last executing test programs: 7m29.552809771s ago: executing program 1 (id=1958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) 7m29.406766063s ago: executing program 1 (id=1962): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r0, 0x0, 0x478) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000001000000080000e8"], 0x50) r3 = socket(0x1d, 0x2, 0x6) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x14c, &(0x7f0000000300)=0x6, 0x0, 0x4) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000a03000000000000000000000400000000020000000000000f0200000000005f"], 0x0, 0x40, 0x0, 0x8}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) readlinkat(r0, &(0x7f0000000340)='./file1\x00', &(0x7f00000003c0), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 7m28.498456438s ago: executing program 1 (id=1969): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x14, r0, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000004) 7m28.412313599s ago: executing program 1 (id=1970): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x15) rmdir(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) 7m28.105204803s ago: executing program 1 (id=1975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) listen(0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000100)="ab", 0xff80, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 7m27.749176419s ago: executing program 1 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="727e0ed72dd131895a527178eadd2c04619a5b797c9d514a062d68ec9fb8b960bedff4c1fb5fb788223075563309bdf4f553c41d8ee7922f41bd297a6cb066d0c2a31e2f4821cadf14", @ANYRES16], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x4010, 0xffffffffffffffff, 0x10000000) r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x90300, 0x40) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, r2, 0x0, &(0x7f0000000280)='./file0\x00', 0x130, 0x0, 0x0, {0x0, r3}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x428040, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x80) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 7m27.748759249s ago: executing program 32 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="727e0ed72dd131895a527178eadd2c04619a5b797c9d514a062d68ec9fb8b960bedff4c1fb5fb788223075563309bdf4f553c41d8ee7922f41bd297a6cb066d0c2a31e2f4821cadf14", @ANYRES16], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x4010, 0xffffffffffffffff, 0x10000000) r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x90300, 0x40) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, r2, 0x0, &(0x7f0000000280)='./file0\x00', 0x130, 0x0, 0x0, {0x0, r3}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x428040, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x80) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22.41897668s ago: executing program 3 (id=7940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000640)=0xa) 22.41815187s ago: executing program 3 (id=7941): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0x407ff, 0x7, "0441900887e8c2b791f19dd026d7677fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000640)=0xa) 22.40507639s ago: executing program 3 (id=7942): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) connect$inet6(r9, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x100000001) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcc2}}]}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r10, 0x8b32, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 19.346404152s ago: executing program 3 (id=7977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 19.317627592s ago: executing program 3 (id=7978): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) fallocate(r0, 0x20, 0x80, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x108) 19.267359553s ago: executing program 3 (id=7979): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f0000000140)={0xfddc, 0x2, 0x100000000, 0x8, 0x5, 0x3, 0xfe0, 0xffffffffffffffff, 0x2}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1e, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0x4, 0x1, 0xb, 0xffffffffffffffc0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0xca, &(0x7f0000000600)=""/202, 0x41000, 0x54, '\x00', r3, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x6, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r0, r0, r0, r0], &(0x7f0000000480)=[{0x2, 0x3, 0xf, 0xa}], 0x10, 0x8}, 0x94) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) inotify_init() r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x189) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) r8 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getuid() sendfile(r5, r8, 0x0, 0x8000fffffffe) 4.256244468s ago: executing program 33 (id=7979): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f0000000140)={0xfddc, 0x2, 0x100000000, 0x8, 0x5, 0x3, 0xfe0, 0xffffffffffffffff, 0x2}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1e, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0x4, 0x1, 0xb, 0xffffffffffffffc0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0xca, &(0x7f0000000600)=""/202, 0x41000, 0x54, '\x00', r3, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x6, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r0, r0, r0, r0], &(0x7f0000000480)=[{0x2, 0x3, 0xf, 0xa}], 0x10, 0x8}, 0x94) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) inotify_init() r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x189) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) r8 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getuid() sendfile(r5, r8, 0x0, 0x8000fffffffe) 3.462812671s ago: executing program 5 (id=8163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="7f454c460827000d810000000000000002003e0029070000ea02000000000000400000000000e6002203000000000000008002007339380001000800070008008c2898d706000000000000000000000004000000000000000600000000000000902c000000000000ff01000000000000fc0500000000000081747adda48ef10254d1f904e86e0811adcd913ce8d9ed44cb7e1a48567b1f5c494c7adfa5866cb0f77e7fbf9d5a0f157b52a00c3c8f52493e6d316a723a1e04d9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/1465], 0x5b9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000880)='./file1\x00', 0xc80, &(0x7f0000020100)=ANY=[], 0x1, 0x286, &(0x7f00000010c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) write$P9_RUNLINKAT(r5, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7ac00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) write$tun(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c00809b010300001400170000004525003c0067000405119078000000eafeffffff55bec3267b3436ab6b1d05cc90158a3a0e95d2c5c5ee95724f672f120c7ee6ae2b2176"], 0x4a) 2.897725181s ago: executing program 2 (id=8167): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0x407ff, 0x7, "0441900887e8c2b791f19dd026d7677fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000640)=0xa) 2.819548092s ago: executing program 2 (id=8168): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) pipe(&(0x7f0000000080)) write$binfmt_misc(r0, 0x0, 0xffffffffffffff8c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x17, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0x0) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) fcntl$setpipe(r2, 0x407, 0x6) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x1000}) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r4, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) 1.878995608s ago: executing program 2 (id=8170): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ustat(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b5", 0xb}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rt_sigpending(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 1.7764178s ago: executing program 5 (id=8171): writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x5, 0x33e, &(0x7f0000000a40)={{0x12, 0x1, 0x250, 0x80, 0x5e, 0xba, 0x20, 0x2692, 0x9025, 0x18eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32c, 0x3, 0x5, 0x0, 0x80, 0xf7, [{{0x9, 0x4, 0x4, 0x8, 0x3, 0xea, 0x45, 0x2d, 0x0, [], [{{0x9, 0x5, 0x0, 0x2, 0x400, 0xe, 0x79, 0x2}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x95, 0x5, 0x0, [@generic={0xee, 0x23, "8980314feee30574442b151723bade0f5bd15d96a1d356ef7b08b3a4bd8aac36683203c2a3fd1139ef3e281a8e72c414a0d96a9f2704e7d0340c6ca6fb4704f01a60bbd147e27e7db88719874f8770c489a6023bb493e62d163ef922fdeaec8a555cf2f2b3807269557439ba6f828f4e75da7114391817a3da3e42a8f065758c800d69a8e4f276f5d5d91d468c20ddb9214ed4d07f3ad97d6d63c818f97f02427f3699f4809b9e4cac69ff461828b67021db06cf15387eec6a47f04d3b12e4e5b058ece9ad686b921106c85216e8c2e2325997eb0e93ddf756c115b7f98bb7a3bc87e585c02fddea88369f75"}, @generic={0xf0, 0x6, "6594e87f6c0cc4d232c608392551c39e9cc28523664d66d123a95aaeabde759183ad38e5bc59f2659d6483b0fe78fef76e54781cc4b80ca7b32135056608eb8fd479abc9248438c1b158ba44e13151f769ea230af39a7969004b4ba52222f24c210aeaa141e4fe2c53310f1b57d1ba2d481104905343532a0220729a2bb508a6939474cab201fe7a3ab2cc3b92f24217a40dc2ab340b509903d6e9bb3e814aea75f9e61df49265effc96cdc18f1042fd973ea33872856ee754b57357487c53250e06db95cb439246934327099defebeeb53bb66c79f6cebf00816a022777e1b3824322cf7b647d102d88899f6e85"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf6, 0x8000}]}}]}}, {{0x9, 0x4, 0x98, 0x1, 0x4, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0x35, 0x9, 0x9, [@generic={0x2b, 0x24, "776c5b5668914bf6917d6bb9776ca76bd1413fc8b33b6f06a58170300a04fe02c822919ce30f042406"}, @generic={0x79, 0x22, "750eeb10901fc6a6f839f7a899aa09310b41aaee43569aa679b779a8dd50c076150db0846e52e4c0f43cacab81a26b72a335e1e63a2db885707864e1f6bef9a711fb85d38a54b48266f177034d8c61bb8e7ca90877d65eb867dc0d2fb61c4ca5648ebba23b79fec2c87de4a36dda60653087800b5657dc"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x5, 0x7, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x2c, 0x50, 0x84}}, {{0x9, 0x5, 0xe, 0x1, 0xa146fa0b1e0f1fee, 0x6, 0x0, 0x1}}]}}, {{0x9, 0x4, 0x17, 0x6, 0x2, 0xf6, 0xae, 0x2f, 0x6, [], [{{0x9, 0x5, 0x0, 0x2, 0x20, 0x7, 0xe2, 0x6, [@generic={0x2e, 0x10, "a1950e314c6c5a7b94c08d162d8a0d89a6a0fecdd0ba3041edd849b22aff16c5a575ea6d562dd89361ea9b8a"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x8, 0xb, 0x4}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0xe, 0x8, 0x9, 0x10, 0x7f}, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x0, 0x3, 0x1, 0x4}]}, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0c}}, {0x9e, &(0x7f0000000740)=@string={0x9e, 0x3, "782fc891fa5949ddd0653828d95f5d841e0f6582b3754de374883502976e654ba81a01d23d98ef779b1ce5610e7fc5229e26f27467907ec0310817a6c5e4db4c58e31ea798f66784a7687d53fc4d946b367a027321209043350fbf2fb54d4836a95b134d46c0ec4888372cbc3ca4c20013fb5435620627d26b43032996a68297e6b5b221919dde38e25bcb940cee409058403590e3d5f62fafd2cd88"}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0xd, 0xf}, {0x8, 0xa0000000}, {0x7, 0x6}, {0xd, 0x4f}]}, @func={0xd, 0x0, 0x0, 0xc, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x26, 0x0, 0x58, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f]}}, &(0x7f00000004c0)=""/233, 0x6f, 0xe9, 0x1, 0x5}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r1], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65) 1.069891122s ago: executing program 2 (id=8173): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xda) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000640)=0xa) 1.021574062s ago: executing program 4 (id=8174): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r1, &(0x7f0000000640)='\x00', 0x81101) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r2, 0x0, 0x0, 0x40010122, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000680)=[r6]) setregid(r6, r6) socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x2, 0x8, 0x6, 0x1}, {0x3, 0x80, 0x8, 0x10}, {0x2, 0x21, 0xa, 0x200}, {0x4002, 0x2, 0x7, 0x1010}, {0x1, 0xfa, 0x40, 0x800973}, {0x0, 0x1, 0x1, 0x1d}, {0x4, 0x2, 0x3, 0x171}, {0x2, 0x12, 0xf8, 0xfffffffb}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000ed6a00142c0000000000000000000000000000000001fc000000de00000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001000090780000"], 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') write$cgroup_type(r7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 1.011924293s ago: executing program 2 (id=8175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009093b4e099367dcda3012523451f1312b43fdf93a61e17132141e6257958de167206b18c0f71436fdb3f6a233ec297b9cc1484dc977cf81d590ed12492eba1bc45a5b4fc18f33418d5e4c82f8d8e64146b12f1665d179b01f5d5104a4c2278ed83a227daf60d5a6bf160433b64cf9a73725961378e2c9aff72c62d89e9f1a49d4a37e8ed4748e3fcf8ccb8d9a46988abc1e1f33b26da8fc7eb2f285ecf1b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000380)={{0x5, 0x8}, 0x20}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x358) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$usbfs(&(0x7f0000000480), 0x7, 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000440)={0xf5, 0x17, &(0x7f0000000980)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$eventfd(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) 968.297053ms ago: executing program 4 (id=8176): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b0200000000"], 0x0, 0x58}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getcwd(0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000180)=@hci={0x1f, 0x2}, 0xcb, &(0x7f0000000500)=[{&(0x7f0000000580)="296a88271c967616c60ce6eab3d0693201a50b7a9ff9186eb6c983e493aca42225112f61643e2466bc7027d6d59ff9ebbf87b7543bf21362269800329065e97ffc9adf30eb5ff11ce1324df70d49fe1e9794064f95826f6c30e61bda52c82aa8c2b3fa28d54eed41a81866e5431515b47e3774c8ef11042faa007ad026d8c582fa35d42a99aa0a5ca293db0f362e3fe97f00888e0c9879b270c027e7f260e634e953e4071734c1b370f9c382189eee6f0631f92e15bb5627aae2ac01ff4966a28ca3c56b4403666995a07ef5c4271ffe66bd49752837a3a0f20778e8ddd046e6a0e1afc0e127b22292a0d99055499ec092766e6b", 0xf4}, {&(0x7f0000000380)="d1b2682dabad7a486b09722490687ad1e75ed4a27fc35dc2f7b050b85245054452d100ee55d236ac7fb9f2b706907299e7ce7f2737495996bb98586afced8d68e981f62dea556160e8bc539377038ca551a410d910eb72fc726271621c3cb0f607f3876031dceed832f2e5888d294525eae9bdf2e68463a94ad5a75b4f6aa257316570bea051bf6fa32e59adbc1f49de9d8d887fb7", 0x95}, {&(0x7f0000000780)="4554a5da2440a145b0ad2b44fd54427188825d7a2d5865b34ccb57f4da4a404ebd8b2d6e27d5950546691a0c8c56015ace701e63b39ab080573aaaae1c700fc5b23bcecbc36e3aca94bc37e041d17655c7391b404691787c9f757dab8a86c872ae396fff17adf521cb674c406f25403784f4f0cf266b857011afa561bb53b616b971ca5171f3278b71fd5db41e0caf40946f7bd2f833dbd114bd9f0db43e5282151382ea6726ddea997fb3b3c6bc14da7214024520d9d7fd5f278742b3dbb36da285922885cf5c0508bf8d8e0814a18d46943f4bab2f2be5ade8af33ab04358ebb101c6e340edf34d6c68332bd26e2fa", 0xf0}, {&(0x7f00000004c0)}], 0x4}, 0x40400a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)=r10}, 0x20) pwritev2(r8, 0x0, 0x0, 0x9, 0xffffffff, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 825.576366ms ago: executing program 2 (id=8177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x9, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newlink={0x80, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x4100, 0x20a29}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bond={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}, @IFLA_BOND_PRIMARY={0x8, 0xb, r4}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}, @IFLA_BOND_ARP_IP_TARGET={0x1c, 0x8, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x48}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fcfff4ff1d000100fcff09ad72d92031325a0000", @ANYRES32=0x0, @ANYBLOB="0000000014000100200100000000000000000000000000000600050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44010) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) r10 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r10, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 816.575766ms ago: executing program 4 (id=8178): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b0200000000"], 0x0, 0x58}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getcwd(0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000180)=@hci={0x1f, 0x2}, 0xcb, &(0x7f0000000500)=[{&(0x7f0000000580)="296a88271c967616c60ce6eab3d0693201a50b7a9ff9186eb6c983e493aca42225112f61643e2466bc7027d6d59ff9ebbf87b7543bf21362269800329065e97ffc9adf30eb5ff11ce1324df70d49fe1e9794064f95826f6c30e61bda52c82aa8c2b3fa28d54eed41a81866e5431515b47e3774c8ef11042faa007ad026d8c582fa35d42a99aa0a5ca293db0f362e3fe97f00888e0c9879b270c027e7f260e634e953e4071734c1b370f9c382189eee6f0631f92e15bb5627aae2ac01ff4966a28ca3c56b4403666995a07ef5c4271ffe66bd49752837a3a0f20778e8ddd046e6a0e1afc0e127b22292a0d99055499ec092766e6b", 0xf4}, {&(0x7f0000000380)="d1b2682dabad7a486b09722490687ad1e75ed4a27fc35dc2f7b050b85245054452d100ee55d236ac7fb9f2b706907299e7ce7f2737495996bb98586afced8d68e981f62dea556160e8bc539377038ca551a410d910eb72fc726271621c3cb0f607f3876031dceed832f2e5888d294525eae9bdf2e68463a94ad5a75b4f6aa257316570bea051bf6fa32e59adbc1f49de9d8d887fb7", 0x95}, {&(0x7f0000000780)="4554a5da2440a145b0ad2b44fd54427188825d7a2d5865b34ccb57f4da4a404ebd8b2d6e27d5950546691a0c8c56015ace701e63b39ab080573aaaae1c700fc5b23bcecbc36e3aca94bc37e041d17655c7391b404691787c9f757dab8a86c872ae396fff17adf521cb674c406f25403784f4f0cf266b857011afa561bb53b616b971ca5171f3278b71fd5db41e0caf40946f7bd2f833dbd114bd9f0db43e5282151382ea6726ddea997fb3b3c6bc14da7214024520d9d7fd5f278742b3dbb36da285922885cf5c0508bf8d8e0814a18d46943f4bab2f2be5ade8af33ab04358ebb101c6e340edf34d6c68332bd26e2fa", 0xf0}, {&(0x7f00000004c0)}], 0x4}, 0x40400a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)=r10}, 0x20) pwritev2(r8, 0x0, 0x0, 0x9, 0xffffffff, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 798.458586ms ago: executing program 6 (id=8148): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xff}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@norecovery}, {@errors_remount}]}, 0xfe, 0x570, &(0x7f00000019c0)="$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") setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) 777.141187ms ago: executing program 6 (id=8179): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@private2, 0x0}, &(0x7f0000000200)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000030601010000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x8850) r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.log\x00', 0x10000, 0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000300)={0x20000002}) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000021136e923a0360b9b55e684777a00000009000b0073797a30000000000900020073797a320000000014"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r10, 0x5606, 0x1000) close(0xffffffffffffffff) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r11}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200ba0150b54d58de2f00"/36], 0x50) 718.034107ms ago: executing program 4 (id=8180): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x7}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x181801) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[]) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[0x0]) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) syz_clone3(&(0x7f0000000580)={0x800000, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000280), {0x16}, &(0x7f00000002c0)=""/160, 0xa0, &(0x7f00000004c0)=""/151, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x7}, 0x58) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 670.536568ms ago: executing program 5 (id=8181): writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x5, 0x2fd, &(0x7f0000000a40)={{0x12, 0x1, 0x250, 0x80, 0x5e, 0xba, 0x20, 0x2692, 0x9025, 0x18eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2eb, 0x3, 0x5, 0x0, 0x80, 0xf7, [{{0x9, 0x4, 0x4, 0x8, 0x5, 0xea, 0x45, 0x2d, 0x0, [], [{{0x9, 0x5, 0x0, 0x2, 0x400, 0xe, 0x79, 0x2}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0xe0, 0x6, 0x1}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x95, 0x5, 0x0, [@generic={0xee, 0x23, "8980314feee30574442b151723bade0f5bd15d96a1d356ef7b08b3a4bd8aac36683203c2a3fd1139ef3e281a8e72c414a0d96a9f2704e7d0340c6ca6fb4704f01a60bbd147e27e7db88719874f8770c489a6023bb493e62d163ef922fdeaec8a555cf2f2b3807269557439ba6f828f4e75da7114391817a3da3e42a8f065758c800d69a8e4f276f5d5d91d468c20ddb9214ed4d07f3ad97d6d63c818f97f02427f3699f4809b9e4cac69ff461828b67021db06cf15387eec6a47f04d3b12e4e5b058ece9ad686b921106c85216e8c2e2325997eb0e93ddf756c115b7f98bb7a3bc87e585c02fddea88369f75"}, @generic={0xf0, 0x6, "6594e87f6c0cc4d232c608392551c39e9cc28523664d66d123a95aaeabde759183ad38e5bc59f2659d6483b0fe78fef76e54781cc4b80ca7b32135056608eb8fd479abc9248438c1b158ba44e13151f769ea230af39a7969004b4ba52222f24c210aeaa141e4fe2c53310f1b57d1ba2d481104905343532a0220729a2bb508a6939474cab201fe7a3ab2cc3b92f24217a40dc2ab340b509903d6e9bb3e814aea75f9e61df49265effc96cdc18f1042fd973ea33872856ee754b57357487c53250e06db95cb439246934327099defebeeb53bb66c79f6cebf00816a022777e1b3824322cf7b647d102d88899f6e85"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf6, 0x8000}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x7f, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x3}, @generic={0x26, 0x1, "f56bc6dd3440f683d5255471e030277f2ecc56fb21e731406becb5685c019e00809906e7"}]}}]}}, {{0x9, 0x4, 0x98, 0x1, 0x3, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0x35, 0x9, 0x9, [@generic={0x2b, 0x24, "776c5b5668914bf6917d6bb9776ca76bd1413fc8b33b6f06a58170300a04fe02c822919ce30f042406"}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x2c, 0x50, 0x84}}, {{0x9, 0x5, 0xe, 0x1, 0xa146fa0b1e0f1fee, 0x6, 0x0, 0x1}}]}}, {{0x9, 0x4, 0x17, 0x6, 0x2, 0xf6, 0xae, 0x2f, 0x6, [], [{{0x9, 0x5, 0x0, 0x2, 0x20, 0x7, 0xe2, 0x6, [@generic={0x2e, 0x10, "a1950e314c6c5a7b94c08d162d8a0d89a6a0fecdd0ba3041edd849b22aff16c5a575ea6d562dd89361ea9b8a"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x8, 0xb, 0x4}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0xe, 0x8, 0x9, 0x10, 0x7f}, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x0, 0x3, 0x1, 0x4}]}, 0x2, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0c}}, {0x9e, &(0x7f0000000740)=@string={0x9e, 0x3, "782fc891fa5949ddd0653828d95f5d841e0f6582b3754de374883502976e654ba81a01d23d98ef779b1ce5610e7fc5229e26f27467907ec0310817a6c5e4db4c58e31ea798f66784a7687d53fc4d946b367a027321209043350fbf2fb54d4836a95b134d46c0ec4888372cbc3ca4c20013fb5435620627d26b43032996a68297e6b5b221919dde38e25bcb940cee409058403590e3d5f62fafd2cd88"}}]}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0xd, 0xf}, {0x8, 0xa0000000}, {0x7, 0x6}, {0xd, 0x4f}]}, @func={0xd, 0x0, 0x0, 0xc, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x26, 0x0, 0x58, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f]}}, &(0x7f00000004c0)=""/233, 0x6f, 0xe9, 0x1, 0x5}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRES32, @ANYRESOCT=r0], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65) 489.609382ms ago: executing program 4 (id=8182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xda) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0x407ff, 0x7, "0441900887e8c2b791f19dd026d7677fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000640)=0xa) 471.724432ms ago: executing program 4 (id=8183): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ustat(0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b5", 0xb}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rt_sigpending(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 351.093624ms ago: executing program 0 (id=8185): sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x20, 0x70bd25, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4016}, 0x4008000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000340)=0x4, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x5, 0x7, 0x3, 0x4}, 0x10) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000940)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x12, 0x9, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7fee, 0x8, 0x8, 0x100}}) 313.831274ms ago: executing program 0 (id=8186): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r1, 0x0, 0x0, 0x40010122, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000680)=[r5]) setregid(r5, r5) socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x2, 0x8, 0x6, 0x1}, {0x3, 0x80, 0x8, 0x10}, {0x2, 0x21, 0xa, 0x200}, {0x4002, 0x2, 0x7, 0x1010}, {0x1, 0xfa, 0x40, 0x800973}, {0x0, 0x1, 0x1, 0x1d}, {0x4, 0x2, 0x3, 0x171}, {0x2, 0x12, 0xf8, 0xfffffffb}]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000ed6a00142c0000000000000000000000000000000001fc000000de00000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001000090780000"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') write$cgroup_type(r6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 312.978514ms ago: executing program 0 (id=8187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009093b4e099367dcda3012523451f1312b43fdf93a61e17132141e6257958de167206b18c0f71436fdb3f6a233ec297b9cc1484dc977cf81d590ed12492eba1bc45a5b4fc18f33418d5e4c82f8d8e64146b12f1665d179b01f5d5104a4c2278ed83a227daf60d5a6bf160433b64cf9a73725961378e2c9aff72c62d89e9f1a49d4a37e8ed4748e3fcf8ccb8d9a46988abc1e1f33b26da8fc7eb2f285ecf1b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000380)={{0x5, 0x8}, 0x20}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x358) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$usbfs(&(0x7f0000000480), 0x7, 0x200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000440)={0xf5, 0x17, &(0x7f0000000980)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$eventfd(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) 210.916396ms ago: executing program 0 (id=8188): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b0200000000"], 0x0, 0x58}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getcwd(0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000180)=@hci={0x1f, 0x2}, 0xcb, &(0x7f0000000500)=[{&(0x7f0000000580)="296a88271c967616c60ce6eab3d0693201a50b7a9ff9186eb6c983e493aca42225112f61643e2466bc7027d6d59ff9ebbf87b7543bf21362269800329065e97ffc9adf30eb5ff11ce1324df70d49fe1e9794064f95826f6c30e61bda52c82aa8c2b3fa28d54eed41a81866e5431515b47e3774c8ef11042faa007ad026d8c582fa35d42a99aa0a5ca293db0f362e3fe97f00888e0c9879b270c027e7f260e634e953e4071734c1b370f9c382189eee6f0631f92e15bb5627aae2ac01ff4966a28ca3c56b4403666995a07ef5c4271ffe66bd49752837a3a0f20778e8ddd046e6a0e1afc0e127b22292a0d99055499ec092766e6b", 0xf4}, {&(0x7f0000000380)="d1b2682dabad7a486b09722490687ad1e75ed4a27fc35dc2f7b050b85245054452d100ee55d236ac7fb9f2b706907299e7ce7f2737495996bb98586afced8d68e981f62dea556160e8bc539377038ca551a410d910eb72fc726271621c3cb0f607f3876031dceed832f2e5888d294525eae9bdf2e68463a94ad5a75b4f6aa257316570bea051bf6fa32e59adbc1f49de9d8d887fb7", 0x95}, {&(0x7f0000000780)="4554a5da2440a145b0ad2b44fd54427188825d7a2d5865b34ccb57f4da4a404ebd8b2d6e27d5950546691a0c8c56015ace701e63b39ab080573aaaae1c700fc5b23bcecbc36e3aca94bc37e041d17655c7391b404691787c9f757dab8a86c872ae396fff17adf521cb674c406f25403784f4f0cf266b857011afa561bb53b616b971ca5171f3278b71fd5db41e0caf40946f7bd2f833dbd114bd9f0db43e5282151382ea6726ddea997fb3b3c6bc14da7214024520d9d7fd5f278742b3dbb36da285922885cf5c0508bf8d8e0814a18d46943f4bab2f2be5ade8af33ab04358ebb101c6e340edf34d6c68332bd26e2fa", 0xf0}, {&(0x7f00000004c0)}], 0x4}, 0x40400a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)=r10}, 0x20) pwritev2(r8, 0x0, 0x0, 0x9, 0xffffffff, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 140.322367ms ago: executing program 0 (id=8189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009093b4e099367dcda3012523451f1312b43fdf93a61e17132141e6257958de167206b18c0f71436fdb3f6a233ec297b9cc1484dc977cf81d590ed12492eba1bc45a5b4fc18f33418d5e4c82f8d8e64146b12f1665d179b01f5d5104a4c2278ed83a227daf60d5a6bf160433b64cf9a73725961378e2c9aff72c62d89e9f1a49d4a37e8ed4748e3fcf8ccb8d9a46988abc1e1f33b26da8fc7eb2f285ecf1b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000380)={{0x5, 0x8}, 0x20}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x358) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$usbfs(&(0x7f0000000480), 0x7, 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000440)={0xf5, 0x17, &(0x7f0000000980)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$eventfd(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) 123.355977ms ago: executing program 5 (id=8190): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xff}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@norecovery}, {@errors_remount}]}, 0xfe, 0x570, &(0x7f00000019c0)="$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") setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) 85.316948ms ago: executing program 5 (id=8191): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b0200000000"], 0x0, 0x58}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getcwd(0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000180)=@hci={0x1f, 0x2}, 0xcb, &(0x7f0000000500)=[{&(0x7f0000000580)="296a88271c967616c60ce6eab3d0693201a50b7a9ff9186eb6c983e493aca42225112f61643e2466bc7027d6d59ff9ebbf87b7543bf21362269800329065e97ffc9adf30eb5ff11ce1324df70d49fe1e9794064f95826f6c30e61bda52c82aa8c2b3fa28d54eed41a81866e5431515b47e3774c8ef11042faa007ad026d8c582fa35d42a99aa0a5ca293db0f362e3fe97f00888e0c9879b270c027e7f260e634e953e4071734c1b370f9c382189eee6f0631f92e15bb5627aae2ac01ff4966a28ca3c56b4403666995a07ef5c4271ffe66bd49752837a3a0f20778e8ddd046e6a0e1afc0e127b22292a0d99055499ec092766e6b", 0xf4}, {&(0x7f0000000380)="d1b2682dabad7a486b09722490687ad1e75ed4a27fc35dc2f7b050b85245054452d100ee55d236ac7fb9f2b706907299e7ce7f2737495996bb98586afced8d68e981f62dea556160e8bc539377038ca551a410d910eb72fc726271621c3cb0f607f3876031dceed832f2e5888d294525eae9bdf2e68463a94ad5a75b4f6aa257316570bea051bf6fa32e59adbc1f49de9d8d887fb7", 0x95}, {&(0x7f0000000780)="4554a5da2440a145b0ad2b44fd54427188825d7a2d5865b34ccb57f4da4a404ebd8b2d6e27d5950546691a0c8c56015ace701e63b39ab080573aaaae1c700fc5b23bcecbc36e3aca94bc37e041d17655c7391b404691787c9f757dab8a86c872ae396fff17adf521cb674c406f25403784f4f0cf266b857011afa561bb53b616b971ca5171f3278b71fd5db41e0caf40946f7bd2f833dbd114bd9f0db43e5282151382ea6726ddea997fb3b3c6bc14da7214024520d9d7fd5f278742b3dbb36da285922885cf5c0508bf8d8e0814a18d46943f4bab2f2be5ade8af33ab04358ebb101c6e340edf34d6c68332bd26e2fa", 0xf0}, {&(0x7f00000004c0)}], 0x4}, 0x40400a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)=r10}, 0x20) pwritev2(r8, 0x0, 0x0, 0x9, 0xffffffff, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 39.700219ms ago: executing program 0 (id=8192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xdc, &(0x7f0000000200), 0x1, 0x46f, &(0x7f00000008c0)="$eJzs3M9vFFUcAPDvbFsQEFsM/uCHUkUj0djSgsrBAxhNPGhiogc81rYQpFBDayKESDUGj4ZEozfj0cS/wJNejHoy8ap3Q0IMF5DTmNmdYbfL/ujShW3ZzyeZ9L2ZN33v25nXfW9epwH0rdGI+Cwi7o+IvyJiOCKS+gKjlS/Xr56f/u/q+ekk0vTtf5NyuWtXz08XRYvzthSZpUp+V4N6F86eOzk1Nzd7Js+PL576YHzh7LnnT5yaOj57fPb05KFDBw9MvPTi5AsriGKgbYmsTdd2fjy/e8fr7156c/ropfd++yHJw4u6OLpktNXBp7tcWa9trUkngz1sCB3Jek52uYbK/X84BqJ68YbjtU972jjgjkrTNN3Y/PBSCtzDklhxyTvbEOAuKz7os/lvsd2loceacOVIZQKUxX093ypHBqOUlxmqm992UzbbOrp049tsizvzHAIAYJmfjlS+3jr+K8XDNeUO52tDIxGxrWZxY3tEPBRRLvtIRDzaYf31iyS3jn9Klzv8lh3Jxn8v52tby8d/xegvRgby3NZy/EPJsRNzs/sj4oGI2BdDG7P8RIs6fn71zy+aHRutGf9lW1Z/MRbM23F5sO4B3czU4tRqYq515ZOInYON4k9urgQkEbEjInbuqTlxw8rrOPHs97ubHWsffwtdWGdKv4t4pnL9l6Iu/kLSen1y/L6Ym90/XtwVt/r9j4tvNau/0/i3fVOds3VDdv03N7z/b8Y/kg7UrNcudF7Hxb8/bzqnud37f0PyTjld3IYfTS0unpmI2JC8ke8/XN0/WT23yBfls/j37W3c/x+M6k9iV0RkN/FjEfF4ROzJ2/5ERDwZEXtbxP/rK0+9v2zHjerke1X3fxdk8c+0uf5J7Xr9bSQGTv7y47JKR6rJlV3/g+XUvnxP+fff163jWmkDV/8TBAAAgLWvVP7b/6Q0djNdKo2NVf5efntsLs3NLyw+d2z+w9MzlXcERmKoVDzpGq55HjqRT+uL/GRd/kD+3PjLgU3l/Nj0/NxMr4OHPrelSf/P/NP+tRpgvfO+FvQv/R/6l/4P/Uv/h77V6P3/Te3KpB4Owj2h0ef/hR60A7j7jP+hf3Xa/yuTgxb/NgxYN3z+Q//S/6Evrea9/lUmin8/2LBMsf7Qi4a1TaRpuzKDrU6/0DjkdZaI0ppoRpcSX62NZqyhRG9/LwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTL/wEAAP//lrDxFg==") bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r0, 0x80) inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x5, &(0x7f0000000240)='async\x00', 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004011}, 0x2000c040) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) r9 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64=r9], 0x69) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001c00)=""/158, 0x9e}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000007c0)=""/241, 0xf1}], 0x5, &(0x7f0000001900), 0x0, 0x40010}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x44001, 0x0) 0s ago: executing program 5 (id=8193): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x7}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x181801) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[]) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) syz_clone3(&(0x7f0000000580)={0x800000, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000280), {0x16}, &(0x7f00000002c0)=""/160, 0xa0, &(0x7f00000004c0)=""/151, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x7}, 0x58) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 600.098619][T29262] Tainted: [W]=WARN [ 600.098625][T29262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 600.098716][T29262] Call Trace: [ 600.098724][T29262] [ 600.098732][T29262] __dump_stack+0x1d/0x30 [ 600.098763][T29262] dump_stack_lvl+0xe8/0x140 [ 600.098786][T29262] dump_stack+0x15/0x1b [ 600.098800][T29262] should_fail_ex+0x265/0x280 [ 600.098875][T29262] should_fail+0xb/0x20 [ 600.098965][T29262] should_fail_usercopy+0x1a/0x20 [ 600.098993][T29262] _copy_from_iter+0xcf/0xe40 [ 600.099109][T29262] ? __build_skb_around+0x1a0/0x200 [ 600.099146][T29262] ? __alloc_skb+0x223/0x320 [ 600.099182][T29262] pfkey_sendmsg+0x126/0x900 [ 600.099212][T29262] ? avc_has_perm+0xd3/0x150 [ 600.099257][T29262] ? selinux_socket_sendmsg+0x175/0x1b0 [ 600.099294][T29262] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 600.099329][T29262] __sock_sendmsg+0x145/0x180 [ 600.099358][T29262] ____sys_sendmsg+0x31e/0x4e0 [ 600.099431][T29262] ___sys_sendmsg+0x17b/0x1d0 [ 600.099460][T29262] __x64_sys_sendmsg+0xd4/0x160 [ 600.099479][T29262] x64_sys_call+0x2999/0x2fb0 [ 600.099535][T29262] do_syscall_64+0xd2/0x200 [ 600.099553][T29262] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 600.099645][T29262] ? clear_bhb_loop+0x40/0x90 [ 600.099698][T29262] ? clear_bhb_loop+0x40/0x90 [ 600.099793][T29262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.099811][T29262] RIP: 0033:0x7efcfd4fe9a9 [ 600.099826][T29262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.099848][T29262] RSP: 002b:00007efcfbb5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.099869][T29262] RAX: ffffffffffffffda RBX: 00007efcfd725fa0 RCX: 00007efcfd4fe9a9 [ 600.099925][T29262] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009 [ 600.099936][T29262] RBP: 00007efcfbb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 600.099948][T29262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.099962][T29262] R13: 0000000000000000 R14: 00007efcfd725fa0 R15: 00007ffefa3a9c18 [ 600.099984][T29262] [ 600.349299][T29266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 600.417365][T29272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 600.472866][T29277] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 600.489443][T29285] loop5: detected capacity change from 0 to 128 [ 600.517794][T29285] bio_check_eod: 4 callbacks suppressed [ 600.517809][T29285] syz.5.7520: attempt to access beyond end of device [ 600.517809][T29285] loop5: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 600.528985][T29294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.537275][T29285] syz.5.7520: attempt to access beyond end of device [ 600.537275][T29285] loop5: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 600.559080][T29285] syz.5.7520: attempt to access beyond end of device [ 600.559080][T29285] loop5: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 600.572546][T29285] buffer_io_error: 2 callbacks suppressed [ 600.572560][T29285] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 600.579146][T29294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.598079][T29294] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 600.616966][T29294] SELinux: failed to load policy [ 600.624666][T29285] syz.5.7520: attempt to access beyond end of device [ 600.624666][T29285] loop5: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 600.638203][T29285] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 600.654869][T29285] syz.5.7520: attempt to access beyond end of device [ 600.654869][T29285] loop5: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 600.668373][T29285] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 600.678405][T29285] syz.5.7520: attempt to access beyond end of device [ 600.678405][T29285] loop5: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 600.692026][T29285] Buffer I/O error on dev loop5, logical block 145, lost async page write [ 600.702713][T29302] 9pnet_fd: Insufficient options for proto=fd [ 600.712471][T29285] syz.5.7520: attempt to access beyond end of device [ 600.712471][T29285] loop5: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 600.726038][T29285] Buffer I/O error on dev loop5, logical block 146, lost async page write [ 600.745493][T29285] syz.5.7520: attempt to access beyond end of device [ 600.745493][T29285] loop5: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 600.759133][T29285] Buffer I/O error on dev loop5, logical block 147, lost async page write [ 600.768988][T29285] syz.5.7520: attempt to access beyond end of device [ 600.768988][T29285] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 600.782516][T29285] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 600.791679][T29285] syz.5.7520: attempt to access beyond end of device [ 600.791679][T29285] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 600.805149][T29285] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 600.813882][T29285] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 600.822529][T29285] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 600.863229][T29320] hsr_slave_0: left promiscuous mode [ 600.870432][T29320] hsr_slave_1: left promiscuous mode [ 600.893932][T29332] program syz.0.7534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.953054][T29334] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 600.961765][T29334] connsecmark_tg_check: 5 callbacks suppressed [ 600.961781][T29334] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 600.962874][T29345] program syz.5.7538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.006680][T29348] FAULT_INJECTION: forcing a failure. [ 601.006680][T29348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.019894][T29348] CPU: 1 UID: 0 PID: 29348 Comm: syz.2.7539 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 601.019980][T29348] Tainted: [W]=WARN [ 601.020022][T29348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 601.020034][T29348] Call Trace: [ 601.020039][T29348] [ 601.020088][T29348] __dump_stack+0x1d/0x30 [ 601.020156][T29348] dump_stack_lvl+0xe8/0x140 [ 601.020237][T29348] dump_stack+0x15/0x1b [ 601.020252][T29348] should_fail_ex+0x265/0x280 [ 601.020280][T29348] should_fail+0xb/0x20 [ 601.020348][T29348] should_fail_usercopy+0x1a/0x20 [ 601.020376][T29348] _copy_from_user+0x1c/0xb0 [ 601.020394][T29348] io_submit_one+0x52/0x11d0 [ 601.020444][T29348] __se_sys_io_submit+0xfb/0x280 [ 601.020476][T29348] __x64_sys_io_submit+0x43/0x50 [ 601.020503][T29348] x64_sys_call+0xfc4/0x2fb0 [ 601.020522][T29348] do_syscall_64+0xd2/0x200 [ 601.020610][T29348] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 601.020639][T29348] ? clear_bhb_loop+0x40/0x90 [ 601.020658][T29348] ? clear_bhb_loop+0x40/0x90 [ 601.020683][T29348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.020701][T29348] RIP: 0033:0x7fe2c2ade9a9 [ 601.020750][T29348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.020766][T29348] RSP: 002b:00007fe2c1147038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 601.020782][T29348] RAX: ffffffffffffffda RBX: 00007fe2c2d05fa0 RCX: 00007fe2c2ade9a9 [ 601.020793][T29348] RDX: 0000200000001d00 RSI: 0000000000000001 RDI: 00007fe2c110e000 [ 601.020803][T29348] RBP: 00007fe2c1147090 R08: 0000000000000000 R09: 0000000000000000 [ 601.020814][T29348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.020827][T29348] R13: 0000000000000000 R14: 00007fe2c2d05fa0 R15: 00007ffea57ca6c8 [ 601.020844][T29348] [ 601.369576][T29371] FAULT_INJECTION: forcing a failure. [ 601.369576][T29371] name failslab, interval 1, probability 0, space 0, times 0 [ 601.382348][T29371] CPU: 1 UID: 0 PID: 29371 Comm: syz.5.7545 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 601.382469][T29371] Tainted: [W]=WARN [ 601.382477][T29371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 601.382491][T29371] Call Trace: [ 601.382498][T29371] [ 601.382505][T29371] __dump_stack+0x1d/0x30 [ 601.382584][T29371] dump_stack_lvl+0xe8/0x140 [ 601.382605][T29371] dump_stack+0x15/0x1b [ 601.382622][T29371] should_fail_ex+0x265/0x280 [ 601.382734][T29371] ? __request_module+0x1c4/0x3e0 [ 601.382760][T29371] should_failslab+0x8c/0xb0 [ 601.382788][T29371] ? tcp_ca_find_autoload+0x80/0xe0 [ 601.382811][T29371] __kmalloc_cache_noprof+0x4c/0x320 [ 601.382842][T29371] ? tcp_ca_find_autoload+0x80/0xe0 [ 601.382866][T29371] __request_module+0x1c4/0x3e0 [ 601.382890][T29371] ? capable+0x7c/0xb0 [ 601.382951][T29371] ? security_capable+0x83/0x90 [ 601.382977][T29371] tcp_ca_find_autoload+0x80/0xe0 [ 601.383001][T29371] tcp_set_default_congestion_control+0x24/0x160 [ 601.383027][T29371] proc_tcp_congestion_control+0xe5/0x120 [ 601.383070][T29371] proc_sys_call_handler+0x2ea/0x4a0 [ 601.383096][T29371] proc_sys_write+0x22/0x30 [ 601.383135][T29371] do_iter_readv_writev+0x421/0x4c0 [ 601.383174][T29371] vfs_writev+0x2df/0x8b0 [ 601.383209][T29371] __x64_sys_pwritev+0xfd/0x1c0 [ 601.383226][T29371] x64_sys_call+0x2752/0x2fb0 [ 601.383276][T29371] do_syscall_64+0xd2/0x200 [ 601.383332][T29371] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 601.383361][T29371] ? clear_bhb_loop+0x40/0x90 [ 601.383407][T29371] ? clear_bhb_loop+0x40/0x90 [ 601.383427][T29371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.383512][T29371] RIP: 0033:0x7fc70b55e9a9 [ 601.383547][T29371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.383567][T29371] RSP: 002b:00007fc709bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 601.383587][T29371] RAX: ffffffffffffffda RBX: 00007fc70b785fa0 RCX: 00007fc70b55e9a9 [ 601.383645][T29371] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 601.383658][T29371] RBP: 00007fc709bc7090 R08: 0000000000000080 R09: 0000000000000000 [ 601.383672][T29371] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 601.383685][T29371] R13: 0000000000000000 R14: 00007fc70b785fa0 R15: 00007fffa2e4c438 [ 601.383760][T29371] [ 601.768673][T29389] loop5: detected capacity change from 0 to 512 [ 601.776651][T29389] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7552: bg 0: block 131: padding at end of block bitmap is not set [ 601.791155][T29389] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 601.800524][T29389] EXT4-fs (loop5): 1 truncate cleaned up [ 601.802089][T29385] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 601.813354][T29389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.826979][T29385] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 601.873077][T29394] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 601.881569][T29394] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 601.919146][T29400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.935162][T29400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.944478][T29400] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 601.953715][T29400] SELinux: failed to load policy [ 602.036536][T29404] program syz.0.7556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.314355][T29428] lo speed is unknown, defaulting to 1000 [ 602.529887][T29458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.622139][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.711756][T29462] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 602.737401][T29466] program syz.2.7566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.881493][T29472] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 602.975259][T29477] program syz.5.7570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.002780][T29475] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 603.011411][T29475] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 603.062017][T29479] netlink: 'syz.3.7571': attribute type 13 has an invalid length. [ 603.112790][T29482] program syz.3.7572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.233182][T29486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.251842][T29486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.267728][T29486] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 603.288084][T29486] SELinux: failed to load policy [ 603.857412][T29493] IPVS: set_ctl: invalid protocol: 26230 0.0.0.0:0 [ 603.868653][T29497] loop5: detected capacity change from 0 to 512 [ 603.891838][ T29] kauditd_printk_skb: 639 callbacks suppressed [ 603.891853][ T29] audit: type=1400 audit(1753472441.930:40162): avc: denied { ioctl } for pid=29492 comm="syz.2.7575" path="socket:[98918]" dev="sockfs" ino=98918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 603.941884][T29497] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7576: bg 0: block 131: padding at end of block bitmap is not set [ 603.991676][T29497] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 604.031732][T29497] EXT4-fs (loop5): 1 truncate cleaned up [ 604.037718][T29497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.118603][ T29] audit: type=1326 audit(1753472442.150:40163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29496 comm="syz.5.7576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70b55e9a9 code=0x7ffc0000 [ 604.146824][ T29] audit: type=1326 audit(1753472442.180:40164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29496 comm="syz.5.7576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc70b55e9a9 code=0x7ffc0000 [ 604.170499][ T29] audit: type=1326 audit(1753472442.180:40165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29496 comm="syz.5.7576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70b55e9a9 code=0x7ffc0000 [ 604.194221][ T29] audit: type=1326 audit(1753472442.180:40166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29496 comm="syz.5.7576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc70b55e9a9 code=0x7ffc0000 [ 604.217880][ T29] audit: type=1326 audit(1753472442.180:40167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29496 comm="syz.5.7576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70b55e9a9 code=0x7ffc0000 [ 604.241504][ T29] audit: type=1326 audit(1753472442.180:40168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29496 comm="syz.5.7576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc70b55e9a9 code=0x7ffc0000 [ 604.265085][ T29] audit: type=1326 audit(1753472442.180:40169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29496 comm="syz.5.7576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70b55e9a9 code=0x7ffc0000 [ 604.288690][ T29] audit: type=1326 audit(1753472442.180:40170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29496 comm="syz.5.7576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc70b55e9a9 code=0x7ffc0000 [ 604.352939][T29510] __nla_validate_parse: 8 callbacks suppressed [ 604.352954][T29510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7578'. [ 604.352963][ T29] audit: type=1326 audit(1753472442.260:40171): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29506 comm="syz.2.7579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2c2ade9a9 code=0x0 [ 604.428695][T29512] 9pnet_fd: Insufficient options for proto=fd [ 604.523406][T29514] syzkaller1: entered promiscuous mode [ 604.528902][T29514] syzkaller1: entered allmulticast mode [ 604.550248][T29514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7581'. [ 604.708907][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.721169][T29520] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 604.743188][T29520] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 604.830896][T29528] netlink: 204 bytes leftover after parsing attributes in process `syz.5.7586'. [ 604.869137][T29542] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 604.907229][T29545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 604.949572][T29549] syzkaller1: entered promiscuous mode [ 604.955333][T29549] syzkaller1: entered allmulticast mode [ 604.963256][T29549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7592'. [ 605.013691][T29557] loop5: detected capacity change from 0 to 512 [ 605.033157][T29557] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7594: bg 0: block 131: padding at end of block bitmap is not set [ 605.049499][T29557] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 605.085870][T29557] EXT4-fs (loop5): 1 truncate cleaned up [ 605.094154][T29557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.133103][T29564] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 605.141636][T29564] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 605.143344][T29571] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7599'. [ 605.208969][T29579] FAULT_INJECTION: forcing a failure. [ 605.208969][T29579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.222261][T29579] CPU: 0 UID: 0 PID: 29579 Comm: syz.0.7603 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 605.222368][T29579] Tainted: [W]=WARN [ 605.222375][T29579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.222386][T29579] Call Trace: [ 605.222391][T29579] [ 605.222397][T29579] __dump_stack+0x1d/0x30 [ 605.222444][T29579] dump_stack_lvl+0xe8/0x140 [ 605.222465][T29579] dump_stack+0x15/0x1b [ 605.222503][T29579] should_fail_ex+0x265/0x280 [ 605.222544][T29579] should_fail+0xb/0x20 [ 605.222573][T29579] should_fail_usercopy+0x1a/0x20 [ 605.222627][T29579] strncpy_from_user+0x25/0x230 [ 605.222653][T29579] ? kmem_cache_alloc_noprof+0x186/0x310 [ 605.222747][T29579] ? getname_flags+0x80/0x3b0 [ 605.222771][T29579] getname_flags+0xae/0x3b0 [ 605.222792][T29579] do_sys_openat2+0x60/0x110 [ 605.222815][T29579] __x64_sys_open+0xe6/0x110 [ 605.222964][T29579] x64_sys_call+0x14d4/0x2fb0 [ 605.222985][T29579] do_syscall_64+0xd2/0x200 [ 605.223063][T29579] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 605.223119][T29579] ? clear_bhb_loop+0x40/0x90 [ 605.223143][T29579] ? clear_bhb_loop+0x40/0x90 [ 605.223167][T29579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.223190][T29579] RIP: 0033:0x7fd4898ae9a9 [ 605.223206][T29579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.223267][T29579] RSP: 002b:00007fd487f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 605.223287][T29579] RAX: ffffffffffffffda RBX: 00007fd489ad5fa0 RCX: 00007fd4898ae9a9 [ 605.223301][T29579] RDX: 0000000000000000 RSI: 0000000000060840 RDI: 00002000009e1000 [ 605.223335][T29579] RBP: 00007fd487f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 605.223348][T29579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.223361][T29579] R13: 0000000000000000 R14: 00007fd489ad5fa0 R15: 00007ffe551fe218 [ 605.223387][T29579] [ 605.438806][T29583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 605.581705][T29592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.590252][T29592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.599354][T29592] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 605.607980][T29592] SELinux: failed to load policy [ 605.859969][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.886573][T29602] netlink: 'syz.5.7610': attribute type 13 has an invalid length. [ 605.897825][T29604] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7611'. [ 605.963847][T29606] syz!: rxe_newlink: already configured on team_slave_0 [ 605.994859][T29606] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 606.040672][T29613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.166704][T29621] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7618'. [ 606.228477][T29627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.237138][T29627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.246742][T29627] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 606.255811][T29627] SELinux: failed to load policy [ 606.344425][T29637] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7623'. [ 606.381827][T29639] 9pnet_fd: Insufficient options for proto=fd [ 606.472511][T29651] syz!: rxe_newlink: already configured on team_slave_0 [ 606.487731][T29651] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 606.778386][T29663] loop5: detected capacity change from 0 to 512 [ 606.786832][T29663] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7634: bg 0: block 131: padding at end of block bitmap is not set [ 606.801442][T29663] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 606.810445][T29663] EXT4-fs (loop5): 1 truncate cleaned up [ 606.816691][T29663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.840768][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.958130][T29678] loop5: detected capacity change from 0 to 512 [ 606.965935][T29678] EXT4-fs (loop5): orphan cleanup on readonly fs [ 606.972503][T29678] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.7639: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 606.990801][T29678] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.7639: Bad quota inode: 4, type: 1 [ 607.002103][T29678] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 607.002826][T29676] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 607.023759][T29678] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 607.030945][T29676] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 607.034207][T29680] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7640'. [ 607.039817][T29678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 607.102871][T29694] pimreg: entered allmulticast mode [ 607.112664][T29678] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm +}[@: deleted inode referenced: 12 [ 607.132585][T29698] pimreg: left allmulticast mode [ 607.138939][T29678] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm +}[@: deleted inode referenced: 12 [ 607.168086][T29678] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm +}[@: deleted inode referenced: 12 [ 607.189592][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.204204][T29706] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 607.217768][T29710] loop5: detected capacity change from 0 to 1024 [ 607.219775][T29706] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 607.224942][T29710] EXT4-fs: Ignoring removed nobh option [ 607.238225][T29710] EXT4-fs: Ignoring removed bh option [ 607.249469][T29712] syzkaller1: entered promiscuous mode [ 607.255011][T29712] syzkaller1: entered allmulticast mode [ 607.263688][T29712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7649'. [ 607.265636][T29710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.314774][T29723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.392536][T29727] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 607.428445][T29725] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 607.517522][T29745] program syz.0.7659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.518464][T29743] 9pnet_fd: Insufficient options for proto=fd [ 607.539746][T29747] program syz.2.7660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.642491][T29760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.651179][T29760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.660600][T29760] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 607.717239][T29760] SELinux: failed to load policy [ 608.345244][T29772] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.527910][T29787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.536832][T29787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.545581][T29787] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 608.554187][T29787] SELinux: failed to load policy [ 608.902019][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 608.902035][ T29] audit: type=1326 audit(1753472446.940:40575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcfd4f5967 code=0x7ffc0000 [ 608.931845][ T29] audit: type=1326 audit(1753472446.940:40576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcfd49ab89 code=0x7ffc0000 [ 608.955386][ T29] audit: type=1326 audit(1753472446.940:40577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efcfd4fe9a9 code=0x7ffc0000 [ 608.978827][ T29] audit: type=1326 audit(1753472446.990:40578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcfd4f5967 code=0x7ffc0000 [ 609.002394][ T29] audit: type=1326 audit(1753472446.990:40579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcfd49ab89 code=0x7ffc0000 [ 609.025972][ T29] audit: type=1326 audit(1753472446.990:40580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcfd4f5967 code=0x7ffc0000 [ 609.049462][ T29] audit: type=1326 audit(1753472446.990:40581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcfd49ab89 code=0x7ffc0000 [ 609.073122][ T29] audit: type=1326 audit(1753472446.990:40582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efcfd4fe9a9 code=0x7ffc0000 [ 609.096571][ T29] audit: type=1326 audit(1753472447.000:40583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcfd4f5967 code=0x7ffc0000 [ 609.120318][ T29] audit: type=1326 audit(1753472447.000:40584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29764 comm="syz.4.7664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcfd49ab89 code=0x7ffc0000 [ 609.187720][T29794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.200135][T29794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.211531][T29794] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 609.221904][T29794] SELinux: failed to load policy [ 609.262834][T29800] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 609.279143][T29800] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 609.327182][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.359306][T29808] loop5: detected capacity change from 0 to 1024 [ 609.368585][T29802] __nla_validate_parse: 5 callbacks suppressed [ 609.368601][T29802] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7679'. [ 609.379762][T29808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.405441][T29808] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.438452][T29820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7683'. [ 609.444701][T29818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 609.630789][T29829] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 609.691790][T29814] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 609.708193][T29835] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 609.722717][T29835] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 609.764796][T29839] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7690'. [ 609.784261][T29847] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29847 comm=syz.2.7693 [ 609.797204][T29847] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=29847 comm=syz.2.7693 [ 609.813136][T29845] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 609.815017][T29851] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 609.833819][T29845] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 609.856119][T29851] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 609.884774][T29854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 609.902377][T29858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7698'. [ 609.912201][T29858] netlink: 'syz.0.7698': attribute type 21 has an invalid length. [ 609.920061][T29858] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7698'. [ 609.929697][T29858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7698'. [ 610.013388][T29868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.080746][T29873] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7705'. [ 610.193002][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.270871][T29903] loop5: detected capacity change from 0 to 512 [ 610.289776][T29908] program syz.4.7717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.319533][T29903] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7715: bg 0: block 131: padding at end of block bitmap is not set [ 610.336769][T29914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.345359][T29914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.363335][T29903] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 610.373480][T29914] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 610.388710][T29903] EXT4-fs (loop5): 1 truncate cleaned up [ 610.396366][T29914] SELinux: failed to load policy [ 610.401728][T29919] syzkaller1: entered promiscuous mode [ 610.407215][T29919] syzkaller1: entered allmulticast mode [ 610.413643][T29903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.428268][T29919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7720'. [ 610.563279][T29929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.854964][T29938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.863516][T29938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.111655][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.799426][T29945] connsecmark_tg_check: 2 callbacks suppressed [ 611.799482][T29945] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 611.920260][T29953] syzkaller1: entered promiscuous mode [ 611.925925][T29953] syzkaller1: entered allmulticast mode [ 611.971884][T29956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7731'. [ 612.034628][T29962] 9pnet_fd: Insufficient options for proto=fd [ 612.481056][T29975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.527158][T29979] loop5: detected capacity change from 0 to 128 [ 612.549934][T29979] bio_check_eod: 4 callbacks suppressed [ 612.549992][T29979] syz.5.7739: attempt to access beyond end of device [ 612.549992][T29979] loop5: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 612.569537][T29979] syz.5.7739: attempt to access beyond end of device [ 612.569537][T29979] loop5: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 612.621916][T29979] syz.5.7739: attempt to access beyond end of device [ 612.621916][T29979] loop5: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 612.635431][T29979] buffer_io_error: 2 callbacks suppressed [ 612.635445][T29979] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 612.655132][T29979] syz.5.7739: attempt to access beyond end of device [ 612.655132][T29979] loop5: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 612.663760][T29986] FAULT_INJECTION: forcing a failure. [ 612.663760][T29986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.668598][T29979] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 612.681650][T29986] CPU: 1 UID: 0 PID: 29986 Comm: syz.4.7741 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 612.681685][T29986] Tainted: [W]=WARN [ 612.681691][T29986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 612.681705][T29986] Call Trace: [ 612.681762][T29986] [ 612.681773][T29986] __dump_stack+0x1d/0x30 [ 612.681801][T29986] dump_stack_lvl+0xe8/0x140 [ 612.681825][T29986] dump_stack+0x15/0x1b [ 612.681869][T29986] should_fail_ex+0x265/0x280 [ 612.681905][T29986] should_fail+0xb/0x20 [ 612.681938][T29986] should_fail_usercopy+0x1a/0x20 [ 612.682036][T29986] _copy_from_iter+0x24e/0xe40 [ 612.682082][T29986] netlink_sendmsg+0x471/0x6b0 [ 612.682108][T29986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.682134][T29986] __sock_sendmsg+0x145/0x180 [ 612.682200][T29986] sock_write_iter+0x165/0x1b0 [ 612.682233][T29986] do_iter_readv_writev+0x421/0x4c0 [ 612.682278][T29986] vfs_writev+0x2df/0x8b0 [ 612.682316][T29986] do_writev+0xe7/0x210 [ 612.682416][T29986] __x64_sys_writev+0x45/0x50 [ 612.682438][T29986] x64_sys_call+0x2006/0x2fb0 [ 612.682463][T29986] do_syscall_64+0xd2/0x200 [ 612.682549][T29986] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 612.682580][T29986] ? clear_bhb_loop+0x40/0x90 [ 612.682642][T29986] ? clear_bhb_loop+0x40/0x90 [ 612.682679][T29986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.682703][T29986] RIP: 0033:0x7efcfd4fe9a9 [ 612.682722][T29986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.682775][T29986] RSP: 002b:00007efcfbb5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 612.682798][T29986] RAX: ffffffffffffffda RBX: 00007efcfd725fa0 RCX: 00007efcfd4fe9a9 [ 612.682813][T29986] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 612.682828][T29986] RBP: 00007efcfbb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 612.682847][T29986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.682862][T29986] R13: 0000000000000000 R14: 00007efcfd725fa0 R15: 00007ffefa3a9c18 [ 612.682885][T29986] [ 612.901924][T29979] syz.5.7739: attempt to access beyond end of device [ 612.901924][T29979] loop5: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 612.915554][T29979] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 612.924500][T29979] syz.5.7739: attempt to access beyond end of device [ 612.924500][T29979] loop5: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 612.937996][T29979] Buffer I/O error on dev loop5, logical block 145, lost async page write [ 612.946823][T29979] syz.5.7739: attempt to access beyond end of device [ 612.946823][T29979] loop5: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 612.960467][T29979] Buffer I/O error on dev loop5, logical block 146, lost async page write [ 612.992659][T29979] syz.5.7739: attempt to access beyond end of device [ 612.992659][T29979] loop5: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 613.006156][T29979] Buffer I/O error on dev loop5, logical block 147, lost async page write [ 613.019141][T29979] syz.5.7739: attempt to access beyond end of device [ 613.019141][T29979] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 613.032611][T29979] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 613.044650][T29979] syz.5.7739: attempt to access beyond end of device [ 613.044650][T29979] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 613.058127][T29979] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 613.066997][T29979] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 613.075694][T29979] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 613.286755][T29999] loop7: detected capacity change from 0 to 7 [ 613.302603][T30010] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 613.382224][T30016] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 613.481658][T30023] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 613.519382][T30037] syzkaller1: entered promiscuous mode [ 613.525026][T30037] syzkaller1: entered allmulticast mode [ 613.747733][T30052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.768861][T30052] sctp: [Deprecated]: syz.5.7764 (pid 30052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.768861][T30052] Use struct sctp_sack_info instead [ 613.804163][T30090] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 613.900587][T30095] 0ªX¹¦À: renamed from 61ªX¹¦À [ 613.907755][T30095] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 613.970501][T30052] loop5: detected capacity change from 0 to 2048 [ 613.990842][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 613.990913][ T29] audit: type=1326 audit(1753472452.020:40918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.035848][T30052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.060065][ T29] audit: type=1326 audit(1753472452.060:40919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.083750][ T29] audit: type=1326 audit(1753472452.060:40920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.107526][ T29] audit: type=1326 audit(1753472452.060:40921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.131169][ T29] audit: type=1326 audit(1753472452.060:40922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.154730][ T29] audit: type=1326 audit(1753472452.060:40923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.178385][ T29] audit: type=1326 audit(1753472452.060:40924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.202093][ T29] audit: type=1326 audit(1753472452.060:40925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.225760][ T29] audit: type=1326 audit(1753472452.060:40926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.264313][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.293928][ T29] audit: type=1326 audit(1753472452.280:40927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.0.7769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 614.359101][T30153] program syz.3.7772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.454550][T30168] __nla_validate_parse: 6 callbacks suppressed [ 614.454634][T30168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7776'. [ 614.548406][T30180] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 614.617126][T30182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.670997][T30192] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 614.752385][T30196] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 614.767247][T30196] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 614.791029][T30202] netlink: 'syz.5.7789': attribute type 13 has an invalid length. [ 614.852269][T30214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.863524][T30214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.872906][T30214] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 614.882314][T30210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7792'. [ 614.892012][T30214] SELinux: failed to load policy [ 614.945762][T30219] loop5: detected capacity change from 0 to 512 [ 614.952599][T30219] EXT4-fs: Ignoring removed i_version option [ 614.961721][T30219] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 614.988301][T30219] EXT4-fs (loop5): 1 truncate cleaned up [ 614.996747][T30219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.023707][T30219] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7792'. [ 615.032845][T30219] 1ªX¹¦À: renamed from 60ªX¹¦À [ 615.039135][T30219] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 615.521225][T30231] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 615.524934][T30237] syz!: rxe_newlink: already configured on team_slave_0 [ 615.547715][T30237] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 615.576892][T30243] FAULT_INJECTION: forcing a failure. [ 615.576892][T30243] name failslab, interval 1, probability 0, space 0, times 0 [ 615.589691][T30243] CPU: 0 UID: 0 PID: 30243 Comm: syz.4.7803 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 615.589729][T30243] Tainted: [W]=WARN [ 615.589811][T30243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 615.589826][T30243] Call Trace: [ 615.589833][T30243] [ 615.589842][T30243] __dump_stack+0x1d/0x30 [ 615.589867][T30243] dump_stack_lvl+0xe8/0x140 [ 615.589890][T30243] dump_stack+0x15/0x1b [ 615.589910][T30243] should_fail_ex+0x265/0x280 [ 615.589945][T30243] should_failslab+0x8c/0xb0 [ 615.590026][T30243] __kvmalloc_node_noprof+0x123/0x4e0 [ 615.590091][T30243] ? xt_alloc_table_info+0x3b/0x80 [ 615.590194][T30243] ? should_fail_ex+0xdb/0x280 [ 615.590225][T30243] xt_alloc_table_info+0x3b/0x80 [ 615.590251][T30243] do_ip6t_set_ctl+0x5a5/0x840 [ 615.590341][T30243] ? kstrtoull+0x111/0x140 [ 615.590371][T30243] ? __rcu_read_unlock+0x4f/0x70 [ 615.590401][T30243] nf_setsockopt+0x196/0x1b0 [ 615.590425][T30243] ipv6_setsockopt+0x11a/0x130 [ 615.590496][T30243] tcp_setsockopt+0x95/0xb0 [ 615.590608][T30243] sock_common_setsockopt+0x66/0x80 [ 615.590639][T30243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 615.590668][T30243] __sys_setsockopt+0x181/0x200 [ 615.590760][T30243] __x64_sys_setsockopt+0x64/0x80 [ 615.590797][T30243] x64_sys_call+0x2bd5/0x2fb0 [ 615.590820][T30243] do_syscall_64+0xd2/0x200 [ 615.590840][T30243] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 615.590879][T30243] ? clear_bhb_loop+0x40/0x90 [ 615.590896][T30243] ? clear_bhb_loop+0x40/0x90 [ 615.590914][T30243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.590935][T30243] RIP: 0033:0x7efcfd4fe9a9 [ 615.590950][T30243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.590970][T30243] RSP: 002b:00007efcfbb5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 615.590986][T30243] RAX: ffffffffffffffda RBX: 00007efcfd725fa0 RCX: 00007efcfd4fe9a9 [ 615.591038][T30243] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 615.591048][T30243] RBP: 00007efcfbb5f090 R08: 000000000000047b R09: 0000000000000000 [ 615.591060][T30243] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.591073][T30243] R13: 0000000000000000 R14: 00007efcfd725fa0 R15: 00007ffefa3a9c18 [ 615.591142][T30243] [ 615.853669][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.857753][T30249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.871579][T30249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.882663][T30249] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 615.892775][T30249] SELinux: failed to load policy [ 615.906849][T30257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.922980][T30257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.932039][T30257] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 615.943269][T30257] SELinux: failed to load policy [ 616.030102][T30276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7816'. [ 616.575869][T30321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7833'. [ 616.633806][T30326] program syz.4.7834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.656153][T30304] loop7: detected capacity change from 0 to 7 [ 616.798114][T30333] program syz.0.7835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.832159][T30335] loop5: detected capacity change from 0 to 512 [ 616.853876][T30335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.867143][T30335] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 616.890339][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.921601][T30342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.930411][T30342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.939288][T30342] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 616.948328][T30342] SELinux: failed to load policy [ 616.981888][T30350] FAULT_INJECTION: forcing a failure. [ 616.981888][T30350] name failslab, interval 1, probability 0, space 0, times 0 [ 616.994599][T30350] CPU: 0 UID: 0 PID: 30350 Comm: syz.5.7837 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 616.994635][T30350] Tainted: [W]=WARN [ 616.994641][T30350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.994714][T30350] Call Trace: [ 616.994722][T30350] [ 616.994730][T30350] __dump_stack+0x1d/0x30 [ 616.994752][T30350] dump_stack_lvl+0xe8/0x140 [ 616.994768][T30350] dump_stack+0x15/0x1b [ 616.994782][T30350] should_fail_ex+0x265/0x280 [ 616.994809][T30350] should_failslab+0x8c/0xb0 [ 616.994834][T30350] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 616.994901][T30350] ? __d_alloc+0x3d/0x350 [ 616.994921][T30350] __d_alloc+0x3d/0x350 [ 616.994938][T30350] ? mpol_shared_policy_init+0xbd/0x4c0 [ 616.995045][T30350] d_alloc_pseudo+0x1e/0x80 [ 616.995067][T30350] alloc_file_pseudo+0x71/0x160 [ 616.995154][T30350] __shmem_file_setup+0x1de/0x210 [ 616.995220][T30350] shmem_file_setup+0x3b/0x50 [ 616.995244][T30350] __se_sys_memfd_create+0x2c3/0x590 [ 616.995270][T30350] __x64_sys_memfd_create+0x31/0x40 [ 616.995357][T30350] x64_sys_call+0x122f/0x2fb0 [ 616.995398][T30350] do_syscall_64+0xd2/0x200 [ 616.995420][T30350] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 616.995444][T30350] ? clear_bhb_loop+0x40/0x90 [ 616.995494][T30350] ? clear_bhb_loop+0x40/0x90 [ 616.995519][T30350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.995575][T30350] RIP: 0033:0x7fc70b55e9a9 [ 616.995588][T30350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.995604][T30350] RSP: 002b:00007fc709ba5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 616.995648][T30350] RAX: ffffffffffffffda RBX: 0000000000000571 RCX: 00007fc70b55e9a9 [ 616.995664][T30350] RDX: 00007fc709ba5ef0 RSI: 0000000000000000 RDI: 00007fc70b5e16fc [ 616.995678][T30350] RBP: 0000200000000d00 R08: 00007fc709ba5bb7 R09: 00007fc709ba5e40 [ 616.995692][T30350] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 616.995707][T30350] R13: 00007fc709ba5ef0 R14: 00007fc709ba5eb0 R15: 00002000000003c0 [ 616.995729][T30350] [ 617.264236][T30354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.380662][T30364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.414664][T30376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7851'. [ 617.450988][T30381] program syz.5.7852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 617.481812][T30382] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7851'. [ 617.491043][T30382] 0ªX¹¦À: renamed from 61ªX¹¦À [ 617.500075][T30382] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 617.714293][T30404] syzkaller1: entered promiscuous mode [ 617.719821][T30404] syzkaller1: entered allmulticast mode [ 617.727777][T30404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7861'. [ 617.773278][T30416] Cannot find del_set index 4 as target [ 617.854800][T30424] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 617.901461][T30427] Cannot find del_set index 4 as target [ 618.023013][T30433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7870'. [ 618.052941][T30437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 618.280021][T30445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.288525][T30445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.386012][T30450] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 618.397750][T30449] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 618.471995][T30449] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 618.556270][T30452] syzkaller1: entered promiscuous mode [ 618.561853][T30452] syzkaller1: entered allmulticast mode [ 618.671910][T30452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7876'. [ 618.764958][T30462] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 618.809920][T30459] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 619.023282][ T29] kauditd_printk_skb: 1307 callbacks suppressed [ 619.023294][ T29] audit: type=1326 audit(1753472457.060:42235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.176475][T30474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.220672][ T29] audit: type=1326 audit(1753472457.090:42236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.244407][ T29] audit: type=1326 audit(1753472457.090:42237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.267971][ T29] audit: type=1326 audit(1753472457.090:42238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.291646][ T29] audit: type=1326 audit(1753472457.090:42239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.315300][ T29] audit: type=1326 audit(1753472457.100:42240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.338918][ T29] audit: type=1326 audit(1753472457.100:42241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.362491][ T29] audit: type=1326 audit(1753472457.100:42242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.386073][ T29] audit: type=1326 audit(1753472457.100:42243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.409694][ T29] audit: type=1326 audit(1753472457.100:42244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30469 comm="syz.2.7882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c2ade9a9 code=0x7ffc0000 [ 619.566749][T30479] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7886'. [ 619.642027][T30479] 1ªX¹¦À: renamed from 60ªX¹¦À [ 619.674720][T30479] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 619.811133][T30488] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 619.902799][T30491] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 619.909625][T30496] syzkaller1: entered promiscuous mode [ 619.915253][T30496] syzkaller1: entered allmulticast mode [ 619.929469][T30491] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 619.944718][T30496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7891'. [ 620.044722][T30509] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 620.077334][T30509] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 620.832500][T30529] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 620.848245][T30529] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 620.861334][T30535] syzkaller1: entered promiscuous mode [ 620.867070][T30535] syzkaller1: entered allmulticast mode [ 620.876488][T30535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7906'. [ 620.941800][T30544] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 620.957117][T30544] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 621.004643][T30548] program syz.3.7910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.128581][T30565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7917'. [ 621.350173][T30623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.361744][T30623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.371103][T30623] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 621.380260][T30623] SELinux: failed to load policy [ 621.434061][T30635] program syz.4.7935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.460773][T30639] sd 0:0:1:0: device reset [ 621.503502][T30644] syzkaller1: entered promiscuous mode [ 621.509034][T30644] syzkaller1: entered allmulticast mode [ 621.516529][T30644] netlink: zone id is out of range [ 621.656503][T30658] netlink: 'syz.4.7943': attribute type 13 has an invalid length. [ 621.918182][T30674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.926636][T30674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.068268][T30678] loop5: detected capacity change from 0 to 1024 [ 622.106440][T30678] EXT4-fs: Ignoring removed bh option [ 622.134669][T30678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.154532][T30680] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 622.218155][T30680] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 622.258652][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.443903][T30690] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 622.504407][T30701] program syz.4.7954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.548797][T30703] FAULT_INJECTION: forcing a failure. [ 622.548797][T30703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.561914][T30703] CPU: 1 UID: 0 PID: 30703 Comm: syz.0.7955 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 622.561963][T30703] Tainted: [W]=WARN [ 622.561969][T30703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.561984][T30703] Call Trace: [ 622.561990][T30703] [ 622.561997][T30703] __dump_stack+0x1d/0x30 [ 622.562015][T30703] dump_stack_lvl+0xe8/0x140 [ 622.562032][T30703] dump_stack+0x15/0x1b [ 622.562053][T30703] should_fail_ex+0x265/0x280 [ 622.562088][T30703] should_fail+0xb/0x20 [ 622.562118][T30703] should_fail_usercopy+0x1a/0x20 [ 622.562150][T30703] _copy_from_iter+0xcf/0xe40 [ 622.562183][T30703] ? __build_skb_around+0x1a0/0x200 [ 622.562219][T30703] ? __alloc_skb+0x223/0x320 [ 622.562286][T30703] pfkey_sendmsg+0x126/0x900 [ 622.562371][T30703] ? avc_has_perm+0xd3/0x150 [ 622.562404][T30703] ? selinux_socket_sendmsg+0x175/0x1b0 [ 622.562446][T30703] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 622.562508][T30703] __sock_sendmsg+0x145/0x180 [ 622.562585][T30703] ____sys_sendmsg+0x345/0x4e0 [ 622.562611][T30703] ___sys_sendmsg+0x17b/0x1d0 [ 622.562648][T30703] __sys_sendmmsg+0x178/0x300 [ 622.562675][T30703] __x64_sys_sendmmsg+0x57/0x70 [ 622.562716][T30703] x64_sys_call+0x2f2f/0x2fb0 [ 622.562735][T30703] do_syscall_64+0xd2/0x200 [ 622.562813][T30703] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 622.562844][T30703] ? clear_bhb_loop+0x40/0x90 [ 622.562867][T30703] ? clear_bhb_loop+0x40/0x90 [ 622.562886][T30703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.562980][T30703] RIP: 0033:0x7fd4898ae9a9 [ 622.562997][T30703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.563019][T30703] RSP: 002b:00007fd487f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 622.563073][T30703] RAX: ffffffffffffffda RBX: 00007fd489ad5fa0 RCX: 00007fd4898ae9a9 [ 622.563089][T30703] RDX: 0000000000000393 RSI: 0000200000000180 RDI: 0000000000000003 [ 622.563103][T30703] RBP: 00007fd487f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 622.563118][T30703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.563131][T30703] R13: 0000000000000000 R14: 00007fd489ad5fa0 R15: 00007ffe551fe218 [ 622.563147][T30703] [ 622.850356][T30715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.863200][T30715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.873330][T30715] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 622.886781][T30715] SELinux: failed to load policy [ 623.143014][T30748] syz!: rxe_newlink: already configured on team_slave_0 [ 623.172062][T30748] connsecmark_tg_check: 1 callbacks suppressed [ 623.172078][T30748] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 623.206038][T30750] netlink: 'syz.5.7962': attribute type 13 has an invalid length. [ 623.337258][T30755] loop5: detected capacity change from 0 to 512 [ 623.354224][T30755] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7964: bg 0: block 131: padding at end of block bitmap is not set [ 623.387257][T30755] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 623.419814][T30755] EXT4-fs (loop5): 1 truncate cleaned up [ 623.440026][T30755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.888091][T30769] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 623.897156][T30767] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 624.032968][T30792] FAULT_INJECTION: forcing a failure. [ 624.032968][T30792] name failslab, interval 1, probability 0, space 0, times 0 [ 624.045795][T30792] CPU: 1 UID: 0 PID: 30792 Comm: syz.0.7972 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 624.045893][T30792] Tainted: [W]=WARN [ 624.045901][T30792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 624.045916][T30792] Call Trace: [ 624.045923][T30792] [ 624.045931][T30792] __dump_stack+0x1d/0x30 [ 624.045956][T30792] dump_stack_lvl+0xe8/0x140 [ 624.045975][T30792] dump_stack+0x15/0x1b [ 624.046058][T30792] should_fail_ex+0x265/0x280 [ 624.046094][T30792] ? alloc_pipe_info+0xae/0x350 [ 624.046133][T30792] should_failslab+0x8c/0xb0 [ 624.046222][T30792] __kmalloc_cache_noprof+0x4c/0x320 [ 624.046269][T30792] alloc_pipe_info+0xae/0x350 [ 624.046308][T30792] splice_direct_to_actor+0x592/0x680 [ 624.046418][T30792] ? kstrtouint_from_user+0x9f/0xf0 [ 624.046453][T30792] ? __pfx_direct_splice_actor+0x10/0x10 [ 624.046481][T30792] ? __rcu_read_unlock+0x4f/0x70 [ 624.046508][T30792] ? get_pid_task+0x96/0xd0 [ 624.046610][T30792] ? avc_policy_seqno+0x15/0x30 [ 624.046638][T30792] ? selinux_file_permission+0x1e4/0x320 [ 624.046682][T30792] do_splice_direct+0xda/0x150 [ 624.046704][T30792] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 624.046732][T30792] do_sendfile+0x380/0x650 [ 624.046760][T30792] __x64_sys_sendfile64+0x105/0x150 [ 624.046907][T30792] x64_sys_call+0xb39/0x2fb0 [ 624.046928][T30792] do_syscall_64+0xd2/0x200 [ 624.046949][T30792] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 624.046977][T30792] ? clear_bhb_loop+0x40/0x90 [ 624.047060][T30792] ? clear_bhb_loop+0x40/0x90 [ 624.047084][T30792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.047101][T30792] RIP: 0033:0x7fd4898ae9a9 [ 624.047114][T30792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.047232][T30792] RSP: 002b:00007fd487f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 624.047247][T30792] RAX: ffffffffffffffda RBX: 00007fd489ad5fa0 RCX: 00007fd4898ae9a9 [ 624.047258][T30792] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 624.047268][T30792] RBP: 00007fd487f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 624.047282][T30792] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 624.047295][T30792] R13: 0000000000000000 R14: 00007fd489ad5fa0 R15: 00007ffe551fe218 [ 624.047315][T30792] [ 624.304495][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.317493][ T29] kauditd_printk_skb: 3384 callbacks suppressed [ 624.317543][ T29] audit: type=1326 audit(1753472462.350:45629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.368650][T30835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.388152][T30835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.396036][ T29] audit: type=1326 audit(1753472462.400:45630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.407925][T30835] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 624.419700][ T29] audit: type=1326 audit(1753472462.400:45631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.434080][T30835] SELinux: failed to load policy [ 624.451669][ T29] audit: type=1326 audit(1753472462.400:45632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.480322][ T29] audit: type=1326 audit(1753472462.400:45633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.503948][ T29] audit: type=1326 audit(1753472462.400:45634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.527565][ T29] audit: type=1326 audit(1753472462.400:45635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.551225][ T29] audit: type=1326 audit(1753472462.400:45636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.561473][T30838] syzkaller1: entered promiscuous mode [ 624.574808][ T29] audit: type=1326 audit(1753472462.400:45637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.580247][T30838] syzkaller1: entered allmulticast mode [ 624.584556][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7974'. [ 624.603907][ T29] audit: type=1326 audit(1753472462.400:45638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30826 comm="syz.0.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 624.699710][T30838] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7974'. [ 624.834208][T30876] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 624.847259][T30882] syz.0.7983 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 624.870744][T30884] loop5: detected capacity change from 0 to 512 [ 624.930453][T30884] loop5: detected capacity change from 0 to 8192 [ 624.937254][T30896] program syz.2.7987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.200055][T30934] FAULT_INJECTION: forcing a failure. [ 625.200055][T30934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.213230][T30934] CPU: 0 UID: 0 PID: 30934 Comm: syz.5.7996 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 625.213340][T30934] Tainted: [W]=WARN [ 625.213348][T30934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.213361][T30934] Call Trace: [ 625.213366][T30934] [ 625.213372][T30934] __dump_stack+0x1d/0x30 [ 625.213389][T30934] dump_stack_lvl+0xe8/0x140 [ 625.213405][T30934] dump_stack+0x15/0x1b [ 625.213469][T30934] should_fail_ex+0x265/0x280 [ 625.213494][T30934] should_fail+0xb/0x20 [ 625.213516][T30934] should_fail_usercopy+0x1a/0x20 [ 625.213636][T30934] _copy_from_user+0x1c/0xb0 [ 625.213660][T30934] __sys_bpf+0x178/0x790 [ 625.213702][T30934] __x64_sys_bpf+0x41/0x50 [ 625.213800][T30934] x64_sys_call+0x2478/0x2fb0 [ 625.213825][T30934] do_syscall_64+0xd2/0x200 [ 625.213846][T30934] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 625.213876][T30934] ? clear_bhb_loop+0x40/0x90 [ 625.213969][T30934] ? clear_bhb_loop+0x40/0x90 [ 625.213994][T30934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.214065][T30934] RIP: 0033:0x7fc70b55e9a9 [ 625.214081][T30934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.214102][T30934] RSP: 002b:00007fc709bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 625.214123][T30934] RAX: ffffffffffffffda RBX: 00007fc70b785fa0 RCX: 00007fc70b55e9a9 [ 625.214133][T30934] RDX: 0000000000000050 RSI: 0000200000001840 RDI: 0000000000000000 [ 625.214143][T30934] RBP: 00007fc709bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 625.214153][T30934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.214219][T30934] R13: 0000000000000001 R14: 00007fc70b785fa0 R15: 00007fffa2e4c438 [ 625.214300][T30934] [ 625.410571][T30935] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 625.418914][T30935] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 625.514993][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.522550][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.529953][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.537460][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.544866][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.552367][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.559763][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.567175][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.574662][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.582134][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.589531][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.596972][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.604365][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.611781][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.619171][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.626666][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.634068][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.641478][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.648943][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.656367][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.663801][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.671208][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.678608][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.686024][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.693465][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.700847][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.708314][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.715761][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.723167][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.730625][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.738057][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.745494][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.752992][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.760379][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.767790][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.775273][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.782669][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.790097][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.797504][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.804942][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.812352][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.819806][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.827218][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.834867][T30955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8002'. [ 625.835707][ T23] hid-generic 0000:0000:0000.0012: hidraw0: HID v10.00 Device [syz0] on syz1 [ 625.945006][T30968] program syz.2.8006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.008335][T30964] loop5: detected capacity change from 0 to 1024 [ 626.022186][T30964] EXT4-fs: Ignoring removed nobh option [ 626.027773][T30964] EXT4-fs: Ignoring removed bh option [ 626.068433][T30964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.569518][T31008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.578090][T31008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.838666][T31012] syz!: rxe_newlink: already configured on team_slave_0 [ 626.894418][T31012] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 627.104166][T31018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.317616][T31025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.395519][T31025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.478204][T31025] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 627.527214][T31034] program syz.4.8021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 627.560600][T31025] SELinux: failed to load policy [ 628.160187][T31045] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8025'. [ 628.169617][T31047] syzkaller1: entered promiscuous mode [ 628.175149][T31047] syzkaller1: entered allmulticast mode [ 628.183137][T31047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8026'. [ 628.279722][T31054] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 628.317216][T31056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8028'. [ 628.328036][T31053] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 628.357576][T31057] netlink: 802 bytes leftover after parsing attributes in process `syz.4.8028'. [ 628.518133][T31071] program syz.2.8033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 628.731729][T31087] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8038'. [ 628.776840][T31090] syzkaller1: entered promiscuous mode [ 628.782453][T31090] syzkaller1: entered allmulticast mode [ 628.813635][T31090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8039'. [ 628.892171][T31097] syz!: rxe_newlink: already configured on team_slave_0 [ 628.921643][T31097] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 629.145172][T31114] program syz.2.8048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.381461][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 629.381477][ T29] audit: type=1326 audit(1753472467.410:46136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.411259][ T29] audit: type=1326 audit(1753472467.410:46137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.434871][ T29] audit: type=1326 audit(1753472467.410:46138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.458471][ T29] audit: type=1326 audit(1753472467.410:46139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.482059][ T29] audit: type=1326 audit(1753472467.410:46140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.505647][ T29] audit: type=1326 audit(1753472467.410:46141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.529336][ T29] audit: type=1326 audit(1753472467.410:46142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.552896][ T29] audit: type=1326 audit(1753472467.410:46143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.576748][ T29] audit: type=1326 audit(1753472467.410:46144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.600579][ T29] audit: type=1326 audit(1753472467.410:46145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.0.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 629.842735][T31129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.861898][T31129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.988586][T31133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.997108][T31133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.496583][T31150] FAULT_INJECTION: forcing a failure. [ 630.496583][T31150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.509795][T31150] CPU: 1 UID: 0 PID: 31150 Comm: syz.0.8054 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 630.509835][T31150] Tainted: [W]=WARN [ 630.509842][T31150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.509870][T31150] Call Trace: [ 630.509875][T31150] [ 630.509890][T31150] __dump_stack+0x1d/0x30 [ 630.509992][T31150] dump_stack_lvl+0xe8/0x140 [ 630.510014][T31150] dump_stack+0x15/0x1b [ 630.510033][T31150] should_fail_ex+0x265/0x280 [ 630.510184][T31150] should_fail+0xb/0x20 [ 630.510208][T31150] should_fail_usercopy+0x1a/0x20 [ 630.510245][T31150] _copy_from_user+0x1c/0xb0 [ 630.510265][T31150] ___sys_sendmsg+0xc1/0x1d0 [ 630.510349][T31150] __x64_sys_sendmsg+0xd4/0x160 [ 630.510375][T31150] x64_sys_call+0x2999/0x2fb0 [ 630.510400][T31150] do_syscall_64+0xd2/0x200 [ 630.510422][T31150] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 630.510445][T31150] ? clear_bhb_loop+0x40/0x90 [ 630.510544][T31150] ? clear_bhb_loop+0x40/0x90 [ 630.510613][T31150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.510634][T31150] RIP: 0033:0x7fd4898ae9a9 [ 630.510651][T31150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.510670][T31150] RSP: 002b:00007fd487f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.510691][T31150] RAX: ffffffffffffffda RBX: 00007fd489ad5fa0 RCX: 00007fd4898ae9a9 [ 630.510706][T31150] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 630.510790][T31150] RBP: 00007fd487f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 630.510804][T31150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.510818][T31150] R13: 0000000000000000 R14: 00007fd489ad5fa0 R15: 00007ffe551fe218 [ 630.510839][T31150] [ 630.728842][T31152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.761037][T31152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.067049][T31157] syz!: rxe_newlink: already configured on team_slave_0 [ 631.110700][T31156] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 631.393469][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.605375][T31174] syzkaller1: entered promiscuous mode [ 631.610937][T31174] syzkaller1: entered allmulticast mode [ 631.619654][T31170] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 631.626905][T31174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8061'. [ 631.638725][T31170] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 631.672187][T31180] pimreg: entered allmulticast mode [ 631.679206][T31180] x_tables: duplicate underflow at hook 1 [ 631.719340][T31184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.727976][T31184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.737293][T31184] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 631.745972][T31184] SELinux: failed to load policy [ 631.763403][T31188] loop5: detected capacity change from 0 to 1024 [ 631.770139][T31188] EXT4-fs: Ignoring removed orlov option [ 631.777858][T31188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.794496][T31188] netlink: 10 bytes leftover after parsing attributes in process `syz.5.8064'. [ 631.972935][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.042393][T31199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.051349][T31199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.060359][T31199] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 632.062702][T31197] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 632.069287][T31199] SELinux: failed to load policy [ 632.101376][T31203] loop5: detected capacity change from 0 to 512 [ 632.109229][T31203] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8068: bg 0: block 131: padding at end of block bitmap is not set [ 632.123761][T31203] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 632.132662][T31203] EXT4-fs (loop5): 1 truncate cleaned up [ 632.138782][T31203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.509978][T31235] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8075'. [ 632.536032][T31237] program syz.0.8076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.608208][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 632.621830][T31240] netlink: 'syz.4.8077': attribute type 4 has an invalid length. [ 632.699520][T31246] syz!: rxe_newlink: already configured on team_slave_0 [ 632.708976][T31244] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 632.752885][T31250] FAULT_INJECTION: forcing a failure. [ 632.752885][T31250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.765972][T31250] CPU: 0 UID: 0 PID: 31250 Comm: syz.4.8080 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 632.766066][T31250] Tainted: [W]=WARN [ 632.766075][T31250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.766091][T31250] Call Trace: [ 632.766099][T31250] [ 632.766107][T31250] __dump_stack+0x1d/0x30 [ 632.766164][T31250] dump_stack_lvl+0xe8/0x140 [ 632.766187][T31250] dump_stack+0x15/0x1b [ 632.766206][T31250] should_fail_ex+0x265/0x280 [ 632.766243][T31250] should_fail+0xb/0x20 [ 632.766347][T31250] should_fail_usercopy+0x1a/0x20 [ 632.766431][T31250] _copy_to_user+0x20/0xa0 [ 632.766456][T31250] simple_read_from_buffer+0xb5/0x130 [ 632.766526][T31250] proc_fail_nth_read+0x100/0x140 [ 632.766578][T31250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.766641][T31250] vfs_read+0x1a0/0x6f0 [ 632.766674][T31250] ? __rcu_read_unlock+0x4f/0x70 [ 632.766698][T31250] ? __rcu_read_unlock+0x4f/0x70 [ 632.766772][T31250] ? __fget_files+0x184/0x1c0 [ 632.766807][T31250] ksys_read+0xda/0x1a0 [ 632.766842][T31250] __x64_sys_read+0x40/0x50 [ 632.766872][T31250] x64_sys_call+0x2d77/0x2fb0 [ 632.766890][T31250] do_syscall_64+0xd2/0x200 [ 632.766912][T31250] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 632.766942][T31250] ? clear_bhb_loop+0x40/0x90 [ 632.766966][T31250] ? clear_bhb_loop+0x40/0x90 [ 632.766990][T31250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.767082][T31250] RIP: 0033:0x7efcfd4fd3bc [ 632.767098][T31250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 632.767118][T31250] RSP: 002b:00007efcfbb5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.767139][T31250] RAX: ffffffffffffffda RBX: 00007efcfd725fa0 RCX: 00007efcfd4fd3bc [ 632.767153][T31250] RDX: 000000000000000f RSI: 00007efcfbb5f0a0 RDI: 0000000000000005 [ 632.767234][T31250] RBP: 00007efcfbb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 632.767247][T31250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.767261][T31250] R13: 0000000000000000 R14: 00007efcfd725fa0 R15: 00007ffefa3a9c18 [ 632.767281][T31250] [ 633.034917][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.096800][T31269] program syz.4.8086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.106934][T31270] FAULT_INJECTION: forcing a failure. [ 633.106934][T31270] name failslab, interval 1, probability 0, space 0, times 0 [ 633.119638][T31270] CPU: 0 UID: 0 PID: 31270 Comm: syz.2.8087 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 633.119734][T31270] Tainted: [W]=WARN [ 633.119741][T31270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 633.119785][T31270] Call Trace: [ 633.119792][T31270] [ 633.119800][T31270] __dump_stack+0x1d/0x30 [ 633.119824][T31270] dump_stack_lvl+0xe8/0x140 [ 633.119843][T31270] dump_stack+0x15/0x1b [ 633.119862][T31270] should_fail_ex+0x265/0x280 [ 633.119897][T31270] should_failslab+0x8c/0xb0 [ 633.119999][T31270] __kvmalloc_node_noprof+0x123/0x4e0 [ 633.120102][T31270] ? seq_read_iter+0x13e/0x940 [ 633.120130][T31270] seq_read_iter+0x13e/0x940 [ 633.120150][T31270] ? _parse_integer+0x27/0x40 [ 633.120180][T31270] seq_read+0x1f7/0x240 [ 633.120231][T31270] ? __pfx_seq_read+0x10/0x10 [ 633.120319][T31270] proc_reg_read+0xe9/0x1c0 [ 633.120337][T31270] ? vfs_read+0x189/0x6f0 [ 633.120365][T31270] ? __pfx_proc_reg_read+0x10/0x10 [ 633.120462][T31270] vfs_read+0x1a0/0x6f0 [ 633.120488][T31270] ? __rcu_read_unlock+0x4f/0x70 [ 633.120507][T31270] ? __fget_files+0x184/0x1c0 [ 633.120542][T31270] ksys_read+0xda/0x1a0 [ 633.120582][T31270] __x64_sys_read+0x40/0x50 [ 633.120619][T31270] x64_sys_call+0x2d77/0x2fb0 [ 633.120642][T31270] do_syscall_64+0xd2/0x200 [ 633.120659][T31270] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 633.120684][T31270] ? clear_bhb_loop+0x40/0x90 [ 633.120708][T31270] ? clear_bhb_loop+0x40/0x90 [ 633.120739][T31270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.120801][T31270] RIP: 0033:0x7fe2c2ade9a9 [ 633.120819][T31270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.120926][T31270] RSP: 002b:00007fe2c1147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 633.121055][T31270] RAX: ffffffffffffffda RBX: 00007fe2c2d05fa0 RCX: 00007fe2c2ade9a9 [ 633.121071][T31270] RDX: 0000000000000ffc RSI: 00002000000000c0 RDI: 0000000000000004 [ 633.121086][T31270] RBP: 00007fe2c1147090 R08: 0000000000000000 R09: 0000000000000000 [ 633.121100][T31270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.121115][T31270] R13: 0000000000000000 R14: 00007fe2c2d05fa0 R15: 00007ffea57ca6c8 [ 633.121137][T31270] [ 633.391262][T31270] lo speed is unknown, defaulting to 1000 [ 633.458947][T31299] lo speed is unknown, defaulting to 1000 [ 633.465976][T31304] syz!: rxe_newlink: already configured on team_slave_0 [ 633.476446][T31304] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 633.740556][T31345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.749197][T31345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.180990][T31351] FAULT_INJECTION: forcing a failure. [ 634.180990][T31351] name failslab, interval 1, probability 0, space 0, times 0 [ 634.193678][T31351] CPU: 1 UID: 0 PID: 31351 Comm: syz.2.8096 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 634.193755][T31351] Tainted: [W]=WARN [ 634.193762][T31351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.193776][T31351] Call Trace: [ 634.193784][T31351] [ 634.193822][T31351] __dump_stack+0x1d/0x30 [ 634.193842][T31351] dump_stack_lvl+0xe8/0x140 [ 634.193862][T31351] dump_stack+0x15/0x1b [ 634.193881][T31351] should_fail_ex+0x265/0x280 [ 634.193921][T31351] should_failslab+0x8c/0xb0 [ 634.193943][T31351] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 634.193966][T31351] ? __d_alloc+0x3d/0x350 [ 634.194063][T31351] __d_alloc+0x3d/0x350 [ 634.194084][T31351] ? mpol_shared_policy_init+0xbd/0x4c0 [ 634.194111][T31351] d_alloc_pseudo+0x1e/0x80 [ 634.194145][T31351] alloc_file_pseudo+0x71/0x160 [ 634.194206][T31351] __shmem_file_setup+0x1de/0x210 [ 634.194238][T31351] shmem_file_setup+0x3b/0x50 [ 634.194267][T31351] __se_sys_memfd_create+0x2c3/0x590 [ 634.194341][T31351] __x64_sys_memfd_create+0x31/0x40 [ 634.194366][T31351] x64_sys_call+0x122f/0x2fb0 [ 634.194390][T31351] do_syscall_64+0xd2/0x200 [ 634.194442][T31351] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 634.194465][T31351] ? clear_bhb_loop+0x40/0x90 [ 634.194492][T31351] ? clear_bhb_loop+0x40/0x90 [ 634.194510][T31351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.194529][T31351] RIP: 0033:0x7fe2c2ade9a9 [ 634.194558][T31351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.194578][T31351] RSP: 002b:00007fe2c1125e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 634.194594][T31351] RAX: ffffffffffffffda RBX: 0000000000000571 RCX: 00007fe2c2ade9a9 [ 634.194604][T31351] RDX: 00007fe2c1125ef0 RSI: 0000000000000000 RDI: 00007fe2c2b616fc [ 634.194614][T31351] RBP: 0000200000000d00 R08: 00007fe2c1125bb7 R09: 00007fe2c1125e40 [ 634.194624][T31351] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 634.194634][T31351] R13: 00007fe2c1125ef0 R14: 00007fe2c1125eb0 R15: 00002000000003c0 [ 634.194674][T31351] [ 634.434923][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 634.434947][ T29] audit: type=1326 audit(1753472472.450:46759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.0.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4898a5967 code=0x7ffc0000 [ 634.464774][ T29] audit: type=1326 audit(1753472472.450:46760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.0.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd48984ab89 code=0x7ffc0000 [ 634.488333][ T29] audit: type=1326 audit(1753472472.450:46761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.0.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 634.578093][ T29] audit: type=1326 audit(1753472472.550:46762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.0.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4898a5967 code=0x7ffc0000 [ 634.601713][ T29] audit: type=1326 audit(1753472472.550:46763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.0.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd48984ab89 code=0x7ffc0000 [ 634.625221][ T29] audit: type=1326 audit(1753472472.550:46764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.0.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 634.689964][T31355] syzkaller1: entered promiscuous mode [ 634.695529][T31355] syzkaller1: entered allmulticast mode [ 634.728818][T31355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8098'. [ 634.920722][ T29] audit: type=1400 audit(1753472472.900:46765): avc: denied { bind } for pid=31365 comm="syz.5.8101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 634.940338][ T29] audit: type=1400 audit(1753472472.950:46766): avc: denied { read } for pid=31365 comm="syz.5.8101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 635.132205][ T29] audit: type=1400 audit(1753472473.160:46767): avc: denied { recv } for pid=31332 comm="syz.4.8093" saddr=10.128.0.163 src=34514 daddr=10.128.0.188 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 635.292157][T31380] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 635.312114][T31380] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 635.367405][T31384] program syz.2.8106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.389479][T31385] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 635.398171][T31385] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 635.513454][T31389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8108'. [ 635.522719][ T29] audit: type=1400 audit(1753472473.550:46768): avc: denied { write } for pid=31390 comm="syz.5.8107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 635.632946][T31397] netlink: 'syz.0.8110': attribute type 21 has an invalid length. [ 635.640884][T31397] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8110'. [ 635.651034][T31395] loop5: detected capacity change from 0 to 1024 [ 635.664205][T31395] EXT4-fs: Ignoring removed nobh option [ 635.669849][T31395] EXT4-fs: Ignoring removed bh option [ 635.701602][T31395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.766763][T31409] syzkaller1: entered promiscuous mode [ 635.772363][T31409] syzkaller1: entered allmulticast mode [ 635.826850][T31409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8114'. [ 636.123812][T31429] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 636.132381][T31429] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 636.200185][T31431] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8117'. [ 636.295820][T31436] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 636.332340][T31436] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 636.576749][T31448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8122'. [ 636.622671][T31450] program syz.0.8123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.912505][T31471] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 636.920892][T31471] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 637.163753][T31482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.172217][T31482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.265691][T31486] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8133'. [ 637.754354][T31492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8135'. [ 638.133976][T31499] syz!: rxe_newlink: already configured on team_slave_0 [ 638.143710][T31499] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 638.322527][T31505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8140'. [ 638.507028][T31509] syz!: rxe_newlink: already configured on team_slave_0 [ 638.559814][T31512] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 639.004622][T31534] program syz.0.8147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.444317][ T29] kauditd_printk_skb: 673 callbacks suppressed [ 639.444329][ T29] audit: type=1326 audit(1753472477.480:47442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcfd4f5967 code=0x7ffc0000 [ 639.525198][ T29] audit: type=1326 audit(1753472477.510:47443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcfd49ab89 code=0x7ffc0000 [ 639.548805][ T29] audit: type=1326 audit(1753472477.510:47444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcfd4f5967 code=0x7ffc0000 [ 639.572491][ T29] audit: type=1326 audit(1753472477.510:47445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcfd49ab89 code=0x7ffc0000 [ 639.596176][ T29] audit: type=1326 audit(1753472477.510:47446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efcfd4fe9a9 code=0x7ffc0000 [ 639.619590][ T29] audit: type=1326 audit(1753472477.520:47447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcfd4f5967 code=0x7ffc0000 [ 639.643225][ T29] audit: type=1326 audit(1753472477.520:47448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcfd49ab89 code=0x7ffc0000 [ 639.666909][ T29] audit: type=1326 audit(1753472477.520:47449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efcfd4fe9a9 code=0x7ffc0000 [ 639.690318][ T29] audit: type=1326 audit(1753472477.530:47450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcfd4f5967 code=0x7ffc0000 [ 639.713828][ T29] audit: type=1326 audit(1753472477.530:47451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31528 comm="syz.4.8145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcfd49ab89 code=0x7ffc0000 [ 639.852641][T31539] syz!: rxe_newlink: already configured on team_slave_0 [ 639.870143][T31539] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 639.966419][T17713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.054468][T31540] lo speed is unknown, defaulting to 1000 [ 640.093120][T31565] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8154'. [ 640.140391][T31578] syzkaller1: entered promiscuous mode [ 640.145935][T31578] syzkaller1: entered allmulticast mode [ 640.192080][T31627] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8158'. [ 640.224849][T31578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8155'. [ 640.250646][ T37] bridge_slave_1: left allmulticast mode [ 640.256445][ T37] bridge_slave_1: left promiscuous mode [ 640.262350][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.270084][ T37] bridge_slave_0: left allmulticast mode [ 640.275830][ T37] bridge_slave_0: left promiscuous mode [ 640.281787][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.337550][T31693] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 640.352030][T31693] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 640.463142][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.472545][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.481535][ T37] bond0 (unregistering): Released all slaves [ 640.495653][T31540] chnl_net:caif_netlink_parms(): no params data found [ 640.564305][T31540] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.571397][T31540] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.582043][T31540] bridge_slave_0: entered allmulticast mode [ 640.588453][T31540] bridge_slave_0: entered promiscuous mode [ 640.597431][ T37] hsr_slave_0: left promiscuous mode [ 640.607845][ T37] hsr_slave_1: left promiscuous mode [ 640.643807][ T37] team0 (unregistering): Port device team_slave_1 removed [ 640.655299][ T37] team0 (unregistering): Port device team_slave_0 removed [ 640.722529][T31765] loop5: detected capacity change from 0 to 128 [ 640.758662][T31765] bio_check_eod: 4 callbacks suppressed [ 640.758676][T31765] syz.5.8163: attempt to access beyond end of device [ 640.758676][T31765] loop5: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 640.783508][T31768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8162'. [ 640.807962][T31765] syz.5.8163: attempt to access beyond end of device [ 640.807962][T31765] loop5: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 640.823964][T31765] syz.5.8163: attempt to access beyond end of device [ 640.823964][T31765] loop5: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 640.837455][T31765] buffer_io_error: 2 callbacks suppressed [ 640.837492][T31765] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 640.854752][T31770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.863304][T31770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.873025][T31540] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.880160][T31540] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.889907][T31540] bridge_slave_1: entered allmulticast mode [ 640.897153][T31540] bridge_slave_1: entered promiscuous mode [ 640.905136][T31765] syz.5.8163: attempt to access beyond end of device [ 640.905136][T31765] loop5: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 640.918608][T31765] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 640.952355][T31540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.998441][T31765] syz.5.8163: attempt to access beyond end of device [ 640.998441][T31765] loop5: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 641.011922][T31765] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 641.027948][T31540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.117757][T31540] team0: Port device team_slave_0 added [ 641.132779][T31821] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8166'. [ 641.155582][T31540] team0: Port device team_slave_1 added [ 641.165069][T31765] syz.5.8163: attempt to access beyond end of device [ 641.165069][T31765] loop5: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 641.178597][T31765] Buffer I/O error on dev loop5, logical block 145, lost async page write [ 641.254708][T31540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.261816][T31540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.287869][T31540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.332439][T31860] program syz.4.8169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.366518][T31765] syz.5.8163: attempt to access beyond end of device [ 641.366518][T31765] loop5: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 641.379981][T31765] Buffer I/O error on dev loop5, logical block 146, lost async page write [ 641.394670][T31765] syz.5.8163: attempt to access beyond end of device [ 641.394670][T31765] loop5: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 641.408176][T31765] Buffer I/O error on dev loop5, logical block 147, lost async page write [ 641.418676][T31540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.425723][T31540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.451794][T31540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.484614][T31765] syz.5.8163: attempt to access beyond end of device [ 641.484614][T31765] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 641.498330][T31765] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 641.508415][T31765] syz.5.8163: attempt to access beyond end of device [ 641.508415][T31765] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 641.521892][T31765] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 641.594939][ T37] ------------[ cut here ]------------ [ 641.600486][ T37] WARNING: CPU: 1 PID: 37 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x94/0x100 [ 641.610444][ T37] Modules linked in: [ 641.614373][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 641.628398][ T37] Tainted: [W]=WARN [ 641.632223][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 641.642393][ T37] Workqueue: netns cleanup_net [ 641.647222][ T37] RIP: 0010:xfrm6_tunnel_net_exit+0x94/0x100 [ 641.653240][ T37] Code: 12 d4 af fc 4b 83 3c 3e 00 75 19 e8 e6 b0 95 fc 49 81 ff f8 07 00 00 74 1d e8 d8 b0 95 fc 49 83 c7 08 eb d7 e8 cd b0 95 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 641.672964][ T37] RSP: 0018:ffffc90000143c78 EFLAGS: 00010293 [ 641.679044][ T37] RAX: ffffffff84c1f353 RBX: ffff88810407bc00 RCX: ffff8881008c1040 [ 641.687134][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888119dc0150 [ 641.695153][ T37] RBP: ffffffff86c8a6a0 R08: 0001ffff86848aff R09: 0000000000000000 [ 641.703145][ T37] R10: ffffc90000143bf8 R11: 0001c90000143bf8 R12: ffffffff86c8a6c0 [ 641.711203][ T37] R13: ffff88810407bc28 R14: ffff888119dc0000 R15: 0000000000000150 [ 641.719247][ T37] FS: 0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 641.728192][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.734878][ T37] CR2: 00007f0a09387f12 CR3: 000000015342a000 CR4: 00000000003506f0 [ 641.742877][ T37] Call Trace: [ 641.746167][ T37] [ 641.749139][ T37] ops_undo_list+0x27b/0x410 [ 641.753766][ T37] cleanup_net+0x2de/0x4d0 [ 641.758277][ T37] process_scheduled_works+0x4cb/0x9d0 [ 641.763803][ T37] worker_thread+0x582/0x770 [ 641.768447][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 641.774325][ T37] ? schedule+0x5f/0xd0 [ 641.778547][ T37] kthread+0x486/0x510 [ 641.782700][ T37] ? finish_task_switch+0xad/0x2b0 [ 641.787834][ T37] ? __pfx_worker_thread+0x10/0x10 [ 641.793113][ T37] ? __pfx_kthread+0x10/0x10 [ 641.797729][ T37] ret_from_fork+0xda/0x150 [ 641.802268][ T37] ? __pfx_kthread+0x10/0x10 [ 641.806868][ T37] ret_from_fork_asm+0x1a/0x30 [ 641.811701][ T37] [ 641.814724][ T37] ---[ end trace 0000000000000000 ]--- [ 641.821775][ T37] ------------[ cut here ]------------ [ 641.827278][ T37] WARNING: CPU: 1 PID: 37 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd8/0x100 [ 641.837229][ T37] Modules linked in: [ 641.841135][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 641.855154][ T37] Tainted: [W]=WARN [ 641.859003][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 641.869116][ T37] Workqueue: netns cleanup_net [ 641.873926][ T37] RIP: 0010:xfrm6_tunnel_net_exit+0xd8/0x100 [ 641.879918][ T37] Code: ce d3 af fc 49 83 3c 1e 00 75 19 e8 a2 b0 95 fc 48 81 fb f8 07 00 00 74 1d e8 94 b0 95 fc 48 83 c3 08 eb d7 e8 89 b0 95 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 77 b0 95 fc 5b 41 5e 41 5f [ 641.899617][ T37] RSP: 0018:ffffc90000143c78 EFLAGS: 00010293 [ 641.905713][ T37] RAX: ffffffff84c1f397 RBX: 0000000000000008 RCX: ffff8881008c1040 [ 641.913820][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888119dc0808 [ 641.921914][ T37] RBP: ffffffff86c8a6a0 R08: 0001ffff86848aff R09: 0000000000000000 [ 641.929907][ T37] R10: ffffc90000143bf8 R11: 0001c90000143bf8 R12: ffffffff86c8a6c0 [ 641.937958][ T37] R13: ffff88810407bc28 R14: ffff888119dc0800 R15: 00000000000007f8 [ 641.945956][ T37] FS: 0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 641.954971][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.961638][ T37] CR2: 00007f0a09387f12 CR3: 000000015342a000 CR4: 00000000003506f0 [ 641.969620][ T37] Call Trace: [ 641.972926][ T37] [ 641.975876][ T37] ops_undo_list+0x27b/0x410 [ 641.980492][ T37] cleanup_net+0x2de/0x4d0 [ 641.984952][ T37] process_scheduled_works+0x4cb/0x9d0 [ 641.990521][ T37] worker_thread+0x582/0x770 [ 641.995227][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 642.001099][ T37] ? schedule+0x5f/0xd0 [ 642.005371][ T37] kthread+0x486/0x510 [ 642.009488][ T37] ? finish_task_switch+0xad/0x2b0 [ 642.014628][ T37] ? __pfx_worker_thread+0x10/0x10 [ 642.019782][ T37] ? __pfx_kthread+0x10/0x10 [ 642.024378][ T37] ret_from_fork+0xda/0x150 [ 642.028875][ T37] ? __pfx_kthread+0x10/0x10 [ 642.033544][ T37] ret_from_fork_asm+0x1a/0x30 [ 642.038429][ T37] [ 642.041532][ T37] ---[ end trace 0000000000000000 ]--- [ 642.042127][T31765] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 642.056271][T31765] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 642.086863][T31540] hsr_slave_0: entered promiscuous mode [ 642.093026][T31540] hsr_slave_1: entered promiscuous mode [ 642.104561][ T37] ------------[ cut here ]------------ [ 642.110055][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 642.119679][ T37] Modules linked in: [ 642.123769][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 642.137803][ T37] Tainted: [W]=WARN [ 642.141661][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.151759][ T37] Workqueue: netns cleanup_net [ 642.156556][ T37] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 642.162384][ T37] Code: 48 8d bb 70 0e 00 00 e8 02 5f c1 fc 48 8b bb 70 0e 00 00 e8 a6 c3 cd fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 75 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 67 4f a7 fc 90 0f 0b 90 4c 89 f7 e8 cb [ 642.182060][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 642.188238][ T37] RAX: ffffffff84b054ab RBX: ffff88810407bc00 RCX: ffff8881008c1040 [ 642.196479][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810407ca40 [ 642.204568][ T37] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000 [ 642.212631][ T37] R10: ffffc90000143be8 R11: 0001c90000143be8 R12: ffffffff86c82480 [ 642.220684][ T37] R13: ffff88810407bc28 R14: ffff88810407ca40 R15: ffff88810407bc00 [ 642.228706][ T37] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 642.237752][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.244462][ T37] CR2: 0000200001000000 CR3: 00000001526ae000 CR4: 00000000003506f0 [ 642.252479][ T37] Call Trace: [ 642.255815][ T37] [ 642.258747][ T37] xfrm_net_exit+0x2d/0x60 [ 642.263343][ T37] ops_undo_list+0x27b/0x410 [ 642.268115][ T37] cleanup_net+0x2de/0x4d0 [ 642.272731][ T37] process_scheduled_works+0x4cb/0x9d0 [ 642.278234][ T37] worker_thread+0x582/0x770 [ 642.282888][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 642.288734][ T37] ? schedule+0x5f/0xd0 [ 642.292985][ T37] kthread+0x486/0x510 [ 642.297056][ T37] ? finish_task_switch+0xad/0x2b0 [ 642.302257][ T37] ? __pfx_worker_thread+0x10/0x10 [ 642.307389][ T37] ? __pfx_kthread+0x10/0x10 [ 642.312059][ T37] ret_from_fork+0xda/0x150 [ 642.316567][ T37] ? __pfx_kthread+0x10/0x10 [ 642.321216][ T37] ret_from_fork_asm+0x1a/0x30 [ 642.326094][ T37] [ 642.329113][ T37] ---[ end trace 0000000000000000 ]--- [ 642.335441][ T37] ------------[ cut here ]------------ [ 642.340912][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3291 xfrm_state_fini+0x1bc/0x1f0 [ 642.350417][ T37] Modules linked in: [ 642.354394][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 642.368378][ T37] Tainted: [W]=WARN [ 642.372215][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.382298][ T37] Workqueue: netns cleanup_net [ 642.387147][ T37] RIP: 0010:xfrm_state_fini+0x1bc/0x1f0 [ 642.392713][ T37] Code: 5e c1 fc 4d 8b 3e e9 06 ff ff ff e8 4e 4f a7 fc 90 0f 0b 90 4c 89 f7 e8 b2 5e c1 fc 4d 8b 3e e9 24 ff ff ff e8 35 4f a7 fc 90 <0f> 0b 90 4c 89 f7 e8 99 5e c1 fc 4d 8b 3e e9 42 ff ff ff e8 1c 4f [ 642.412337][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 642.418440][ T37] RAX: ffffffff84b054eb RBX: ffff88810407bc00 RCX: ffff8881008c1040 [ 642.426461][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811bb41dc0 [ 642.434466][ T37] RBP: 0000000000000040 R08: 000188810407ca5f R09: 0000000000000000 [ 642.442687][ T37] R10: ffff88811bb41300 R11: 000188811bb4113f R12: ffffffff86c82480 [ 642.450650][ T37] R13: ffff88810407bc28 R14: ffff88810407ca58 R15: ffff88811bb41dc0 [ 642.458666][ T37] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 642.467690][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.474409][ T37] CR2: 0000200001000000 CR3: 00000001526ae000 CR4: 00000000003506f0 [ 642.482446][ T37] Call Trace: [ 642.485731][ T37] [ 642.488670][ T37] xfrm_net_exit+0x2d/0x60 [ 642.493106][ T37] ops_undo_list+0x27b/0x410 [ 642.497746][ T37] cleanup_net+0x2de/0x4d0 [ 642.502189][ T37] process_scheduled_works+0x4cb/0x9d0 [ 642.507730][ T37] worker_thread+0x582/0x770 [ 642.512479][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 642.518310][ T37] ? schedule+0x5f/0xd0 [ 642.522524][ T37] kthread+0x486/0x510 [ 642.526604][ T37] ? finish_task_switch+0xad/0x2b0 [ 642.531787][ T37] ? __pfx_worker_thread+0x10/0x10 [ 642.536907][ T37] ? __pfx_kthread+0x10/0x10 [ 642.541524][ T37] ret_from_fork+0xda/0x150 [ 642.546119][ T37] ? __pfx_kthread+0x10/0x10 [ 642.550743][ T37] ret_from_fork_asm+0x1a/0x30 [ 642.555593][ T37] [ 642.558607][ T37] ---[ end trace 0000000000000000 ]--- [ 642.564823][ T37] ------------[ cut here ]------------ [ 642.570275][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3293 xfrm_state_fini+0x1d5/0x1f0 [ 642.579777][ T37] Modules linked in: [ 642.583732][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 642.597851][ T37] Tainted: [W]=WARN [ 642.601705][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.611784][ T37] Workqueue: netns cleanup_net [ 642.616630][ T37] RIP: 0010:xfrm_state_fini+0x1d5/0x1f0 [ 642.622265][ T37] Code: 5e c1 fc 4d 8b 3e e9 24 ff ff ff e8 35 4f a7 fc 90 0f 0b 90 4c 89 f7 e8 99 5e c1 fc 4d 8b 3e e9 42 ff ff ff e8 1c 4f a7 fc 90 <0f> 0b 90 4c 89 f7 e8 80 5e c1 fc 4d 8b 3e e9 60 ff ff ff 0f 1f 84 [ 642.641936][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 642.648075][ T37] RAX: ffffffff84b05504 RBX: ffff88810407bc00 RCX: ffff8881008c1040 [ 642.656112][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811bb41580 [ 642.664187][ T37] RBP: 0000000000000040 R08: 000188810407ca57 R09: 0000000000000000 [ 642.672267][ T37] R10: ffff88811bb41100 R11: 000188811bb41dff R12: ffffffff86c82480 [ 642.680231][ T37] R13: ffff88810407bc28 R14: ffff88810407ca50 R15: ffff88811bb41580 [ 642.688277][ T37] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 642.697232][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.703859][ T37] CR2: 0000200001000000 CR3: 00000001526ae000 CR4: 00000000003506f0 [ 642.711914][ T37] Call Trace: [ 642.715198][ T37] [ 642.718141][ T37] xfrm_net_exit+0x2d/0x60 [ 642.722670][ T37] ops_undo_list+0x27b/0x410 [ 642.727326][ T37] cleanup_net+0x2de/0x4d0 [ 642.731817][ T37] process_scheduled_works+0x4cb/0x9d0 [ 642.737361][ T37] worker_thread+0x582/0x770 [ 642.741983][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 642.747798][ T37] ? schedule+0x5f/0xd0 [ 642.752067][ T37] kthread+0x486/0x510 [ 642.756141][ T37] ? finish_task_switch+0xad/0x2b0 [ 642.761329][ T37] ? __pfx_worker_thread+0x10/0x10 [ 642.766540][ T37] ? __pfx_kthread+0x10/0x10 [ 642.771206][ T37] ret_from_fork+0xda/0x150 [ 642.775775][ T37] ? __pfx_kthread+0x10/0x10 [ 642.780387][ T37] ret_from_fork_asm+0x1a/0x30 [ 642.785198][ T37] [ 642.788216][ T37] ---[ end trace 0000000000000000 ]--- [ 642.804830][T31916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.813375][T31916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.822495][T31916] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 642.831083][T31916] SELinux: failed to load policy [ 642.865353][T31540] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 642.875021][T31540] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 642.883967][T31540] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 642.893568][T31540] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 642.929071][T31540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.943547][T31540] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.953012][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.960117][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.980088][T31540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.990657][T31540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.005045][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.012205][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.045302][T31540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.073864][T31989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.090072][T31540] veth0_vlan: entered promiscuous mode [ 643.098936][T31540] veth1_vlan: entered promiscuous mode [ 643.114036][T31540] veth0_macvtap: entered promiscuous mode [ 643.121174][T31540] veth1_macvtap: entered promiscuous mode [ 643.131603][T31540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.142789][T31540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.152766][T31540] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.161575][T31540] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.170371][T31540] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.179135][T31540] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.195210][T32008] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 643.247130][T32011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8177'. [ 643.272597][T32015] syz!: rxe_newlink: already configured on team_slave_0 [ 643.275462][T32021] syzkaller1: entered promiscuous mode [ 643.285152][T32021] syzkaller1: entered allmulticast mode [ 643.293630][T32015] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 643.295120][T32021] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8179'. [ 643.317261][T32024] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8177'. [ 643.328757][T32026] program syz.4.8180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.339556][T32024] 1ªX¹¦À: renamed from 60ªX¹¦À [ 643.345934][T32024] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 643.375269][T32030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.384001][T32030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.392849][T32030] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 643.401368][T32030] SELinux: failed to load policy [ 643.742916][T32054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.880602][T32056] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 643.917952][T32058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.933654][T32060] loop5: detected capacity change from 0 to 1024 [ 643.940397][T32060] ext3: Bad value for 'errors' [ 644.014032][T32068] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 644.046625][T32070] program syz.5.8193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.046631][T32011] ================================================================== [ 644.046667][T32011] BUG: KCSAN: data-race in sg_open / sg_open [ 644.069907][T32011] [ 644.072240][T32011] read-write to 0xffff8881025b44e8 of 4 bytes by task 32070 on cpu 1: [ 644.080409][T32011] sg_open+0xb8e/0xc70 [ 644.084492][T32011] chrdev_open+0x2eb/0x3a0 [ 644.088920][T32011] do_dentry_open+0x646/0xa20 [ 644.093606][T32011] vfs_open+0x37/0x1e0 [ 644.097682][T32011] path_openat+0x1c5e/0x2170 [ 644.102292][T32011] do_filp_open+0x109/0x230 [ 644.106803][T32011] do_sys_openat2+0xa6/0x110 [ 644.111399][T32011] __x64_sys_openat+0xf2/0x120 [ 644.116176][T32011] x64_sys_call+0x1af/0x2fb0 [ 644.120777][T32011] do_syscall_64+0xd2/0x200 [ 644.125286][T32011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.131208][T32011] [ 644.133528][T32011] read to 0xffff8881025b44e8 of 4 bytes by task 32011 on cpu 0: [ 644.141156][T32011] sg_open+0x550/0xc70 [ 644.145236][T32011] chrdev_open+0x2eb/0x3a0 [ 644.149659][T32011] do_dentry_open+0x646/0xa20 [ 644.154342][T32011] vfs_open+0x37/0x1e0 [ 644.158415][T32011] path_openat+0x1c5e/0x2170 [ 644.163013][T32011] do_filp_open+0x109/0x230 [ 644.167521][T32011] do_sys_openat2+0xa6/0x110 [ 644.172117][T32011] __x64_sys_openat+0xf2/0x120 [ 644.176884][T32011] x64_sys_call+0x1af/0x2fb0 [ 644.181488][T32011] do_syscall_64+0xd2/0x200 [ 644.186017][T32011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.191919][T32011] [ 644.194242][T32011] value changed: 0x00000001 -> 0x00000002 [ 644.199960][T32011] [ 644.202315][T32011] Reported by Kernel Concurrency Sanitizer on: [ 644.208472][T32011] CPU: 0 UID: 0 PID: 32011 Comm: syz.2.8177 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 644.222552][T32011] Tainted: [W]=WARN [ 644.226360][T32011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.236430][T32011] ================================================================== [ 644.452653][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 644.452670][ T29] audit: type=1326 audit(1753472482.490:47830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4898a5967 code=0x7ffc0000 [ 644.482616][ T29] audit: type=1326 audit(1753472482.490:47831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd48984ab89 code=0x7ffc0000 [ 644.506108][ T29] audit: type=1326 audit(1753472482.490:47832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 644.529633][ T29] audit: type=1326 audit(1753472482.490:47833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4898a5967 code=0x7ffc0000 [ 644.553178][ T29] audit: type=1326 audit(1753472482.490:47834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd48984ab89 code=0x7ffc0000 [ 644.576683][ T29] audit: type=1326 audit(1753472482.490:47835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 644.600149][ T29] audit: type=1326 audit(1753472482.490:47836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4898a5967 code=0x7ffc0000 [ 644.623718][ T29] audit: type=1326 audit(1753472482.490:47837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd48984ab89 code=0x7ffc0000 [ 644.647224][ T29] audit: type=1326 audit(1753472482.490:47838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd4898ae9a9 code=0x7ffc0000 [ 644.670734][ T29] audit: type=1326 audit(1753472482.520:47839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32066 comm="syz.0.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd4898a5967 code=0x7ffc0000 [ 647.991492][ T1036] page_pool_release_retry() stalled pool shutdown: id 226, 1 inflight 60 sec