298] __x64_sys_sendmsg+0xd4/0x160 [ 72.032124][ T5298] x64_sys_call+0x17ba/0x3000 [ 72.032163][ T5298] do_syscall_64+0xd8/0x2c0 [ 72.032199][ T5298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.032220][ T5298] RIP: 0033:0x7fa454edf749 [ 72.032264][ T5298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.032278][ T5298] RSP: 002b:00007fa453947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.032293][ T5298] RAX: ffffffffffffffda RBX: 00007fa455135fa0 RCX: 00007fa454edf749 [ 72.032303][ T5298] RDX: 0000000024040040 RSI: 0000200000000980 RDI: 0000000000000003 [ 72.032312][ T5298] RBP: 00007fa453947090 R08: 0000000000000000 R09: 0000000000000000 [ 72.032354][ T5298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.032367][ T5298] R13: 00007fa455136038 R14: 00007fa455135fa0 R15: 00007ffda7c07048 [ 72.032387][ T5298] [ 72.133201][ T3322] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 72.157368][ T5300] netlink: 260 bytes leftover after parsing attributes in process `syz.5.452'. [ 72.224172][ T5299] loop5: detected capacity change from 0 to 256 [ 72.265562][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.364895][ T5302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'. [ 72.377312][ T5308] FAULT_INJECTION: forcing a failure. [ 72.377312][ T5308] name failslab, interval 1, probability 0, space 0, times 0 [ 72.390158][ T5308] CPU: 1 UID: 0 PID: 5308 Comm: syz.3.454 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.390211][ T5308] Tainted: [W]=WARN [ 72.390218][ T5308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.390312][ T5308] Call Trace: [ 72.390319][ T5308] [ 72.390374][ T5308] __dump_stack+0x1d/0x30 [ 72.390400][ T5308] dump_stack_lvl+0xe8/0x140 [ 72.390425][ T5308] dump_stack+0x15/0x1b [ 72.390446][ T5308] should_fail_ex+0x265/0x280 [ 72.390471][ T5308] should_failslab+0x8c/0xb0 [ 72.390521][ T5308] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 72.390589][ T5308] ? key_alloc+0x2b8/0x9a0 [ 72.390632][ T5308] kmemdup_noprof+0x2b/0x70 [ 72.390654][ T5308] key_alloc+0x2b8/0x9a0 [ 72.390685][ T5308] keyring_alloc+0x45/0xb0 [ 72.390725][ T5308] lookup_user_key+0x35f/0xd10 [ 72.390751][ T5308] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 72.390774][ T5308] __se_sys_request_key+0x174/0x290 [ 72.390804][ T5308] ? fput+0x8f/0xc0 [ 72.390906][ T5308] __x64_sys_request_key+0x55/0x70 [ 72.390975][ T5308] x64_sys_call+0x2321/0x3000 [ 72.391083][ T5308] do_syscall_64+0xd8/0x2c0 [ 72.391117][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.391202][ T5308] RIP: 0033:0x7f3d5515f749 [ 72.391217][ T5308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.391235][ T5308] RSP: 002b:00007f3d53bbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 72.391255][ T5308] RAX: ffffffffffffffda RBX: 00007f3d553b5fa0 RCX: 00007f3d5515f749 [ 72.391268][ T5308] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040 [ 72.391325][ T5308] RBP: 00007f3d53bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 72.391338][ T5308] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 72.391351][ T5308] R13: 00007f3d553b6038 R14: 00007f3d553b5fa0 R15: 00007ffdcdf0b548 [ 72.391371][ T5308] [ 72.643366][ T5312] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5312 comm=syz.3.459 [ 72.686261][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 72.696427][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 72.705193][ T5319] loop3: detected capacity change from 0 to 256 [ 72.715678][ T5319] loop3: detected capacity change from 0 to 512 [ 72.733997][ T5319] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.461: corrupted in-inode xattr: invalid ea_ino [ 72.758235][ T5324] loop4: detected capacity change from 0 to 512 [ 72.765371][ T5319] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.461: couldn't read orphan inode 15 (err -117) [ 72.778423][ T5324] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.462: Parent and EA inode have the same ino 15 [ 72.790875][ T5324] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.462: Parent and EA inode have the same ino 15 [ 72.824462][ T5324] EXT4-fs (loop4): 1 orphan inode deleted [ 72.830665][ T5324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.843043][ T5319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.875558][ T5324] syz0: rxe_newlink: already configured on ipvlan0 [ 72.901446][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.917950][ T5334] loop5: detected capacity change from 0 to 128 [ 72.948595][ T5337] lo speed is unknown, defaulting to 1000 [ 73.072095][ T5337] lo speed is unknown, defaulting to 1000 [ 73.334033][ T5362] tipc: Enabling of bearer rejected, already enabled [ 73.452210][ T5371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5371 comm=syz.0.472 [ 73.475952][ T5370] netlink: 260 bytes leftover after parsing attributes in process `syz.1.473'. [ 73.521355][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.556878][ T5375] loop3: detected capacity change from 0 to 512 [ 73.565185][ T5377] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5377 comm=syz.0.472 [ 73.609084][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 73.609098][ T29] audit: type=1400 audit(1765797712.511:3114): avc: denied { write } for pid=5367 comm="syz.0.472" path="socket:[10076]" dev="sockfs" ino=10076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.609204][ T5368] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5368 comm=syz.0.472 [ 73.625468][ T5375] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.475: Parent and EA inode have the same ino 15 [ 73.665644][ T5375] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.475: Parent and EA inode have the same ino 15 [ 73.681759][ T5375] EXT4-fs (loop3): 1 orphan inode deleted [ 73.719899][ T5375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.736918][ T5375] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 73.770203][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.863977][ T5394] netlink: 92 bytes leftover after parsing attributes in process `syz.5.477'. [ 73.908170][ T29] audit: type=1400 audit(1765797712.837:3115): avc: denied { getopt } for pid=5403 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.059665][ T5407] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 74.066306][ T5407] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 74.073918][ T5407] vhci_hcd vhci_hcd.0: Device attached [ 74.249781][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 74.274155][ T29] audit: type=1400 audit(1765797713.215:3116): avc: denied { create } for pid=5417 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.359488][ T29] audit: type=1326 audit(1765797713.257:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 74.382923][ T29] audit: type=1326 audit(1765797713.257:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 74.406289][ T29] audit: type=1326 audit(1765797713.257:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 74.429613][ T29] audit: type=1400 audit(1765797713.288:3120): avc: denied { mounton } for pid=5422 comm="syz.1.485" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 74.459178][ T10] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 74.469727][ T5424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 74.618133][ T5408] vhci_hcd: connection reset by peer [ 74.618889][ T29] audit: type=1326 audit(1765797713.425:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 74.618918][ T29] audit: type=1326 audit(1765797713.425:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 74.618946][ T29] audit: type=1326 audit(1765797713.425:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 74.647964][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 74.699939][ T2112] vhci_hcd vhci_hcd.4: stop threads [ 74.708496][ T2112] vhci_hcd vhci_hcd.4: release socket [ 74.708822][ T2112] vhci_hcd vhci_hcd.4: disconnect device [ 74.725102][ T5431] loop5: detected capacity change from 0 to 128 [ 74.946570][ T5442] netlink: 'syz.3.489': attribute type 13 has an invalid length. [ 74.989586][ T5442] tipc: Resetting bearer [ 75.024718][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.031981][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.070304][ T5442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.082546][ T5442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.163466][ T58] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.189471][ T58] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.199193][ T58] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.217320][ T58] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.249485][ T5456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.494'. [ 75.273519][ T5459] netlink: 260 bytes leftover after parsing attributes in process `syz.3.493'. [ 75.450918][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.459701][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.508147][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 75.517714][ T5470] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5470 comm=syz.0.497 [ 75.580977][ T5483] FAULT_INJECTION: forcing a failure. [ 75.580977][ T5483] name failslab, interval 1, probability 0, space 0, times 0 [ 75.593641][ T5483] CPU: 0 UID: 0 PID: 5483 Comm: syz.5.502 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.593720][ T5483] Tainted: [W]=WARN [ 75.593726][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.593738][ T5483] Call Trace: [ 75.593791][ T5483] [ 75.593797][ T5483] __dump_stack+0x1d/0x30 [ 75.593817][ T5483] dump_stack_lvl+0xe8/0x140 [ 75.593836][ T5483] dump_stack+0x15/0x1b [ 75.593855][ T5483] should_fail_ex+0x265/0x280 [ 75.593880][ T5483] should_failslab+0x8c/0xb0 [ 75.593917][ T5483] kmem_cache_alloc_noprof+0x69/0x4b0 [ 75.593941][ T5483] ? key_alloc+0x27d/0x9a0 [ 75.593966][ T5483] key_alloc+0x27d/0x9a0 [ 75.593996][ T5483] request_key_and_link+0x43a/0xd70 [ 75.594047][ T5483] ? __pfx_key_default_cmp+0x10/0x10 [ 75.594081][ T5483] ? __pfx_keyring_search_iterator+0x10/0x10 [ 75.594111][ T5483] __se_sys_request_key+0x1df/0x290 [ 75.594145][ T5483] ? fput+0x8f/0xc0 [ 75.594175][ T5483] __x64_sys_request_key+0x55/0x70 [ 75.594207][ T5483] x64_sys_call+0x2321/0x3000 [ 75.594233][ T5483] do_syscall_64+0xd8/0x2c0 [ 75.594269][ T5483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.594286][ T5483] RIP: 0033:0x7f2fb609f749 [ 75.594334][ T5483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.594353][ T5483] RSP: 002b:00007f2fb4b07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 75.594483][ T5483] RAX: ffffffffffffffda RBX: 00007f2fb62f5fa0 RCX: 00007f2fb609f749 [ 75.594538][ T5483] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040 [ 75.594548][ T5483] RBP: 00007f2fb4b07090 R08: 0000000000000000 R09: 0000000000000000 [ 75.594557][ T5483] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 75.594593][ T5483] R13: 00007f2fb62f6038 R14: 00007f2fb62f5fa0 R15: 00007ffeeabdc2f8 [ 75.594638][ T5483] [ 75.906609][ T5490] ªªªªªª: renamed from vlan0 (while UP) [ 75.916642][ T5492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.925389][ T5492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.965319][ T5492] netlink: 'syz.1.505': attribute type 13 has an invalid length. [ 76.023025][ T5498] 9p: Bad value for 'rfdno' [ 76.315564][ T5492] tipc: Resetting bearer [ 76.420287][ T5504] set_capacity_and_notify: 2 callbacks suppressed [ 76.420300][ T5504] loop3: detected capacity change from 0 to 8192 [ 76.455342][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.462696][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.477931][ T5504] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 76.486510][ T5504] FAT-fs (loop3): Filesystem has been set read-only [ 76.607334][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.618904][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.662049][ T9] lo speed is unknown, defaulting to 1000 [ 76.667802][ T9] syz2: Port: 1 Link DOWN [ 76.672493][ T5515] netlink: 'syz.3.509': attribute type 12 has an invalid length. [ 76.680335][ T2112] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.693062][ T2112] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.712725][ T2112] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.732464][ T5519] loop5: detected capacity change from 0 to 128 [ 76.745681][ T2112] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.758752][ T5522] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 76.871315][ T5511] loop4: detected capacity change from 0 to 8192 [ 77.191628][ T5529] program syz.1.512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.257866][ T5531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5531 comm=syz.1.513 [ 77.383706][ T3754] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.384038][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 77.586432][ T5549] __nla_validate_parse: 3 callbacks suppressed [ 77.586444][ T5549] netlink: 260 bytes leftover after parsing attributes in process `syz.1.516'. [ 77.735024][ T5556] netlink: 48 bytes leftover after parsing attributes in process `syz.0.520'. [ 77.748753][ T5558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=5558 comm=syz.5.521 [ 77.860486][ T5566] tipc: Enabling of bearer rejected, already enabled [ 77.863158][ T5568] loop5: detected capacity change from 0 to 512 [ 77.903447][ T5568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.920578][ T5568] netdevsim netdevsim5: Direct firmware load for ./file1 failed with error -2 [ 77.938707][ T5575] netlink: 36 bytes leftover after parsing attributes in process `syz.4.525'. [ 77.948728][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.983874][ T5580] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 77.996054][ T5580] netlink: 'syz.5.528': attribute type 4 has an invalid length. [ 78.168040][ T5589] 9p: Bad value for 'rfdno' [ 78.481346][ T5603] lo speed is unknown, defaulting to 1000 [ 78.713022][ T5603] lo speed is unknown, defaulting to 1000 [ 78.782811][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 78.782825][ T29] audit: type=1400 audit(1765797717.939:3518): avc: denied { unmount } for pid=4365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.888035][ T5614] tmpfs: Bad value for 'mpol' [ 78.900099][ T29] audit: type=1326 audit(1765797718.075:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 78.923487][ T29] audit: type=1326 audit(1765797718.075:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 78.951943][ T5617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.536'. [ 78.961881][ T29] audit: type=1326 audit(1765797718.128:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 78.985330][ T29] audit: type=1326 audit(1765797718.128:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 79.008798][ T29] audit: type=1326 audit(1765797718.128:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 79.032321][ T29] audit: type=1326 audit(1765797718.128:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 79.055901][ T29] audit: type=1326 audit(1765797718.138:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 79.079290][ T29] audit: type=1326 audit(1765797718.138:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ec234df90 code=0x7ffc0000 [ 79.102598][ T29] audit: type=1326 audit(1765797718.138:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5609 comm="syz.0.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 79.204892][ T5623] loop3: detected capacity change from 0 to 2048 [ 79.224347][ T5623] Alternate GPT is invalid, using primary GPT. [ 79.231157][ T5623] loop3: p1 p2 p3 [ 79.235072][ T5623] loop3: partition table partially beyond EOD, truncated [ 79.289134][ T10] usb 9-1: enqueue for inactive port 0 [ 79.294628][ T10] usb 9-1: enqueue for inactive port 0 [ 79.330900][ T5637] netlink: 260 bytes leftover after parsing attributes in process `syz.5.543'. [ 79.342620][ T5637] loop5: detected capacity change from 0 to 256 [ 79.375132][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 79.417068][ T5643] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5643 comm=syz.3.545 [ 79.429805][ T5643] FAULT_INJECTION: forcing a failure. [ 79.429805][ T5643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.443162][ T5643] CPU: 0 UID: 0 PID: 5643 Comm: syz.3.545 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.443193][ T5643] Tainted: [W]=WARN [ 79.443251][ T5643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.443261][ T5643] Call Trace: [ 79.443265][ T5643] [ 79.443271][ T5643] __dump_stack+0x1d/0x30 [ 79.443290][ T5643] dump_stack_lvl+0xe8/0x140 [ 79.443308][ T5643] dump_stack+0x15/0x1b [ 79.443381][ T5643] should_fail_ex+0x265/0x280 [ 79.443400][ T5643] should_fail+0xb/0x20 [ 79.443414][ T5643] should_fail_usercopy+0x1a/0x20 [ 79.443433][ T5643] _copy_to_user+0x20/0xa0 [ 79.443471][ T5643] simple_read_from_buffer+0xb5/0x130 [ 79.443492][ T5643] proc_fail_nth_read+0x10e/0x150 [ 79.443514][ T5643] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.443535][ T5643] vfs_read+0x1a8/0x770 [ 79.443548][ T5643] ? __rcu_read_unlock+0x4f/0x70 [ 79.443564][ T5643] ? __fget_files+0x184/0x1c0 [ 79.443608][ T5643] ? mutex_lock+0x58/0x90 [ 79.443628][ T5643] ksys_read+0xda/0x1a0 [ 79.443643][ T5643] __x64_sys_read+0x40/0x50 [ 79.443690][ T5643] x64_sys_call+0x2889/0x3000 [ 79.443763][ T5643] do_syscall_64+0xd8/0x2c0 [ 79.443835][ T5643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.443902][ T5643] RIP: 0033:0x7f3d5515e15c [ 79.443913][ T5643] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 79.443926][ T5643] RSP: 002b:00007f3d53bbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.444015][ T5643] RAX: ffffffffffffffda RBX: 00007f3d553b5fa0 RCX: 00007f3d5515e15c [ 79.444026][ T5643] RDX: 000000000000000f RSI: 00007f3d53bbf0a0 RDI: 0000000000000007 [ 79.444037][ T5643] RBP: 00007f3d53bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 79.444047][ T5643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.444060][ T5643] R13: 00007f3d553b6038 R14: 00007f3d553b5fa0 R15: 00007ffdcdf0b548 [ 79.444097][ T5643] [ 79.656702][ T5645] netlink: 'syz.3.546': attribute type 13 has an invalid length. [ 79.676003][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.684990][ T5645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.703269][ T5645] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 79.711835][ T5645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5645 comm=syz.3.546 [ 79.755209][ T5647] tipc: Enabling of bearer rejected, failed to enable media [ 80.061609][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.070004][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.102968][ T5665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5665 comm=syz.1.551 [ 80.208523][ T5682] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5682 comm=syz.5.557 [ 80.251062][ T5685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.558'. [ 80.286097][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 80.546414][ T5692] loop5: detected capacity change from 0 to 512 [ 80.709494][ T5692] EXT4-fs (loop5): 1 orphan inode deleted [ 80.717806][ T5694] lo speed is unknown, defaulting to 1000 [ 80.742421][ T5692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.755925][ T5704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 80.768755][ T5691] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 80.808771][ T5685] netlink: 'syz.0.558': attribute type 21 has an invalid length. [ 80.819809][ T5703] lo speed is unknown, defaulting to 1000 [ 80.833689][ T5685] netlink: 'syz.0.558': attribute type 1 has an invalid length. [ 80.841369][ T5685] netlink: 144 bytes leftover after parsing attributes in process `syz.0.558'. [ 80.887194][ T5691] lo speed is unknown, defaulting to 1000 [ 80.936100][ T5694] lo speed is unknown, defaulting to 1000 [ 80.993820][ T5703] lo speed is unknown, defaulting to 1000 [ 81.005859][ T5700] loop4: detected capacity change from 0 to 8192 [ 81.036805][ T5691] lo speed is unknown, defaulting to 1000 [ 81.257096][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.937237][ T5743] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 81.944133][ T10] IPVS: starting estimator thread 0... [ 82.032201][ T5744] IPVS: using max 2496 ests per chain, 124800 per kthread [ 82.067145][ T5752] tipc: Enabling of bearer rejected, already enabled [ 82.078623][ T5752] tipc: Enabling of bearer rejected, already enabled [ 82.233484][ T5766] loop4: detected capacity change from 0 to 512 [ 82.260561][ T5766] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.583: Parent and EA inode have the same ino 15 [ 82.347842][ T5766] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.583: Parent and EA inode have the same ino 15 [ 82.360748][ T5766] EXT4-fs (loop4): 1 orphan inode deleted [ 82.367329][ T5766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.382250][ T5766] syz0: rxe_newlink: already configured on ipvlan0 [ 82.440435][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.448145][ T5775] lo speed is unknown, defaulting to 1000 [ 82.522898][ T5779] __nla_validate_parse: 1 callbacks suppressed [ 82.522909][ T5779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.584'. [ 82.612724][ T5775] lo speed is unknown, defaulting to 1000 [ 82.719446][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 82.836826][ T5791] netlink: 260 bytes leftover after parsing attributes in process `syz.3.588'. [ 82.858743][ T5791] loop3: detected capacity change from 0 to 256 [ 82.921850][ T5794] tipc: Enabling of bearer rejected, already enabled [ 82.938707][ T5794] tipc: Enabling of bearer rejected, already enabled [ 82.986835][ T5801] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 83.015005][ T5805] loop5: detected capacity change from 0 to 512 [ 83.061024][ T5807] netlink: 'syz.1.593': attribute type 13 has an invalid length. [ 83.070979][ T5801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.082704][ T5805] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.595: Parent and EA inode have the same ino 15 [ 83.095408][ T5805] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.595: Parent and EA inode have the same ino 15 [ 83.115474][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 83.143065][ T5805] EXT4-fs (loop5): 1 orphan inode deleted [ 83.203910][ T5805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.227879][ T5805] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 83.235245][ T5812] loop4: detected capacity change from 0 to 1024 [ 83.242448][ T5812] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.254196][ T5812] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 83.262703][ T5812] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.263016][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.269176][ T5812] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.597: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.291353][ T5812] EXT4-fs (loop4): 1 orphan inode deleted [ 83.297809][ T5812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.313122][ T5812] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.597: iget: bad i_size value: 1970324836974602 [ 83.329429][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 83.346355][ T5826] loop5: detected capacity change from 0 to 1024 [ 83.353010][ T5826] EXT4-fs: Ignoring removed orlov option [ 83.367960][ T5826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.409904][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.430665][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.501839][ T5838] tipc: Enabling of bearer rejected, already enabled [ 83.524610][ T5838] tipc: Enabling of bearer rejected, already enabled [ 83.556642][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 83.566401][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 83.589193][ T5833] syz.5.603 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 83.600941][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 83.600953][ T29] audit: type=1400 audit(1765797723.009:4000): avc: denied { write } for pid=5832 comm="syz.5.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.642138][ T29] audit: type=1400 audit(1765797723.009:4001): avc: denied { getopt } for pid=5832 comm="syz.5.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.718809][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 83.787248][ T29] audit: type=1326 audit(1765797723.198:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 83.818491][ T29] audit: type=1326 audit(1765797723.230:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 83.841984][ T29] audit: type=1326 audit(1765797723.230:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 83.857504][ T5867] lo speed is unknown, defaulting to 1000 [ 83.865328][ T29] audit: type=1326 audit(1765797723.230:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 83.894329][ T29] audit: type=1326 audit(1765797723.230:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 83.917708][ T29] audit: type=1326 audit(1765797723.230:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 83.941075][ T29] audit: type=1326 audit(1765797723.230:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 83.964386][ T29] audit: type=1326 audit(1765797723.230:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5858 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 83.976567][ T5867] lo speed is unknown, defaulting to 1000 [ 84.699958][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 85.690599][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 85.903033][ T5873] lo speed is unknown, defaulting to 1000 [ 85.992286][ T5873] lo speed is unknown, defaulting to 1000 [ 86.186141][ T5893] netlink: 260 bytes leftover after parsing attributes in process `syz.1.618'. [ 86.270545][ T5899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.616'. [ 86.384164][ T5901] loop3: detected capacity change from 0 to 1024 [ 86.423572][ T5901] EXT4-fs: Ignoring removed orlov option [ 86.454304][ T5901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.538432][ T5888] loop4: detected capacity change from 0 to 8192 [ 86.681049][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 86.875426][ T5916] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 86.883108][ T5916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.623'. [ 86.965282][ T5923] openvswitch: netlink: Message has -1 unknown bytes. [ 87.145940][ T5938] syz_tun: refused to change device tx_queue_len [ 87.204298][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.422629][ T5960] blktrace: Concurrent blktraces are not allowed on loop7 [ 87.632758][ T5975] loop5: detected capacity change from 0 to 4096 [ 87.653632][ T5975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.671446][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 87.694778][ T5981] lo speed is unknown, defaulting to 1000 [ 88.041895][ T5981] lo speed is unknown, defaulting to 1000 [ 88.200081][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 88.360560][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.368773][ T3425] IPVS: starting estimator thread 0... [ 88.377988][ T5996] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 88.407605][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 88.407619][ T29] audit: type=1326 audit(1765797728.048:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 88.462080][ T29] audit: type=1326 audit(1765797728.090:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 88.485421][ T29] audit: type=1326 audit(1765797728.090:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 88.509031][ T29] audit: type=1326 audit(1765797728.090:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 88.518155][ T6004] loop3: detected capacity change from 0 to 512 [ 88.533213][ T29] audit: type=1326 audit(1765797728.090:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 88.562025][ T29] audit: type=1326 audit(1765797728.090:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3ec2382005 code=0x7ffc0000 [ 88.585464][ T29] audit: type=1326 audit(1765797728.090:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 88.586349][ T5997] IPVS: using max 2064 ests per chain, 103200 per kthread [ 88.608862][ T29] audit: type=1326 audit(1765797728.090:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 88.639296][ T29] audit: type=1326 audit(1765797728.090:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 88.662622][ T29] audit: type=1326 audit(1765797728.090:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.0.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 88.664728][ T6004] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.648: Parent and EA inode have the same ino 15 [ 88.686168][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 88.692016][ T6011] loop5: detected capacity change from 0 to 512 [ 88.711934][ T6004] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.648: Parent and EA inode have the same ino 15 [ 88.737871][ T6004] EXT4-fs (loop3): 1 orphan inode deleted [ 88.744198][ T6004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.762901][ T6004] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 88.770811][ T6011] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.649: Parent and EA inode have the same ino 15 [ 88.793862][ T6014] netlink: 'syz.4.650': attribute type 4 has an invalid length. [ 88.801519][ T6014] netlink: 152 bytes leftover after parsing attributes in process `syz.4.650'. [ 88.826280][ T6016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 88.835177][ T6016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 88.855102][ T6014] .`: renamed from bond0 (while UP) [ 88.866581][ T6011] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.649: Parent and EA inode have the same ino 15 [ 88.868636][ T6016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 88.888401][ T6011] EXT4-fs (loop5): 1 orphan inode deleted [ 88.903853][ T6011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.919261][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.928839][ T6016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 88.937730][ T6016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 88.982678][ T6022] loop3: detected capacity change from 0 to 1024 [ 89.013477][ T6016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 89.019783][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.654'. [ 89.023184][ T6011] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 89.048112][ T6022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.052040][ T6024] loop4: detected capacity change from 0 to 512 [ 89.088924][ T6016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 89.099770][ T6024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.118166][ T6024] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.130088][ T6024] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.654: corrupted xattr block 6: invalid header [ 89.144084][ T6024] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 89.155155][ T6024] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.654: corrupted xattr block 6: invalid header [ 89.155333][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.177514][ T6024] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 89.186831][ T6024] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.654: corrupted xattr block 6: invalid header [ 89.209121][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.230645][ T6024] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 89.243440][ T6024] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.654: corrupted xattr block 6: invalid header [ 89.266422][ T6024] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 89.278112][ T6024] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.654: corrupted xattr block 6: invalid header [ 89.295470][ T6024] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 89.297209][ T6045] pimreg: entered allmulticast mode [ 89.305463][ T6024] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.654: corrupted xattr block 6: invalid header [ 89.348812][ T6044] pimreg: left allmulticast mode [ 89.383690][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.571169][ T6067] rdma_rxe: rxe_newlink: failed to add lo [ 89.637917][ T6090] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 89.653118][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 89.658634][ T6077] lo speed is unknown, defaulting to 1000 [ 89.723489][ T6077] lo speed is unknown, defaulting to 1000 [ 89.749411][ T6092] loop3: detected capacity change from 0 to 1024 [ 89.775925][ T6099] loop3: detected capacity change from 0 to 512 [ 89.799150][ T6099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.812639][ T6099] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.839758][ T6099] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 3: comm syz.3.677: bad entry in directory: inode out of bounds - offset=60, inode=1073741839, rec_len=16, size=2048 fake=0 [ 89.859239][ T6099] EXT4-fs (loop3): Remounting filesystem read-only [ 89.917617][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.951122][ T6118] syz1: rxe_newlink: already configured on lo [ 90.404467][ T6128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.490140][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.597932][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.653043][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 90.759530][ T6143] vhci_hcd vhci_hcd.0: default hub control req: 671e v03f8 i0007 l1 [ 90.846283][ T6149] loop5: detected capacity change from 0 to 512 [ 90.934980][ T6152] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.969402][ T6149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.982072][ T6149] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.634585][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 92.634836][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.615839][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.744642][ T6168] syz1: rxe_newlink: already configured on lo [ 93.940517][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.989620][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 93.989715][ T29] audit: type=1326 audit(1765797733.917:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa454edf749 code=0x0 [ 94.024408][ T6172] __nla_validate_parse: 7 callbacks suppressed [ 94.024419][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 94.076663][ T29] audit: type=1326 audit(1765797733.948:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 94.100137][ T29] audit: type=1326 audit(1765797733.948:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 94.123606][ T29] audit: type=1326 audit(1765797733.948:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 94.147028][ T29] audit: type=1326 audit(1765797733.948:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 94.170311][ T29] audit: type=1326 audit(1765797733.948:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 94.193683][ T29] audit: type=1326 audit(1765797733.948:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 94.216907][ T29] audit: type=1326 audit(1765797733.948:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 94.225496][ T6172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6172 comm=syz.0.694 [ 94.240206][ T29] audit: type=1326 audit(1765797733.948:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 94.252727][ T6172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6172 comm=syz.0.694 [ 94.275911][ T29] audit: type=1326 audit(1765797733.948:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec234f749 code=0x7ffc0000 [ 94.292397][ T2737] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.320431][ T2737] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.329191][ T2737] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.337907][ T2737] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.367690][ T6172] lo speed is unknown, defaulting to 1000 [ 94.432064][ T6172] lo speed is unknown, defaulting to 1000 [ 94.615671][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 94.900851][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 95.074690][ T6213] netlink: 260 bytes leftover after parsing attributes in process `syz.3.703'. [ 95.090390][ T6213] loop3: detected capacity change from 0 to 256 [ 95.162520][ T6218] rdma_rxe: rxe_newlink: failed to add lo [ 95.309318][ T6222] loop4: detected capacity change from 0 to 128 [ 95.606243][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 95.835565][ T6238] netlink: 92 bytes leftover after parsing attributes in process `syz.0.713'. [ 95.844514][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'. [ 95.844962][ T6236] loop3: detected capacity change from 0 to 1024 [ 95.853468][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.713'. [ 95.860164][ T6236] EXT4-fs: Ignoring removed bh option [ 95.874215][ T6236] EXT4-fs: inline encryption not supported [ 95.880099][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 95.884330][ T6238] tipc: Bearer : already 2 bearers with priority 10 [ 95.896269][ T6238] tipc: Bearer : trying with adjusted priority [ 95.903374][ T6238] tipc: New replicast peer: 255.255.255.83 [ 95.909383][ T6238] tipc: Enabled bearer , priority 9 [ 95.917530][ T6236] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.934476][ T6236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 95.944291][ T6238] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 95.954871][ T6238] netlink: 260 bytes leftover after parsing attributes in process `syz.0.713'. [ 95.977021][ T6236] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.712: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.997464][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 96.004259][ T6236] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.712: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.022056][ T6236] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.712: Failed to acquire dquot type 0 [ 96.023963][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.040496][ T6236] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 96.053339][ T6251] bridge_slave_0 (unregistering): left allmulticast mode [ 96.060640][ T6251] bridge_slave_0 (unregistering): left promiscuous mode [ 96.067686][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.069454][ T6236] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.712: mark_inode_dirty error [ 96.087608][ T6236] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 96.099884][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.714'. [ 96.108991][ T6236] EXT4-fs (loop3): 1 orphan inode deleted [ 96.116284][ T6236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.128874][ T3717] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 96.144067][ T3717] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 0 [ 96.202238][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.212156][ T3322] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 96.226403][ T3322] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 96.236996][ T3322] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 96.371952][ T6270] loop0: detected capacity change from 0 to 1024 [ 96.380773][ T6270] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.719: Failed to acquire dquot type 0 [ 96.392574][ T6270] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 96.407071][ T6270] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.719: corrupted inode contents [ 96.419904][ T6270] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #13: comm syz.0.719: mark_inode_dirty error [ 96.431613][ T6270] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.719: corrupted inode contents [ 96.444368][ T6270] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.719: mark_inode_dirty error [ 96.456716][ T6270] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.719: corrupted inode contents [ 96.474888][ T6270] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 96.483841][ T6270] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.719: corrupted inode contents [ 96.496142][ T6270] EXT4-fs error (device loop0): ext4_truncate:4635: inode #13: comm syz.0.719: mark_inode_dirty error [ 96.508124][ T6270] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 96.538183][ T6270] EXT4-fs (loop0): 1 truncate cleaned up [ 96.555232][ T6279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6279 comm= [ 96.568085][ T6270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.596999][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 96.634376][ T6270] 9p: Bad value for 'rfdno' [ 96.700840][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.944912][ T6292] syz1: rxe_newlink: already configured on lo [ 96.960343][ T6296] lo speed is unknown, defaulting to 1000 [ 97.043171][ T6296] lo speed is unknown, defaulting to 1000 [ 97.150994][ T6310] netlink: 'syz.5.731': attribute type 10 has an invalid length. [ 97.159869][ T6306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.190751][ T6310] team0: Port device dummy0 added [ 97.199738][ T6314] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6314 comm=syz.3.732 [ 97.213889][ T6317] netlink: 'syz.5.731': attribute type 10 has an invalid length. [ 97.232210][ T6306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.284004][ T6306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.354277][ T6317] team0: Port device dummy0 removed [ 97.394071][ T6306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.578083][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 97.694882][ T6368] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.762882][ T6334] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.786166][ T1089] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.818264][ T1089] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.835946][ T6377] lo speed is unknown, defaulting to 1000 [ 97.942526][ T6377] lo speed is unknown, defaulting to 1000 [ 98.259565][ T6402] rdma_rxe: rxe_newlink: failed to add lo [ 98.314657][ T6406] vlan2: entered promiscuous mode [ 98.319744][ T6406] hsr_slave_1: entered promiscuous mode [ 98.325401][ T6406] vlan2: entered allmulticast mode [ 98.330675][ T6406] hsr_slave_1: entered allmulticast mode [ 98.377589][ T6409] netlink: 'syz.5.744': attribute type 10 has an invalid length. [ 98.388696][ T6409] team0: Device veth0_macvtap failed to register rx_handler [ 98.446066][ T6418] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length. [ 98.470576][ T6418] tipc: Resetting bearer [ 98.494728][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.501988][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.559965][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.573637][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.581221][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 98.645465][ T2112] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.654491][ T6430] loop3: detected capacity change from 0 to 8192 [ 98.661389][ T2112] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.678634][ T2112] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.706019][ T2112] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.717916][ T6433] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 98.748533][ T6438] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.776791][ T6438] loop3: detected capacity change from 0 to 2048 [ 98.801380][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 98.801394][ T29] audit: type=1400 audit(1765797738.966:5200): avc: denied { ioctl } for pid=6451 comm="syz.0.756" path="socket:[14335]" dev="sockfs" ino=14335 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.807854][ T6438] loop3: p1 p3 p4 [ 98.841140][ T29] audit: type=1400 audit(1765797738.966:5201): avc: denied { write } for pid=6451 comm="syz.0.756" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.861504][ T29] audit: type=1326 audit(1765797738.998:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6417 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2fb609f749 code=0x7ffc0000 [ 98.886516][ T6436] rdma_rxe: rxe_newlink: failed to add lo [ 98.889577][ T6452] x_tables: duplicate underflow at hook 1 [ 98.906017][ T6438] loop3: p4 size 589824 extends beyond EOD, truncated [ 98.956300][ T6464] __nla_validate_parse: 18 callbacks suppressed [ 98.956314][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'. [ 98.971501][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 98.984363][ T29] audit: type=1400 audit(1765797739.155:5203): avc: denied { create } for pid=6462 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.004113][ T29] audit: type=1400 audit(1765797739.155:5204): avc: denied { mounton } for pid=6462 comm="syz.4.759" path="/145/file1" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.048321][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 99.057227][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.761'. [ 99.067855][ T6471] bridge0: port 3(gretap0) entered blocking state [ 99.074438][ T6471] bridge0: port 3(gretap0) entered disabled state [ 99.081293][ T6471] gretap0: entered allmulticast mode [ 99.087586][ T6471] gretap0: entered promiscuous mode [ 99.093186][ T6471] bridge0: port 3(gretap0) entered blocking state [ 99.099633][ T6471] bridge0: port 3(gretap0) entered forwarding state [ 99.108656][ T6471] gretap0: left allmulticast mode [ 99.113825][ T6471] gretap0: left promiscuous mode [ 99.118911][ T6471] bridge0: port 3(gretap0) entered disabled state [ 99.128327][ T29] audit: type=1326 audit(1765797739.302:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 99.161051][ T29] audit: type=1326 audit(1765797739.302:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 99.184561][ T29] audit: type=1326 audit(1765797739.302:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 99.207971][ T29] audit: type=1326 audit(1765797739.302:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 99.231322][ T29] audit: type=1326 audit(1765797739.302:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6470 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 99.257287][ T6478] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 99.297081][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 99.308259][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 99.317207][ T6485] loop3: detected capacity change from 0 to 1024 [ 99.324138][ T6485] EXT4-fs: dax option not supported [ 99.327251][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 99.341675][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 99.369319][ T6479] lo speed is unknown, defaulting to 1000 [ 99.371027][ T3425] kernel write not supported for file bpf-prog (pid: 3425 comm: kworker/1:4) [ 99.481790][ T6479] lo speed is unknown, defaulting to 1000 [ 99.568933][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 99.675431][ T6499] netlink: 'syz.1.768': attribute type 4 has an invalid length. [ 99.782455][ T6504] syz1: rxe_newlink: already configured on lo [ 99.805225][ T6506] netlink: 'syz.4.770': attribute type 10 has an invalid length. [ 99.813055][ T6506] syz_tun: entered promiscuous mode [ 99.828293][ T6506] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 99.997329][ T6487] geneve2: entered promiscuous mode [ 100.011252][ T6323] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 54770 - 0 [ 100.021382][ T6323] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 54770 - 0 [ 100.031361][ T6323] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 54770 - 0 [ 100.033772][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.776'. [ 100.041073][ T6323] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 54770 - 0 [ 100.276555][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.778'. [ 100.303313][ T6533] Restarting kernel threads ... [ 100.321829][ T6533] Done restarting kernel threads. [ 100.332116][ T6551] rdma_rxe: rxe_newlink: failed to add lo [ 100.529041][ T6566] pim6reg: entered allmulticast mode [ 100.536523][ T6568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6568 comm=syz.5.788 [ 100.549173][ T6567] pim6reg: left allmulticast mode [ 100.810944][ T6572] netlink: 'syz.0.790': attribute type 3 has an invalid length. [ 101.520307][ T6599] rdma_rxe: rxe_newlink: failed to add lo [ 101.596652][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.619821][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.025944][ T6640] rdma_rxe: rxe_newlink: failed to add lo [ 102.041890][ T6642] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 102.050989][ T6642] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 102.083817][ T6647] netlink: 'syz.1.811': attribute type 4 has an invalid length. [ 102.529988][ T6678] lo speed is unknown, defaulting to 1000 [ 102.571203][ T6679] bond0: entered promiscuous mode [ 102.576319][ T6679] bond_slave_0: entered promiscuous mode [ 102.582196][ T6679] @0Ù: entered promiscuous mode [ 102.593842][ T6679] bond0: left promiscuous mode [ 102.598752][ T6679] bond_slave_0: left promiscuous mode [ 102.604174][ T6679] @0Ù: left promiscuous mode [ 102.666025][ T6678] lo speed is unknown, defaulting to 1000 [ 102.741707][ T6680] pimreg: entered allmulticast mode [ 102.755556][ T6678] pimreg: left allmulticast mode [ 102.951762][ T6716] rdma_rxe: rxe_newlink: failed to add lo [ 103.191289][ T6736] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 103.413331][ T6755] netlink: 'syz.5.841': attribute type 10 has an invalid length. [ 103.437090][ T6755] team0: Port device dummy0 added [ 103.472794][ T6761] tipc: Enabling of bearer rejected, already enabled [ 103.521709][ T3374] hid_parser_main: 28 callbacks suppressed [ 103.521723][ T3374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 103.533956][ T6761] tipc: Enabling of bearer rejected, already enabled [ 103.543251][ T3374] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.714036][ T29] kauditd_printk_skb: 724 callbacks suppressed [ 103.714049][ T29] audit: type=1400 audit(1765797744.121:5934): avc: denied { create } for pid=6769 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.728891][ T6778] vlan3: entered promiscuous mode [ 103.739835][ T29] audit: type=1400 audit(1765797744.121:5935): avc: denied { create } for pid=6769 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.764334][ T6778] bridge0: entered promiscuous mode [ 103.928409][ T29] audit: type=1400 audit(1765797744.341:5936): avc: denied { create } for pid=6782 comm="syz.1.851" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.949627][ T29] audit: type=1400 audit(1765797744.373:5937): avc: denied { write } for pid=6782 comm="syz.1.851" name="file0" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.971989][ T29] audit: type=1400 audit(1765797744.373:5938): avc: denied { open } for pid=6782 comm="syz.1.851" path="/203/file0" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.998579][ T6781] __nla_validate_parse: 24 callbacks suppressed [ 103.998603][ T6781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.850'. [ 104.032419][ T6783] block device autoloading is deprecated and will be removed. [ 104.431776][ T29] audit: type=1326 audit(1765797744.572:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 104.455121][ T29] audit: type=1326 audit(1765797744.572:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 104.478527][ T29] audit: type=1326 audit(1765797744.572:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 104.501832][ T29] audit: type=1326 audit(1765797744.572:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 104.525191][ T29] audit: type=1326 audit(1765797744.572:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 104.646850][ T6809] loop3: detected capacity change from 0 to 128 [ 104.682723][ T6813] capability: warning: `syz.1.859' uses 32-bit capabilities (legacy support in use) [ 104.695157][ T6809] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.737870][ T6809] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.814971][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.847644][ T6828] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 104.893110][ T6828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.951403][ T6839] netlink: 260 bytes leftover after parsing attributes in process `syz.3.865'. [ 104.978030][ T6843] atomic_op ffff888120d2e528 conn xmit_atomic 0000000000000000 [ 104.989988][ T6839] loop3: detected capacity change from 0 to 256 [ 105.049099][ T6845] netlink: 40 bytes leftover after parsing attributes in process `syz.1.867'. [ 105.063467][ T6843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.867'. [ 105.397121][ T3483] kernel read not supported for file /ppp (pid: 3483 comm: kworker/0:6) [ 105.437763][ T6879] netlink: 176 bytes leftover after parsing attributes in process `syz.4.875'. [ 105.513232][ T6885] lo speed is unknown, defaulting to 1000 [ 105.582863][ T6890] netlink: 'syz.5.879': attribute type 39 has an invalid length. [ 105.654019][ T6894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6894 comm=syz.4.878 [ 105.657873][ T6885] lo speed is unknown, defaulting to 1000 [ 105.666483][ T6894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6894 comm=syz.4.878 [ 105.847529][ T6914] program syz.0.886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.838474][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 106.860130][ T6935] vlan0: entered allmulticast mode [ 106.865255][ T6935] hsr0: entered allmulticast mode [ 106.870369][ T6935] hsr_slave_0: entered allmulticast mode [ 106.876016][ T6935] hsr_slave_1: entered allmulticast mode [ 106.928444][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 106.952143][ T6935] dvmrp6: entered allmulticast mode [ 107.102047][ T6950] netlink: 260 bytes leftover after parsing attributes in process `syz.4.894'. [ 107.625290][ T6964] lo speed is unknown, defaulting to 1000 [ 107.734305][ T6964] lo speed is unknown, defaulting to 1000 [ 107.839896][ T6971] netlink: 36 bytes leftover after parsing attributes in process `syz.4.899'. [ 107.899063][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 108.052710][ T6986] batadv_slave_0: entered promiscuous mode [ 108.060772][ T6985] batadv_slave_0: left promiscuous mode [ 108.094033][ T6995] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 108.255155][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.434225][ T6988] lo speed is unknown, defaulting to 1000 [ 108.446893][ T7009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7009 comm=syz.1.907 [ 108.515417][ T7001] bond1 (unregistering): Released all slaves [ 108.593686][ T29] kauditd_printk_skb: 592 callbacks suppressed [ 108.593699][ T29] audit: type=1400 audit(1765797749.244:6536): avc: denied { getopt } for pid=6993 comm="syz.1.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.924283][ T6988] lo speed is unknown, defaulting to 1000 [ 109.137169][ T7017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.147580][ T7017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.157993][ T7017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54770 - 0 [ 109.183381][ T29] audit: type=1326 audit(1765797749.853:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 109.206729][ T29] audit: type=1326 audit(1765797749.853:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 109.230010][ T29] audit: type=1326 audit(1765797749.853:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 109.345705][ T7017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.356059][ T7017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.366436][ T7017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54770 - 0 [ 109.405066][ T29] audit: type=1400 audit(1765797749.989:6540): avc: denied { bind } for pid=7026 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.425481][ T29] audit: type=1400 audit(1765797749.989:6541): avc: denied { connect } for pid=7026 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.569110][ T7017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.579435][ T7017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.589698][ T7017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54770 - 0 [ 109.665492][ T7033] lo speed is unknown, defaulting to 1000 [ 109.725687][ T7033] lo speed is unknown, defaulting to 1000 [ 109.758527][ T7017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.768828][ T7017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.779092][ T7017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54770 - 0 [ 109.789493][ T29] audit: type=1400 audit(1765797750.388:6542): avc: denied { ioctl } for pid=7034 comm="syz.4.915" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.971344][ T29] audit: type=1400 audit(1765797750.672:6543): avc: denied { execute } for pid=7044 comm="syz.3.919" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.018428][ T29] audit: type=1326 audit(1765797750.724:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 110.018545][ T29] audit: type=1326 audit(1765797750.724:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364b2ef749 code=0x7ffc0000 [ 110.019126][ T7051] smc: removing ib device syz1 [ 110.095855][ T7054] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 110.095876][ T7054] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 110.097925][ T7054] 9p: Bad value for 'wfdno' [ 110.098387][ T7054] siw: device registration error -23 [ 110.177714][ T6316] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.177794][ T6316] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 54770 - 0 [ 110.177820][ T6316] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.212946][ T6316] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.212974][ T6316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 54770 - 0 [ 110.213002][ T6316] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.213092][ T6316] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.213118][ T6316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 54770 - 0 [ 110.213140][ T6316] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.213187][ T6316] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.213293][ T6316] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 54770 - 0 [ 110.213321][ T6316] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 110.213510][ T7068] syz_tun: entered allmulticast mode [ 110.407912][ T7068] syz_tun: left allmulticast mode [ 110.557338][ T7084] __nla_validate_parse: 1 callbacks suppressed [ 110.557419][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 110.753471][ T7086] loop3: detected capacity change from 0 to 1024 [ 110.769233][ T7086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.848603][ T7086] bridge0: entered promiscuous mode [ 110.854003][ T7086] macsec1: entered promiscuous mode [ 110.875964][ T7086] bridge0: port 3(macsec1) entered blocking state [ 110.882455][ T7086] bridge0: port 3(macsec1) entered disabled state [ 110.922001][ T7086] macsec1: entered allmulticast mode [ 110.927344][ T7086] bridge0: entered allmulticast mode [ 110.933209][ T7086] macsec1: left allmulticast mode [ 110.938247][ T7086] bridge0: left allmulticast mode [ 110.989372][ T7086] bridge0: left promiscuous mode [ 111.053850][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.141772][ T7095] siw: device registration error -23 [ 111.148290][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 111.157152][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 111.378722][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.5.938'. [ 111.461455][ T7122] tipc: Enabling of bearer rejected, already enabled [ 111.477203][ T7122] tipc: Enabling of bearer rejected, already enabled [ 111.500340][ T7129] sd 0:0:1:0: device reset [ 111.501492][ T7124] xt_TPROXY: Can be used only with -p tcp or -p udp [ 111.512566][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 111.521387][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'. [ 111.530423][ T7128] netlink: 'syz.0.941': attribute type 11 has an invalid length. [ 111.666589][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 111.675452][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'. [ 111.684339][ T7128] netlink: 'syz.0.941': attribute type 11 has an invalid length. [ 111.860925][ T7119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 111.942455][ T7141] bridge0: entered promiscuous mode [ 111.948836][ T7141] macsec1: entered promiscuous mode [ 111.949081][ T7141] bridge0: port 3(macsec1) entered blocking state [ 111.949111][ T7141] bridge0: port 3(macsec1) entered disabled state [ 111.949243][ T7141] macsec1: entered allmulticast mode [ 111.949254][ T7141] bridge0: entered allmulticast mode [ 111.955090][ T7141] macsec1: left allmulticast mode [ 111.983605][ T7141] bridge0: left allmulticast mode [ 111.989562][ T7141] bridge0: left promiscuous mode [ 112.006382][ T7142] sch_fq: defrate 4294967295 ignored. [ 112.019122][ T7142] loop3: detected capacity change from 0 to 1024 [ 112.025987][ T7142] EXT4-fs: Ignoring removed orlov option [ 112.031823][ T7142] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.065347][ T7142] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c118, mo2=0002] [ 112.078954][ T7142] System zones: 0-1, 3-12 [ 112.106544][ T7142] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.121876][ T7146] lo speed is unknown, defaulting to 1000 [ 112.128194][ T7141] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 16: comm syz.3.944: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 112.149500][ T7151] netlink: 260 bytes leftover after parsing attributes in process `syz.5.946'. [ 112.234145][ T7159] tipc: Enabling of bearer rejected, already enabled [ 112.246139][ T7159] tipc: Enabling of bearer rejected, already enabled [ 112.286898][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 112.307611][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 112.450607][ T7162] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 112.514799][ T7171] lo speed is unknown, defaulting to 1000 [ 112.830462][ T7177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=7177 comm=syz.4.954 [ 112.919781][ T7183] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 113.077258][ T7196] random: crng reseeded on system resumption [ 114.072709][ T7233] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 114.086193][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 114.086209][ T29] audit: type=1400 audit(1765797755.018:6806): avc: denied { ioctl } for pid=7230 comm="syz.4.972" path="/204/file0" dev="tmpfs" ino=1117 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.170589][ T29] audit: type=1326 audit(1765797755.081:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 114.193930][ T29] audit: type=1326 audit(1765797755.081:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 114.217154][ T29] audit: type=1326 audit(1765797755.081:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 114.240495][ T29] audit: type=1326 audit(1765797755.081:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 114.263830][ T29] audit: type=1326 audit(1765797755.081:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 114.287276][ T29] audit: type=1326 audit(1765797755.081:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 114.310597][ T29] audit: type=1326 audit(1765797755.081:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 114.334156][ T29] audit: type=1326 audit(1765797755.081:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 114.357572][ T29] audit: type=1326 audit(1765797755.081:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7231 comm="syz.1.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 114.407582][ T7247] loop3: detected capacity change from 0 to 1024 [ 114.436405][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.443899][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.451213][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.458614][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.465933][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.475049][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.482493][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.490117][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.497766][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.505204][ T7247] rdma_op ffff888120d59180 conn xmit_rdma 0000000000000000 [ 114.556870][ T6376] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.565315][ T6376] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.578189][ T6376] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.586685][ T6376] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.601745][ T7260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7260 comm=syz.3.979 [ 115.065807][ T7310] tmpfs: Bad value for 'mpol' [ 115.862776][ T7328] syz_tun: entered allmulticast mode [ 115.992896][ T7331] syz_tun: left allmulticast mode [ 116.193801][ T7334] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 116.217383][ T7334] team0: Port device dummy0 added [ 116.339605][ T7349] __nla_validate_parse: 18 callbacks suppressed [ 116.339616][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1003'. [ 116.365930][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 116.375011][ T7354] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1005'. [ 116.384167][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 116.565585][ T7376] block device autoloading is deprecated and will be removed. [ 116.565608][ T7377] block device autoloading is deprecated and will be removed. [ 116.623112][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 116.632160][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 116.637879][ T7376] blktrace: Concurrent blktraces are not allowed on loop6 [ 116.666352][ T7376] vlan2: entered allmulticast mode [ 116.671595][ T7376] dummy0: entered allmulticast mode [ 117.367126][ T7395] 9p: Could not find request transport: =tÜÈv:@›– ‚‰¶Çúþ3Î0x0000000000000004 [ 117.395475][ T7395] hub 1-0:1.0: USB hub found [ 117.400162][ T7395] hub 1-0:1.0: 8 ports detected [ 117.413843][ T7405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7405 comm=syz.0.1019 [ 117.428844][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1019'. [ 117.547181][ T7422] syz_tun: entered allmulticast mode [ 117.568282][ T7422] syz_tun: left allmulticast mode [ 117.761380][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.765770][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1026'. [ 117.778855][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 117.792879][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.828425][ T7452] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 117.842647][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.857429][ T7450] lo speed is unknown, defaulting to 1000 [ 117.863357][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.872351][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.880855][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.889452][ T7452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.900338][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 117.932907][ T7452] bond4: (slave dummy0): making interface the new active one [ 117.952458][ T7452] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 117.971974][ T7452] netlink: 'syz.1.1033': attribute type 10 has an invalid length. [ 117.987768][ T7452] dummy0: entered promiscuous mode [ 117.993926][ T7452] bond4: (slave dummy0): Releasing active interface [ 118.593814][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.685820][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.705017][ T7482] syz_tun: entered allmulticast mode [ 118.773392][ T7482] syz_tun: left allmulticast mode [ 118.788518][ T7493] all: renamed from team_slave_0 (while UP) [ 118.850534][ T7479] lo speed is unknown, defaulting to 1000 [ 118.861455][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 118.861468][ T29] audit: type=1326 audit(1765797760.025:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 118.944180][ T29] audit: type=1326 audit(1765797760.057:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 118.967601][ T29] audit: type=1326 audit(1765797760.057:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 119.001048][ T7511] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 119.086416][ T7515] netlink: 'syz.3.1052': attribute type 13 has an invalid length. [ 119.131175][ T7515] tipc: Resetting bearer [ 119.182733][ T29] audit: type=1400 audit(1765797760.361:6924): avc: denied { ioctl } for pid=7522 comm="syz.4.1054" path="socket:[18695]" dev="sockfs" ino=18695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.289175][ T7535] @ÿ: renamed from hsr0 [ 119.364146][ T29] audit: type=1326 audit(1765797760.550:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 119.399819][ T29] audit: type=1326 audit(1765797760.582:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 119.423363][ T29] audit: type=1326 audit(1765797760.582:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 119.450698][ T7545] siw: device registration error -23 [ 119.519507][ T29] audit: type=1326 audit(1765797760.666:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 119.529454][ T7553] tipc: Enabling of bearer rejected, already enabled [ 119.542972][ T29] audit: type=1326 audit(1765797760.666:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 119.573698][ T7553] tipc: Enabling of bearer rejected, already enabled [ 119.574178][ T29] audit: type=1326 audit(1765797760.666:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.1.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa454eddf90 code=0x7ffc0000 [ 119.614173][ T7556] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 119.626313][ T7556] tipc: Enabling of bearer rejected, failed to enable media [ 119.637134][ T7556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 119.643747][ T7556] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.651196][ T7556] vhci_hcd vhci_hcd.0: Device attached [ 119.656925][ T7559] vhci_hcd: connection closed [ 119.657113][ T6363] vhci_hcd vhci_hcd.1: stop threads [ 119.667201][ T6363] vhci_hcd vhci_hcd.1: release socket [ 119.672583][ T6363] vhci_hcd vhci_hcd.1: disconnect device [ 119.859644][ T7590] tipc: Enabling of bearer rejected, already enabled [ 119.870746][ T7590] tipc: Enabling of bearer rejected, already enabled [ 119.905431][ T7593] hub 9-0:1.0: USB hub found [ 119.910146][ T7593] hub 9-0:1.0: 8 ports detected [ 119.989278][ T7596] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7596 comm=syz.5.1077 [ 120.233395][ T7629] tipc: Resetting bearer [ 120.260862][ T7629] syz_tun: left promiscuous mode [ 120.266761][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.274057][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.325954][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.336546][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.369086][ T7629] vlan3: left promiscuous mode [ 120.374074][ T7629] bridge0: left promiscuous mode [ 120.382164][ T1089] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.390563][ T1089] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.399640][ T1089] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.408031][ T1089] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.416566][ T1089] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.424971][ T1089] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.442806][ T1089] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.451277][ T1089] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.880893][ T7687] pimreg: entered allmulticast mode [ 120.888162][ T7687] pimreg: left allmulticast mode [ 121.441389][ T7718] tipc: Enabling of bearer rejected, already enabled [ 121.452062][ T7718] tipc: Enabling of bearer rejected, already enabled [ 121.567054][ T7721] __nla_validate_parse: 15 callbacks suppressed [ 121.567147][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1113'. [ 121.583041][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 121.679339][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 121.834068][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 122.191951][ T7763] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1127'. [ 122.524855][ T7785] tipc: Enabling of bearer rejected, already enabled [ 122.556051][ T7782] netlink: 'syz.0.1135': attribute type 13 has an invalid length. [ 122.587067][ T7782] gretap0: refused to change device tx_queue_len [ 122.610123][ T7782] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.633502][ T7783] tipc: Enabling of bearer rejected, already enabled [ 122.907080][ T7801] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 123.117488][ T7818] lo speed is unknown, defaulting to 1000 [ 123.288955][ T7838] 9p: Bad value for 'rfdno' [ 123.416033][ T7847] lo speed is unknown, defaulting to 1000 [ 123.630025][ T7850] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1153'. [ 123.890349][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 123.890364][ T29] audit: type=1400 audit(1765797765.306:7183): avc: denied { remount } for pid=7854 comm="syz.0.1155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.923631][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7856 comm=syz.0.1155 [ 123.936465][ T29] audit: type=1400 audit(1765797765.337:7184): avc: denied { bind } for pid=7854 comm="syz.0.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.955784][ T29] audit: type=1400 audit(1765797765.337:7185): avc: denied { name_bind } for pid=7854 comm="syz.0.1155" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.977588][ T29] audit: type=1400 audit(1765797765.337:7186): avc: denied { node_bind } for pid=7854 comm="syz.0.1155" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 123.998416][ T29] audit: type=1400 audit(1765797765.337:7187): avc: denied { write } for pid=7854 comm="syz.0.1155" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.002480][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7856 comm=syz.0.1155 [ 124.049894][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7856 comm=syz.0.1155 [ 124.157258][ T29] audit: type=1400 audit(1765797765.505:7188): avc: denied { append } for pid=7851 comm="syz.1.1154" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.177514][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7856 comm=syz.0.1155 [ 124.180241][ T29] audit: type=1326 audit(1765797765.547:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 124.216119][ T29] audit: type=1326 audit(1765797765.547:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 124.239719][ T29] audit: type=1326 audit(1765797765.547:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 124.263174][ T29] audit: type=1326 audit(1765797765.547:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.1158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa454edf749 code=0x7ffc0000 [ 124.287932][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7856 comm=syz.0.1155 [ 124.309962][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7856 comm=syz.0.1155 [ 124.491397][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7856 comm=syz.0.1155 [ 124.524905][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7856 comm=syz.0.1155 [ 124.538157][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7856 comm=syz.0.1155 [ 124.805646][ T7906] tipc: Enabling of bearer rejected, media not registered [ 124.823096][ T7906] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.948384][ T7911] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 124.968799][ T7911] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1171'. [ 125.017075][ T7916] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1171'. [ 125.032682][ T7916] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1171'. [ 125.126290][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 125.193981][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.202924][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.226044][ T7923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.255463][ T7923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.883756][ T7966] netem: change failed [ 126.727456][ T7986] selinux_netlink_send: 24 callbacks suppressed [ 126.727470][ T7986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7986 comm=syz.0.1193 [ 126.746303][ T7986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7986 comm=syz.0.1193 [ 127.480272][ T7992] __nla_validate_parse: 12 callbacks suppressed [ 127.480286][ T7992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1194'. [ 128.167213][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1199'. [ 128.176353][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1199'. [ 128.836593][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 128.836643][ T29] audit: type=1326 audit(1765797770.418:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 128.866311][ T29] audit: type=1326 audit(1765797770.418:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 128.889762][ T29] audit: type=1326 audit(1765797770.418:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 128.913236][ T29] audit: type=1326 audit(1765797770.418:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 128.936690][ T29] audit: type=1326 audit(1765797770.418:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 128.960199][ T29] audit: type=1326 audit(1765797770.418:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 128.983756][ T29] audit: type=1326 audit(1765797770.418:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 129.007182][ T29] audit: type=1326 audit(1765797770.418:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5515f749 code=0x7ffc0000 [ 129.172900][ T8033] tipc: Enabling of bearer rejected, already enabled [ 129.287850][ T8036] netlink: 'syz.1.1202': attribute type 3 has an invalid length. [ 129.295887][ T8036] netlink: 'syz.1.1202': attribute type 3 has an invalid length. [ 129.363131][ T8033] tipc: Enabling of bearer rejected, already enabled [ 129.375009][ T29] audit: type=1400 audit(1765797770.985:7387): avc: denied { sqpoll } for pid=8023 comm="syz.1.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.881912][ T8049] lo speed is unknown, defaulting to 1000 [ 129.916328][ T29] audit: type=1400 audit(1765797771.626:7388): avc: denied { create } for pid=8052 comm="syz.1.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.973475][ T8055] syz_tun: entered allmulticast mode [ 129.982972][ T8055] syz_tun: left allmulticast mode [ 130.253848][ T8064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1212'. [ 130.265950][ T8065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1213'. [ 130.327262][ T8065] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 130.329849][ T8064] ip6gre1: entered promiscuous mode [ 130.340232][ T8064] ip6gre1: entered allmulticast mode [ 130.390894][ T8071] tmpfs: Bad value for 'mpol' [ 130.399738][ T8073] tipc: Enabling of bearer rejected, already enabled [ 130.435900][ T8073] tipc: Enabling of bearer rejected, already enabled [ 130.447593][ T8079] SELinux: Context system_u:object is not valid (left unmapped). [ 130.625890][ T8088] syz_tun: entered allmulticast mode [ 130.648745][ T8088] syz_tun: left allmulticast mode [ 130.667682][ T8091] RDS: rds_bind could not find a transport for 0:0:ffff:ff9d::1, load rds_tcp or rds_rdma? [ 130.819919][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1225'. [ 131.151616][ T8111] tmpfs: Bad value for 'mpol' [ 131.190046][ T8118] tipc: Enabling of bearer rejected, already enabled [ 131.201753][ T8118] tipc: Enabling of bearer rejected, already enabled [ 131.286069][ T8122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8122 comm=syz.1.1233 [ 131.425144][ T3374] hid-generic 0008:0005:0001.0003: item fetching failed at offset 12/142 [ 131.434010][ T3374] hid-generic 0008:0005:0001.0003: probe with driver hid-generic failed with error -22 [ 131.650000][ T8149] ================================================================== [ 131.658097][ T8149] BUG: KCSAN: data-race in alloc_htab_elem / bcmp [ 131.664523][ T8149] [ 131.666846][ T8149] write to 0xffff88811ae3c270 of 4 bytes by task 8146 on cpu 0: [ 131.674465][ T8149] alloc_htab_elem+0x226/0x420 [ 131.679233][ T8149] htab_map_update_elem+0x312/0x980 [ 131.684435][ T8149] bpf_map_update_value+0x4f4/0x570 [ 131.689648][ T8149] generic_map_update_batch+0x3eb/0x540 [ 131.695199][ T8149] bpf_map_do_batch+0x25c/0x380 [ 131.700050][ T8149] __sys_bpf+0x5f8/0x7c0 [ 131.704287][ T8149] __x64_sys_bpf+0x41/0x50 [ 131.708714][ T8149] x64_sys_call+0x28e1/0x3000 [ 131.713397][ T8149] do_syscall_64+0xd8/0x2c0 [ 131.717903][ T8149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.723791][ T8149] [ 131.726111][ T8149] read to 0xffff88811ae3c271 of 1 bytes by task 8149 on cpu 1: [ 131.733642][ T8149] bcmp+0x52/0x90 [ 131.737272][ T8149] __htab_map_lookup_elem+0xd0/0x150 [ 131.742559][ T8149] bpf_prog_f32ce9a4f916f6a1+0x48/0x59 [ 131.748017][ T8149] bpf_trace_run3+0x10f/0x1e0 [ 131.752697][ T8149] __traceiter_kmem_cache_free+0x38/0x60 [ 131.758331][ T8149] kmem_cache_free+0x327/0x3a0 [ 131.763095][ T8149] putname+0x90/0x100 [ 131.767072][ T8149] do_sys_openat2+0xd7/0x150 [ 131.771661][ T8149] __x64_sys_openat+0xf2/0x120 [ 131.776428][ T8149] x64_sys_call+0x2b07/0x3000 [ 131.781103][ T8149] do_syscall_64+0xd8/0x2c0 [ 131.785611][ T8149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.791497][ T8149] [ 131.793810][ T8149] value changed: 0x00 -> 0x2f [ 131.798471][ T8149] [ 131.800784][ T8149] Reported by Kernel Concurrency Sanitizer on: [ 131.806929][ T8149] CPU: 1 UID: 0 PID: 8149 Comm: syz.1.1240 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 131.818211][ T8149] Tainted: [W]=WARN [ 131.822003][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.832056][ T8149] ==================================================================