last executing test programs: 8m36.335423579s ago: executing program 1 (id=51): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 8m36.307665069s ago: executing program 1 (id=53): r0 = socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=r2, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000000000)) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) dup2(r0, r1) timerfd_settime(r7, 0x0, &(0x7f00000003c0), 0x0) io_submit(r8, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r7}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r6, 0x0, 0x0, 0xffffffffffffffff}]) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) 8m35.773469303s ago: executing program 1 (id=68): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') fcntl$setstatus(r6, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b80)=@delqdisc={0x388, 0x25, 0x202, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xb}, {0x9, 0xf}, {0x256f04221f2de942, 0x4}}, [@TCA_STAB={0x3b, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0x101, 0x4, 0x0, 0x2, 0xff, 0x1}}, {0x6, 0x2, [0x9026]}}, {{0x1c, 0x1, {0x4, 0x0, 0x2, 0x6, 0x0, 0x5707, 0x6, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x5, 0x5, 0x4, 0x2, 0x10, 0x800, 0x2}}, {0x8, 0x2, [0x1000, 0xfff7]}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x228, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7ffd, 0xffffffb1, 0x8, 0x1f, 0x1, 0x6, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "6b3d06f014170f1909cf9d48e47e931048cd98114ce2d5c104f24138bac1d334a528ee311a7458487f39e6c3618cb83eef7bfb508335ffdd9f7c56d6f32fb13c9856987a84ab6451375c873f802500b1630710f275c023b8bcd554be588cc66be55af4607a8c280ebc7cbbcc94c26ceef16cf04777a9f416087a82286e69b56c030ac5522331b3963f85ba4906cb07c15543714e382c14f6da6b0809c0db1465533592cd089de7ef2d96a7b60c0ce06db70c0d9b41cef9348479eba9efc8f6cd35fbdacc18db610f6f5bed24f70f2e59195579726cb47ed01fdb34490536bae1340b43030b1869d3a025c9f058e1b2e3224da2bafd0e7c8cc9bc62ed6a0df0ec"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xfe, 0xd23a, 0x7, 0x1, 0x2, 0x8, 0x5}}, {0xe, 0x2, [0xb, 0xafb3, 0x2, 0x3, 0x1ff]}}, {{0x1c, 0x1, {0x7, 0x9, 0x0, 0x10001, 0x2, 0x410d7242, 0x3, 0x6}}, {0x10, 0x2, [0x8, 0x77, 0xc, 0x400, 0x3, 0x7, 0x3, 0x5, 0xfffd]}}, {{0x1c, 0x1, {0x7, 0x8, 0x800, 0xdc8, 0x1, 0x8, 0x38000000, 0x7}}, {0x12, 0x2, [0x6, 0x6, 0x9, 0xe, 0x6, 0x9d95, 0x9]}}, {{0x1c, 0x1, {0x5, 0x8, 0x8, 0x5, 0x1, 0x6, 0xaa6, 0x2}}, {0x8, 0x2, [0x8001, 0xe]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x388}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 8m35.720508294s ago: executing program 1 (id=69): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) r2 = socket(0x11, 0xa, 0x5) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) lseek(r3, 0x7ff9, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r2, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10) 8m35.677453954s ago: executing program 1 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='scmi_xfer_end\x00', r2}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r10}, 0x10) getuid() fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) 8m35.581297495s ago: executing program 1 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000']) 8m20.516926707s ago: executing program 32 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000']) 4m22.376969871s ago: executing program 3 (id=4213): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) faccessat2(r0, &(0x7f0000000000)='\x00', 0x2, 0x1100) 4m22.263184131s ago: executing program 3 (id=4214): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f0000000140)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6}]) 4m22.057003153s ago: executing program 3 (id=4216): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r7, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r9 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_io_uring_setup(0x40213e, &(0x7f0000000080)={0x0, 0x81e0, 0x40, 0x4, 0x40000333, 0x0, r9}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/195, 0xc3}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000100)=""/65, 0x41}], 0x3, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) 4m21.654297806s ago: executing program 3 (id=4228): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc28, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x280) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x80, r3}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff00000000}, 0x80, r3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0x6) preadv2(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/218, 0xda}], 0x1, 0x5, 0x2, 0x32) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xffe2, 0xc}, {0x9, 0xfff1}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008015}, 0x45084) close(0xffffffffffffffff) sync() r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000f80)) socket$qrtr(0x2a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@test_dummy_encryption}, {@bsdgroups}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 4m21.437074118s ago: executing program 3 (id=4236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000006c0)='block_rq_remap\x00', r0, 0x0, 0x4}, 0xffffff38) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000500)={[&(0x7f00000003c0)='\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00', &(0x7f0000000240)='9p\x00', &(0x7f00000002c0)='+\x00', &(0x7f0000000440)='{:+{&}&,/\'%%$!\\[@*\x00', &(0x7f00000004c0)='\x94#\x00\n\x04\'18\xed\xfc\xbf\xad\xf7\xfe', &(0x7f0000000680)='sy\x1b\x85}\x1a:?\x06K\xcd|\xf28\x1c\xf7R\xecd4\xba\xb1\xf6\xe7\xd9']}, &(0x7f0000000640)={[&(0x7f0000000540)='rfdno', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='rfdno', &(0x7f0000000600)='*@([\\/-+&],\x00']}, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000080)='./file0/../file0\x00', 0x950009ba) syncfs(r2) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c756e616d653dd0aedec1aa19a7d81d1bf89329217cb058a396eda2ab40a26d93dd083c3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc09700000000000000002c0070607d346eaddeb9b48e56629746ede61170ab15c98a484ae1ef8e025d2132471876ae5ef451b69ffee66de46d727436527f6e3ff69a5913c698900ae2460a00"/175]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c756e616d653dd0aedec1aa19a7d81d1bf89329217cb058a396eda2ab40a26d93dd083c3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc09700000000000000002c0070607d346eaddeb9b48e56629746ede61170ab15c98a484ae1ef8e025d2132471876ae5ef451b69ffee66de46d727436527f6e3ff69a5913c698900ae2460a00"/175]) 4m6.920494936s ago: executing program 33 (id=4236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000006c0)='block_rq_remap\x00', r0, 0x0, 0x4}, 0xffffff38) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000500)={[&(0x7f00000003c0)='\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00', &(0x7f0000000240)='9p\x00', &(0x7f00000002c0)='+\x00', &(0x7f0000000440)='{:+{&}&,/\'%%$!\\[@*\x00', &(0x7f00000004c0)='\x94#\x00\n\x04\'18\xed\xfc\xbf\xad\xf7\xfe', &(0x7f0000000680)='sy\x1b\x85}\x1a:?\x06K\xcd|\xf28\x1c\xf7R\xecd4\xba\xb1\xf6\xe7\xd9']}, &(0x7f0000000640)={[&(0x7f0000000540)='rfdno', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='rfdno', &(0x7f0000000600)='*@([\\/-+&],\x00']}, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000080)='./file0/../file0\x00', 0x950009ba) syncfs(r2) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c756e616d653dd0aedec1aa19a7d81d1bf89329217cb058a396eda2ab40a26d93dd083c3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc09700000000000000002c0070607d346eaddeb9b48e56629746ede61170ab15c98a484ae1ef8e025d2132471876ae5ef451b69ffee66de46d727436527f6e3ff69a5913c698900ae2460a00"/175]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c756e616d653dd0aedec1aa19a7d81d1bf89329217cb058a396eda2ab40a26d93dd083c3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc09700000000000000002c0070607d346eaddeb9b48e56629746ede61170ab15c98a484ae1ef8e025d2132471876ae5ef451b69ffee66de46d727436527f6e3ff69a5913c698900ae2460a00"/175]) 1.869505486s ago: executing program 5 (id=8751): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffe, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 6) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x40000000000020a, 0x0, 0x0) 1.41358013s ago: executing program 0 (id=8758): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r4 = pidfd_getfd(r2, r3, 0x0) readlinkat(r4, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/176, 0xb0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r0, 0x0, 0x0, 0x80800) 1.280599711s ago: executing program 0 (id=8760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000040)={0xfffc, 0x200, '@\x00V', 0x1, 0xf}) 1.280182381s ago: executing program 0 (id=8761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.261324901s ago: executing program 0 (id=8762): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001940)='kmem_cache_free\x00', r7}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x5, 0x1000, 0x2, @mcast1, @mcast2, 0x20, 0x700, 0x2, 0x9}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18) r11 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r11, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) getsockname$packet(r8, 0x0, 0x0) pause() r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES32=r6, @ANYRES32=r10], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x4}, 0x3f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r12, 0x0, 0x4}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000e0001006e657464657673696d0000000f0002006e657464657673690700"/46], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r0) 1.003037853s ago: executing program 5 (id=8770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) 1.002726043s ago: executing program 5 (id=8771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x80000, 0x8}) (fail_nth: 3) 1.002455103s ago: executing program 5 (id=8772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000090085000000820000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 991.584273ms ago: executing program 5 (id=8773): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0x4}, 0x100203, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) prlimit64(0x0, 0xb, &(0x7f0000000000)={0x0, 0x200000000}, 0x0) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20008010) 827.999424ms ago: executing program 4 (id=8776): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) 814.729294ms ago: executing program 4 (id=8777): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) personality(0x400000b) 801.077744ms ago: executing program 4 (id=8778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) personality(0x400000b) 784.695464ms ago: executing program 4 (id=8779): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000040)={0xfffc, 0x200, '@\x00V', 0x1, 0xf}) 773.369425ms ago: executing program 4 (id=8780): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000016c0)=""/90, 0xe4, 0x5a, 0x0, 0x7}, 0x28) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100) inotify_rm_watch(0xffffffffffffffff, r1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) dup2(r0, r2) 719.149435ms ago: executing program 4 (id=8781): shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2c, 0x800, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) lsm_get_self_attr(0x69, &(0x7f0000000180)={0x0, 0x0, 0x73, 0x53, ""/83}, &(0x7f0000000340)=0x73, 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) 614.077856ms ago: executing program 2 (id=8782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) 584.717426ms ago: executing program 2 (id=8783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 548.730606ms ago: executing program 2 (id=8784): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 437.288177ms ago: executing program 0 (id=8785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 436.672917ms ago: executing program 2 (id=8786): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f0000003680)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89407876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481dd4dd8fcd7fb317d648cb34fb5315b799abc82129eeaa9a9d0ded2fc8e7498eb71f3283981d7ca33378db3e1328dc956eec089d5f91692f4f31b4671ce504430e83ca32080affbb8cf4aeafb76ea329f4674701c7ce8bdae4b33b90ab1e9d09dfff508e559c3077aa92281665ba28367a8e57694c1265f9e4d34ca7d4cf5481a187a923f1dc71cdfa29f8f", @ANYRES64, @ANYRESDEC=r1], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_io_uring_setup(0x14d9, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x4f00, 0x100, 0x4551}}) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000000c0)=r3}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r5, &(0x7f0000000340)=""/79, 0x4f) getdents(r5, 0x0, 0x3b) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}, {&(0x7f0000000ac0)="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", 0x1000}], 0x2}, 0x48000) 393.791707ms ago: executing program 6 (id=8787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afa63530db6dd493f28fd98872219ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0db0a0000004413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466ffffffff0000000047778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fdc4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001340)={0x36e4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x13}}}}, [@NL80211_ATTR_NAN_FUNC={0x20fc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x20d8, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x1004, 0x0, "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"}, {0x61, 0x0, "88b49a4dba41b94b1b7b59aa675dbfc374147bf703c51b4a81ddec70d2f5f4e4bfc1106478374e27ac8212ea6206d42cbc035c1d09fdd572b90403fb4309a7fe1f89807c6bf0dd795cbbabe7cbaac4f7b484038590c326d25bf37c27e6"}, {0x67, 0x0, "b60a91c8b3075ac12ccae17faf57ee9062431103852a131901c139d2890dd6d3a07d294a9e76cd06fd7b5e574c8ddb310063bdf1be49b8e3835554f55d1c687b663205d55b88b18a29c27a08668c02479edaad3e8ad1dd39555e12add6664fd0acacd5"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9d39}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xa8}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0x6c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x68, 0xb, "398a0887d67697786a0de90f2e2444963ca72bad88397a51e447b8dc0ce5c8600b79b40de511ac1a27afa5469b787230f21529c9eae6417f5b92fe02b1adee01cecd8d49e30c8fbc3a18296f072875716aa698794e9b84bc657f60f4a13aa75c09cce1f9"}]}, @NL80211_ATTR_NAN_FUNC={0x1538, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2e8, 0xe, 0x0, 0x1, [{0x61, 0x0, "b27de69060d0f7bee1ca4bb2be31f0668ffaf40150f09d3d8137bc79e2b06233f5b0e25da115a5141be83560d9c2d2118fe71b399d323b62295502a1dc6783345142bf8cc0d38f910903b538340876de3bf44879b9c34e840c05260d0b"}, {0x59, 0x0, "8c30f2b7bab04e47149fbc583127e88ea71f7fe54f84c396a626c59233beab759d7af8347f5d16c33562e484d519567258d4a5dd828894518f07bfcd85b36fb2a07599f026b78cffaf6c27705b201d28aa9c102c13"}, {0xb1, 0x0, "25b9dae45416ef3561f368bf301a4809e1c51aece2e40bba096d8158f69ce1735c1f9237112b5642e330c6d1758534a5c8b28fd2302e1aadf4469e49d8b0003ee0120d9d50ed8ba309ceec2302312f82ce67d70931de3aeaed7ddaf593548350b6ba75f90d8e1a7d81cd5c8e1bfa947725c97c0cf7ec64676126a5693aed4328dc00a9d768ac9a7eefa7c3031630b0c3cea74802e3a8304fef03e592163317cf39f641496849ca1c1936ec9922"}, {0x8a, 0x0, "c56083fc31be305675ab6e9800f72312ad278504f72385b2eb25e04c47304f870d3b243777e519d3e1bde7e7a16fb7429682f0bcc2298151b2714c7b18b85e7496cf489f4abcd206b551ed87c9bd3121f7206b9a58b8ba0e541babb38c22693a0f80a8b83f81ddcdee4eff248c49f534cc426c6ce82cda084c74a39c43d5a0b184ccc11ab32c"}, {0xe2, 0x0, "5f9562c90d48cb795bdca3e66e978391918c0d24a972181604fb71b4b6e913d2a878cbfa4197ca1f5ba824d02ffd3587915635fda5bb43c79bd7fd8a108996a7446a9b9f9a3be6b28f66b302e5e30be89be2e563845db2a34aa603f2db5bcd8616ec2c38d104fb7fc9399020e6c1c75d61e6d601295cd1435d4a1a0cb7736ed1defcb5de6db9bb11665ad2d3d66a9193a3f8d9baf6233d0ea03e9455c114147ae2ee2497d2bc5e7de4c337b9a864eac19d1fd5772d21d27639357beccfd5bf777389241f67ab0524d4d03d738cb60499012786166349dfaf13bad79e0993"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1238, 0xd, 0x0, 0x1, [{0xf9, 0x0, "463337b55d2b0412348670cdca4e22b4c5408e095c90e1c632a303a32565f37e628f4d1cdf3236318eccbcd2242d66f424f8edcff94fe0321e3fb2c7fe8dc72e063a5d641d76192d1ab25990152e7aae2a16b2915287f3d16805b2558fddcd6f1ddebb2e50e2ff1cdbea324e2f6c6c15cd3c5afaa12fbcbce9dac2f87021ada02fedafd2defe5dfeb698bb9310db36dab9b4260efadc551be1b19d9076236a605ddacce768458e696556217f5a79b1a876cdbbf9793fa57fd7ccd4da64cd8beaa81f2d3b18c52b452aa6bccbe0d59f06ae34b23b9e3b7b1dd86c58cbb9768a1b40554fb1d969f84249a194abe5c82e0256930093e9"}, {0xfd, 0x0, "4a98c38acee4a6373f898a2e7364f98329d9c2d81df16d2b4c0b971a13ebb3a33eb3644c3fdf76eec1dfbccedc5cdeea027739f5ad93c91e6253d23020bdfa4bfedeca4599014cddb2fb2315fb93be41a8ecd67f35806d87182a536b753dba64a78e5c579ae69756f0baddc62b90143ea664d95b9fe8224a9636d782c05eb13eb33f96fbe6c7f17023c99224c14e48f6ff6b6b8937b29ba0a266bbf2d006768193fc2bdafa9182dd84550b3064e77216af424bb9ea06385b65dd71ffedd3d301f5bcba412c400e2ad0a1dd85284161bd2f58371770d690ac110996e64b413156de8ed0db55693f3f5499fd6598dc04af6d82288abae7665b62"}, {0x1004, 0x0, "3efe7f0164a0da945c2867d6fe7acbc89473b440bb01996f223a8c019e9ea855521e1bfc95215601b5a5e4f47081dcb10b881a6bd436c27815f1db91b57b4550e5030a6a223f1a82630792ef09d7ca22e581616127aaf4adbb247cbc8f3bc74d6d10f646e590747bb3a53d7556577da9c32b3272dc7f0c5f2725604c4abf8c5d3317e1cbc9ccda01786f6775690eb34e2b6e10d86cfdef0ac0de3f1c197257df8dfbbdfdf833b73decf905bfdcd420ebb8d011a92aa58924a7346fd7ddff01cdec256b3e20192808e4f389b5bf701bc8be054f25282656fa7d692472d09a41111b23b59f79e5b79fc4407ef007f4e402daedeaef6906b60e1d654d4f765281798ea13fe4a592ea18c23243cb4cb3b19f2d607dd97b164950621822e116a3f9a294694d180e47eb428e5075a5c6c9e4d3fc0feafbd13527043668e0822feb9fb51e6354d3e25e5203ce64a2b4faadbd8ff179aeef3350427016649a7b272e74631c2f1925ebf68e9ae4fbad06ea029fc1d196e9b91e0382e1a7ffb1d4906943314d02de96be1b5e824ee9051c1b271b6b48358e1ac17760a320dac23aa689ccae9a294cdb1d06fe3ce873da63321505162136e8947c2eb325c50423582b5212db505f5e6d01c58c207b97ef4d9d088f160b9289449abf014a537a2a61387fcfcd067144e6200eee486aa032b69792e88a071a8e2128b197534066a739e3d8fa5b836ee915c9639839eca2ba597fdb3af38f3de48b9d90982374270fb4ca398784a0231d371aa757577a32b900663ee45a5fc3c2852f7e1d7ceea0590c8b120b1529da9dbad7269e66438a01dde8c7c8a3648ce67d5e9d46b85e306bc7fc3584fc8d717b13900de59f997d3a98f5f2f709d7d070d5278465b1d470fc4ca59258f2dfec937fda750537868bf322556c1a4eba686eb3cd81947373297bba986078016e53a0b15adbf9c4aab2cacb1170acb12ffc8a748512b3ba61642f699efa637226187ccd25f1aa67cb027a7aafa9fcd60682d13bed0d24b346dbe43a0c2a65c22eec5e531174c079b9baf09470ebcefa3b174ab1e31019af27aabd4c28ee727685c5188654e0ef844c4526830e04c3b22b941713bb52883f6e5c79985881a82618fb7c04a4c6997d16feddce25e602458af048455e71a1d4c09ea48a9aa74f007d15633c6ae71ee1bd6d9161007014e60214ca07c18d35bccc91da783069415745a3708b0f49b608eaa1fcb87badd4b25d0b4bf629da5d48b7bb5e513cee958c7225e97e1d13c6f4024a16c31589665402c9e764b402793ba0670e230df42239b10e3b51121f8462d816dd766856ef6a7b1d42d3019c4b0f28452ef1fa85d4c8e14922766b14ac97b50e6b196c3ebb340910d19bd0a7d351677dd60ae3f2da49d8e51990574b8f729d4bf8ff612896aef8bd0720ca7217e0547cf4971e3c99692388f368b8e24d0122020def612e0493ad6d5995b40806b489709d52d621df14128a0218d8477304d75da917a0e898b4b9a23f16c3a611ecf84160154ef4b409b7cfd669544cba0c74f3553b1c8332571a0b368bee023b5e4864a77439facc9854ec2a936b59c6225e87eb59536a5cd094292f0e1ba86c2a2ffa56c6f2023275d67a43669e8031d87a70bcc58f2049f55035aa19fd3b90b5955c57a2d6219f8f2fa084bf8b5369bdc5a244f6ead59886c5978b9aee58d7e39343dedaabed527ddbf730d3e0e73be48d63de24e4f28eac99511f49fad0c68108b25b10acc5309b209c90ac10d6df5adc5b9f2c77fe4094b14698e612ecbf039c18069060da290401996e61fbc436c2931e480608caedc966adfd797a6c9cae66526cabe9c4a12bab2a3b7e875e6fd1b703ea4cfbd2f7e596e4c6ef25fdfab9dfbb97b54106aac7a118f5518a841fcba6e8d5d0001deef0200181b9796efbe1b6323f7e2a8ef9b71d33928a6cdd8687a36fe8b678fdadf72c6c00e5e6f399347fd81f43dbfc9175cb112dd3d4b42683280cc87badf448bc661ec0a1d74054f1771ffa566dde20c60ab37115001c1d4d2326bd5813eb07a2a4f9a7454dc10f354fa01a75602b2cdd2a35239be3a561c2858ffc59887f9fb08826ed59ad3e2ff2a0ecb41a137a7e01d182d03c5dc1c5c8cc1f76709a12193265080144ae8a117fc1ea7eac219938f2a3ed97ab05974e971a798e6ee65044a522446c70fe47d45e08c110428bdd92ce128823688d270351bdd16cd8e9a5f8ab3c7dc50c265ab0d74f8e0ece3fd61bd0caaf741d3bb5709805d8bbf9ddd7b4a385a938c0c3a26573479b80f40c9a861178146a399bc6701ee3c421a1ad2f22a72577c8479272920ff841c1bed75711bf822f85d82c59f8709228efbf2b74b14a170b27f179e5a11ec48821177061fe008c3c8815ed914cc9e5cc5b17da9f363bd2403f5f173b7b65b2ca9bf653df835c8ece8d129f14e46dbd3af96edfbdfcc10759433f4450cf90bcdc56ee5cbaf5752bcc8c8cdadf16aa635cb1433b5c6fce367c9bcd77ed775a2424c24c9239a249d2eac78d971848d72106e16982ba20fd8a2f878604dd7ae2dbf854395b39ce1f9c52184d58392b61c2e6e5f5341a892b2031d21e3954a90c0418e2199d1a401947cc29d6e205b58c32eeba86cd7f6acd1663958609fbb90cb00b681cd307dcb63df30a3384f965f8928fa189bef963edbf768de5a53875d67050700b654e5bcdd161f64fa602444a13e28dbd91ce3da8a3481fabd62712d82c2ade31c5d63b53630d5cb27599b148079a5822345e511f020df60183e97303fc244a85a6d457536e64cbab3d9dc31ed59a8013f300d7b0c98eb3730638496345dd7ed56b7032c8d2342d18f46bd3f89d855804e3a4775b94eb6d64cc2ed18dc95db31e225c227981a8919be9943a9a80e17cd5379adc47437a2f154ea74e98773c7b4295af974a33adcb6b2b659f0072d751dcb9fbe956468aacc68b882ccc4d7601f86fb31b5baef06d2fe0fe1c762c7a897c2cb74da6214911d861f3857777b19bdc1f05720ebaae0f9b1d5892d3863e7a4f6c17adfefaa964097a58586dbaa2d22d6651c87575e3de1a0ca98a32a7dc285ab05efa974b976d1caa56d993d822b1cd93ac9e085718665b6046bf18b0e823bb097a7ac0fc9bcd2054da0df8e3878e65bdbb70ca336c4692c8f30757c71dc6f8b5c87b7cca37ac5e1dd0adbb609759576b05c059df4e67e0ccfea9db8b359daa491cbb4ad4fa26a6fe95899881bf9cc865e1a503981c005bf619f8b65925758dbd5898f5bac008a9d764faec641bd8cfb4bbf76a15d08dcf2932140bd271aa5bff92709ea377ec10bcfbf65bdcc8c6ad97ae701522d21686a5a1328f29ffba3d55de8152d849bee51d5759419aeec71bb6cf002090e9d6a9f0a9caa77e591b1d963f02fc3d42341479983b6ecbda78d5893a37495113f7bd42a6ba1a54a0980647f07de9a74801186eb6b68e4a8af6c674f1774264746d4f225fe30c8293a87e4cfe7ab56bed9f70561a5370231904f7c3e630b7b407cf5119b9d39f8785104d5f20a83041c051ecca3dca78a737282b4710964cddc0865260621ac19eed54ea26a9ad64a2fef93d08dfd6d60569666381846f1f5731ac9b40afdd9033dae2d127b700a7108e1e8444691cf4dba4ab1b6215ab065a856c45479a83d087e52fcccf8c6bc0f9c943930772965ae8514615cc325a43d3d08fe17b8ff394e134cca9520e0a05009036e2b5772ffceddd1ddc9a775803fa6ae5a87a57f2d92317c4ffb59216449ac0fe24503e4141e3f99bb0cd2d8a36aa08ae5f791898ad461db631d173917dd3fdda82456e730891559807ba634b2bd91578e2178b2de209d306227dc197988b764dcf43a8d75abd1d6fc884bf0c35637b89bcc9e9edd9ae9e68700e70e52b6119104aaa71278e4259b2779e27961e1320db5e95546f7255d091d98941a8e1e34bdc30a83af5f3e34fbae897c5b1057c09595a84c8f786be292570ddfb456bba245101764da7c118c23f9f8d988233145720e7784cc1e412a19c60e3dd92753d06e38a15f456e367e03d9bd190e64a0e60aa1092b14e229086fb9032887c2f3ef9778e76042875537dfd328af812a22201eb2dfcad2d8821626bdb34326d12c40213bd0d744456f5fbe679baadfc2c14278f2857654a14b28e559b423ecc2ead97186a5b707475750ccb4de04288b44fea837f2478fe9c074b92ede63bb5247598fa953970cdc8d1d1efbcf17ee22782621f3e790d4f55b4d83b050786bc4977988f02550457b9b32674f2ab45ba363f58d652f1648c7b2eda60fa671b103d6715384a154ce3bafc4b9606ca01830c55519aff908c4778868bce07e6117b1cf31c79b074d7381ba0c220e8560eb3f9728a766bbb4aed2f46280f9ebf36c8c3f46543eb2442c4681c3bcde370792a7036c45844ec30b6f4d1bbcb63447ff48849079eb2ef6987548cf7e97c15a1a7d460ea95b83d53955c4f354f24e98b9f22314186309619a2092dcd7dcdf0e039c79830475a579045cc3c25c8b605266df6f558bb969beec03365f9a421cd9d81a0ff3d7894fa4e0455aa42b51e5cea47894486cd38f75374eb7924272c653e3eaf8e5a4074ed2b4af0df95d0a54e08c27ce88086707cbb4f334f5089093392bc675226f7091beeb19dd76a5845653cc28d3419db1cc1646c1dd1c7e21b5db346ea53dff74fd6422eed8e026e14c8619a0f82a321dea767e70596f55352c7f346de987cd9429961b1e7b908332f593b3a151383d521dce2d82f89f9a0adc55654dce3cfc4d94094b51a39ae145625185a0dbb13f5017fe22399448ca46229f5847192a362237be7f0467eb167c6785a0d61f9b2ec0c05e514ad1e8ed4dcbc6cbfb37a5228fe7d58fdb5aaca2d61aa825677cd7bba5d4fad74acac79c09a46eb707b56a0684d48e91050b96189d6a94acdc09977cbef9823c358d3a77440166e8d6a8a30b3c9e624dc964de4005c5fd35002b1a2174de9328240ecc50f8b524b34d7a477a8ded6c7cf01c1a4ebcc4700c06afe6b9152798f6327a9a2b83887edf11278b799ff94c001746864b5c85612d7bb824d7531c0a30a00be7dbf5f93aa891c71a2e19aebf7bc9bded2fb5bd9833cbe76277e2e46f01b650e2efade751371796de9d5c686695e060aeaf407c9d694bcf11b1ad925244eb165d0b4de58a925b05f5612868ec65aa92512948a74a412778d0b53d6fbb30290089f9abdd52c5480ec701da757f2155bd62d2c9412852fb319bd3d4c4142c11af077ae9edbd4f38c3b26c0a68e05a2466877dd05193a74ba83f55358b7cf3e9c47a2de9e78501f2dab2f2f09422d7f128d22cb5ecbb591beab11614ae2892d0963cbb2f13d989ae833f9fc6fde2efebf65b47b14b1bf412a2f600e44cc96fa35fb65c6b96ac9a0bfa777ff8ba17ee50d695fc01423cf76359945f0905209ab7b9890911b0695c26516c2c2625d0a93ea968f230e685527719cf8135e553a2a0ceb67db2fee96ea8fe56e309a1cf88ef2d06673601b38a1a5934805972bf3862fceed0551ba10c0e79ce96bf01c5411ddb4d3e47d40f2b8a8548034baed75cbf09f79655b7dbb83aaf4664eed38ac9bbc993ccef3f80f416703c191f9892f229f5576dbf2ea67611283de967de1f65cfac804ced3b736e2ae9f30283f88b19fe6d20cda06fa9eac065ee619ce3fa715bc4eae6956f985b218df973c34ef57db9da162fe88ca8b690b11d310dea2e03ed8d3912d5c74930f6864ed574c1d53daaa38264ec100223b98"}, {0x31, 0x0, "dde7b496843c6f0437893a37726697ae65d6b8b5de9fd783b03901664d0ed7b52fa0f96099edf0ee579874072e"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xac}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}]}]}, 0x36e4}, 0x1, 0x0, 0x0, 0x10}, 0x48008) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x40, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) writev(r7, &(0x7f0000000940)=[{&(0x7f0000002340)='E', 0x1}], 0x1) r8 = eventfd2(0x4, 0x80000) write$eventfd(r8, &(0x7f0000000340)=0x3, 0x8) writev(r7, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @broadcast, r6}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x7, 0x1, 0x0, 0x4}, {0x5, 0x9a, 0x9, 0x50}, {0x2, 0x6, 0x8}, {0x2, 0x6, 0x0, 0x7}, {0x0, 0x8, 0x7f, 0x7}, {0x100, 0xd, 0x9, 0x7}, {0x8980, 0xa, 0x1}]}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 393.231247ms ago: executing program 0 (id=8788): gettid() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x3, 0x9) fallocate(r1, 0x2, 0x1, 0x2000000000000) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x9d}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc810) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 314.126498ms ago: executing program 2 (id=8789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex_waitv(&(0x7f0000004040)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r7 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x52) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) stat(&(0x7f0000000f80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000e00)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000003480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2000775) 283.284438ms ago: executing program 6 (id=8790): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000040)={0xfffc, 0x200, '@\x00V', 0x1, 0xf}) 262.247598ms ago: executing program 2 (id=8791): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES32=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000002080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x4e24, 0x1000000, @loopback, 0x7}, 0x1c) mount_setattr(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)={0x10, 0x70, 0x100000}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x800000000006}, 0x18) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfdffffff, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1184c, 0x9, 0x1}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000440)='bcache_read\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000000000)=0x10000) r9 = io_uring_setup(0x7d98, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x1, 0x8105}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100080000000000000010bfb401020301090212000100000000090400000053d90b00f4e86607c0c1065b14b25f4c72594114418cdaf9a2db689e2e40be8c18bed4def3581730f0d33f130d90761e3a0cdccb99ea27257b4d8ade18259eb93126facb2bb4d6348d8a43f15b75777489f2a7fe96662e209e650b2b63412e681440599c6e99"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100), 0x800) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x200000100, 0x2, 0x1, 0x0, 0x4, 0x4, 0x6, 0xfffff80000000000, 0x4, 0x8, 0x4c, 0x3, 0x8000000000000001, 0x1020000000, 0x6, 0x5, 0x40, 0x4a972acf, 0x2, 0x400, 0x8, 0x3, 0x2, 0xff, 0x6, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_uring_enter(r9, 0xa21, 0x4b61, 0x10, &(0x7f0000000380)={[0x9]}, 0x8) 261.464038ms ago: executing program 6 (id=8792): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "c5d17ab2366d1c38692f860cb2092e818a812064fc001928557831d316ec23ae6b8383ca4fb704dcaac14c8c5e70e353d2890e2d60d08e31fc0de3f8982ad65e", 0x12}, 0x48, 0xfffffffffffffffd) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x4, 0x1}, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) fstatfs(r4, &(0x7f00000003c0)=""/65) syz_emit_ethernet(0xcc, &(0x7f00000001c0)={@link_local, @random="50a241d5cde0", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "fbb2ea", 0xffea, 0x33, 0xff, @rand_addr=' \x01\x00', @mcast2}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x29ab, 0xd480, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 153.990729ms ago: executing program 6 (id=8793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) 152.918499ms ago: executing program 5 (id=8794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)={0xa0, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x84, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0xa0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0x42, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000b2f6db132b9c55ea31b82ba3f6ff796ed9832538457e8e601bc9ad2868313d40fb3281b144a9daaa9c726b3cd803d471e0760cb9579dd868b948b431d843731ae8f771b2c00412fbd7bb2fe7e45408519b843309bb7a95c17ba8e8a170d7c18619a800"/122, @ANYRES64=r3, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000802000021", @ANYRESHEX], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r8) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, 0x0, 0x4000080) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=r4, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) fdatasync(r9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r9, 0x5) 123.186409ms ago: executing program 6 (id=8795): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x2000000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000005bb0"], 0x20000600}}, 0x4001) 0s ago: executing program 6 (id=8796): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') kernel console output (not intermixed with test programs): 37] should_fail_ex+0x265/0x280 [ 508.083528][T28037] should_failslab+0x8c/0xb0 [ 508.083562][T28037] kmem_cache_alloc_noprof+0x50/0x480 [ 508.083663][T28037] ? audit_log_start+0x342/0x720 [ 508.083686][T28037] audit_log_start+0x342/0x720 [ 508.083753][T28037] ? kstrtouint+0x76/0xc0 [ 508.083833][T28037] audit_seccomp+0x48/0x100 [ 508.083863][T28037] ? __seccomp_filter+0x82d/0x1250 [ 508.083948][T28037] __seccomp_filter+0x83e/0x1250 [ 508.083988][T28037] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 508.084083][T28037] ? vfs_write+0x7e8/0x960 [ 508.084118][T28037] __secure_computing+0x82/0x150 [ 508.084150][T28037] syscall_trace_enter+0xcf/0x1e0 [ 508.084215][T28037] do_syscall_64+0xac/0x200 [ 508.084240][T28037] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 508.084272][T28037] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 508.084310][T28037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.084374][T28037] RIP: 0033:0x7f79f66ef6c9 [ 508.084395][T28037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.084416][T28037] RSP: 002b:00007f79f514f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 508.084441][T28037] RAX: ffffffffffffffda RBX: 00007f79f6945fa0 RCX: 00007f79f66ef6c9 [ 508.084456][T28037] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 508.084502][T28037] RBP: 00007f79f514f090 R08: 0000000000000800 R09: 0000000000000000 [ 508.084517][T28037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.084532][T28037] R13: 00007f79f6946038 R14: 00007f79f6945fa0 R15: 00007fff5dcb1e48 [ 508.084552][T28037] [ 508.859017][T28061] rdma_op ffff888106d78580 conn xmit_rdma 0000000000000000 [ 509.071255][T28064] ip6gre3: entered allmulticast mode [ 509.188086][T28065] netlink: 'syz.4.8192': attribute type 1 has an invalid length. [ 509.772127][T28065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.784338][T28070] bond2 (unregistering): Released all slaves [ 509.894038][T28090] loop4: detected capacity change from 0 to 164 [ 509.912318][T28088] bridge0: entered promiscuous mode [ 509.919136][T28088] bridge0: port 3(macvtap1) entered blocking state [ 509.925724][T28088] bridge0: port 3(macvtap1) entered disabled state [ 509.985580][T28088] macvtap1: entered allmulticast mode [ 509.991028][T28088] bridge0: entered allmulticast mode [ 510.028993][T28088] macvtap1: left allmulticast mode [ 510.034174][T28088] bridge0: left allmulticast mode [ 510.049917][T28088] bridge0: left promiscuous mode [ 510.060088][T28086] lo speed is unknown, defaulting to 1000 [ 510.139890][T28100] loop5: detected capacity change from 0 to 128 [ 510.167838][T28100] FAT-fs (loop5): bogus number of reserved sectors [ 510.174402][T28100] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 510.183808][T28100] FAT-fs (loop5): Can't find a valid FAT filesystem [ 510.225644][T28107] loop4: detected capacity change from 0 to 128 [ 510.269054][T28108] C: renamed from team_slave_0 (while UP) [ 510.278076][T28108] __nla_validate_parse: 5 callbacks suppressed [ 510.278089][T28108] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8204'. [ 510.382932][T28114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8210'. [ 510.397756][T28116] syzkaller1: entered promiscuous mode [ 510.403274][T28116] syzkaller1: entered allmulticast mode [ 510.412608][T28114] ip6gre7: entered allmulticast mode [ 510.444402][T28114] bond_slave_1: mtu less than device minimum [ 510.533674][T28122] lo speed is unknown, defaulting to 1000 [ 510.622564][T28121] lo speed is unknown, defaulting to 1000 [ 510.652658][T28128] bridge0: port 1(macvtap1) entered blocking state [ 510.659354][T28128] bridge0: port 1(macvtap1) entered disabled state [ 510.679210][T28128] macvtap1: entered allmulticast mode [ 510.684783][T28128] bridge0: entered allmulticast mode [ 510.691909][T28128] macvtap1: left allmulticast mode [ 510.697167][T28128] bridge0: left allmulticast mode [ 510.793069][T28138] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 511.024103][T28149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8223'. [ 511.026998][T28150] loop5: detected capacity change from 0 to 512 [ 511.039337][T28149] ip6gre6: entered allmulticast mode [ 511.061764][T28149] bond_slave_1: mtu less than device minimum [ 511.070967][T28150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.133577][T21447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.153637][T28155] vlan0: entered allmulticast mode [ 511.158878][T28155] bridge_slave_0: entered allmulticast mode [ 511.335105][T28163] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.367789][T28166] bridge0: entered promiscuous mode [ 511.374443][T28166] bridge0: port 4(macvtap1) entered blocking state [ 511.381299][T28166] bridge0: port 4(macvtap1) entered disabled state [ 511.383713][T28170] netlink: 'syz.2.8231': attribute type 39 has an invalid length. [ 511.416352][T28166] macvtap1: entered allmulticast mode [ 511.421785][T28166] bridge0: entered allmulticast mode [ 511.438558][ T29] kauditd_printk_skb: 817 callbacks suppressed [ 511.438577][ T29] audit: type=1326 audit(2000000558.939:57246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.464839][T28166] macvtap1: left allmulticast mode [ 511.473703][T28166] bridge0: left allmulticast mode [ 511.488734][ T29] audit: type=1326 audit(2000000558.970:57247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.512369][ T29] audit: type=1326 audit(2000000558.970:57248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.536069][ T29] audit: type=1326 audit(2000000558.970:57249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.560165][ T29] audit: type=1326 audit(2000000558.970:57250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.584204][ T29] audit: type=1326 audit(2000000558.970:57251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.607823][ T29] audit: type=1326 audit(2000000558.970:57252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.631599][ T29] audit: type=1326 audit(2000000558.970:57253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.655323][ T29] audit: type=1326 audit(2000000558.970:57254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.679152][ T29] audit: type=1326 audit(2000000558.970:57255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 511.685320][T28179] FAULT_INJECTION: forcing a failure. [ 511.685320][T28179] name failslab, interval 1, probability 0, space 0, times 0 [ 511.715542][T28179] CPU: 1 UID: 0 PID: 28179 Comm: syz.6.8232 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 511.715599][T28179] Tainted: [W]=WARN [ 511.715604][T28179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.715613][T28179] Call Trace: [ 511.715619][T28179] [ 511.715625][T28179] __dump_stack+0x1d/0x30 [ 511.715643][T28179] dump_stack_lvl+0xe8/0x140 [ 511.715666][T28179] dump_stack+0x15/0x1b [ 511.715682][T28179] should_fail_ex+0x265/0x280 [ 511.715697][T28179] should_failslab+0x8c/0xb0 [ 511.715717][T28179] kmem_cache_alloc_noprof+0x50/0x480 [ 511.715811][T28179] ? __inet_hash_connect+0xba2/0x1370 [ 511.715829][T28179] __inet_hash_connect+0xba2/0x1370 [ 511.715848][T28179] inet6_hash_connect+0xaf/0xc0 [ 511.715979][T28179] tcp_v6_connect+0x99f/0xc40 [ 511.716003][T28179] __inet_stream_connect+0x169/0x7d0 [ 511.716064][T28179] ? tcp_sendmsg_fastopen+0x172/0x520 [ 511.716084][T28179] ? should_failslab+0x8c/0xb0 [ 511.716103][T28179] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 511.716191][T28179] tcp_sendmsg_fastopen+0x43a/0x520 [ 511.716252][T28179] tcp_sendmsg_locked+0x26e1/0x2c00 [ 511.716273][T28179] ? putname+0xda/0x100 [ 511.716356][T28179] ? __rcu_read_unlock+0x4f/0x70 [ 511.716374][T28179] ? avc_has_perm_noaudit+0x1b1/0x200 [ 511.716390][T28179] ? avc_has_perm+0xf7/0x180 [ 511.716404][T28179] ? _raw_spin_unlock_bh+0x36/0x40 [ 511.716444][T28179] ? __pfx_tcp_sendmsg+0x10/0x10 [ 511.716464][T28179] tcp_sendmsg+0x2f/0x50 [ 511.716483][T28179] inet6_sendmsg+0x76/0xd0 [ 511.716543][T28179] __sock_sendmsg+0x8b/0x180 [ 511.716561][T28179] __sys_sendto+0x268/0x330 [ 511.716590][T28179] __x64_sys_sendto+0x76/0x90 [ 511.716611][T28179] x64_sys_call+0x2d14/0x3000 [ 511.716712][T28179] do_syscall_64+0xd2/0x200 [ 511.716726][T28179] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 511.716750][T28179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.716766][T28179] RIP: 0033:0x7f2902ccf6c9 [ 511.716845][T28179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.716859][T28179] RSP: 002b:00007f290172f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 511.716875][T28179] RAX: ffffffffffffffda RBX: 00007f2902f25fa0 RCX: 00007f2902ccf6c9 [ 511.716884][T28179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 511.716893][T28179] RBP: 00007f290172f090 R08: 0000200000b63fe4 R09: 000000000000001c [ 511.716902][T28179] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 511.716911][T28179] R13: 00007f2902f26038 R14: 00007f2902f25fa0 R15: 00007ffdefa28168 [ 511.716942][T28179] [ 511.978510][T28166] bridge0: left promiscuous mode [ 511.990161][T28159] lo speed is unknown, defaulting to 1000 [ 512.001435][T28163] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.077058][T28188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8235'. [ 512.086750][T28189] C: renamed from team_slave_0 (while UP) [ 512.092906][T28185] loop4: detected capacity change from 0 to 4096 [ 512.099662][T28185] EXT4-fs: test_dummy_encryption option not supported [ 512.101009][T28189] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8233'. [ 512.118100][T28188] ip6gre10: entered allmulticast mode [ 512.126096][T28163] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.137148][T28188] bond_slave_1: mtu less than device minimum [ 512.184376][T28191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8236'. [ 512.193415][T28191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8236'. [ 512.217334][T28163] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.293764][T28193] lo speed is unknown, defaulting to 1000 [ 512.300989][T28196] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8238'. [ 512.372192][ T6094] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.393631][ T6094] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.423234][T28196] lo speed is unknown, defaulting to 1000 [ 512.437580][ T6094] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.483934][ T6094] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.556501][T28208] bridge0: port 1(macvtap1) entered blocking state [ 512.563478][T28208] bridge0: port 1(macvtap1) entered disabled state [ 512.602189][T28208] macvtap1: entered allmulticast mode [ 512.607685][T28208] bridge0: entered allmulticast mode [ 512.636974][T28208] macvtap1: left allmulticast mode [ 512.642278][T28208] bridge0: left allmulticast mode [ 512.805629][T28220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8246'. [ 512.817575][T28220] ip6gre7: entered allmulticast mode [ 512.826513][T28220] bond_slave_1: mtu less than device minimum [ 512.847535][T28222] netlink: 'syz.6.8247': attribute type 39 has an invalid length. [ 512.892919][T28224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8248'. [ 512.917787][T28216] lo speed is unknown, defaulting to 1000 [ 512.974878][T28229] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 513.032703][T28231] xt_HMARK: spi-set and port-set can't be combined [ 513.044513][T28231] FAULT_INJECTION: forcing a failure. [ 513.044513][T28231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.057709][T28231] CPU: 1 UID: 0 PID: 28231 Comm: syz.2.8250 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 513.057814][T28231] Tainted: [W]=WARN [ 513.057855][T28231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.057934][T28231] Call Trace: [ 513.058003][T28231] [ 513.058011][T28231] __dump_stack+0x1d/0x30 [ 513.058034][T28231] dump_stack_lvl+0xe8/0x140 [ 513.058067][T28231] dump_stack+0x15/0x1b [ 513.058085][T28231] should_fail_ex+0x265/0x280 [ 513.058106][T28231] should_fail+0xb/0x20 [ 513.058127][T28231] should_fail_usercopy+0x1a/0x20 [ 513.058226][T28231] _copy_to_user+0x20/0xa0 [ 513.058251][T28231] simple_read_from_buffer+0xb5/0x130 [ 513.058277][T28231] proc_fail_nth_read+0x10e/0x150 [ 513.058317][T28231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 513.058370][T28231] vfs_read+0x1a8/0x770 [ 513.058400][T28231] ? __rcu_read_unlock+0x4f/0x70 [ 513.058425][T28231] ? __fget_files+0x184/0x1c0 [ 513.058453][T28231] ksys_read+0xda/0x1a0 [ 513.058552][T28231] __x64_sys_read+0x40/0x50 [ 513.058584][T28231] x64_sys_call+0x27c0/0x3000 [ 513.058740][T28231] do_syscall_64+0xd2/0x200 [ 513.058768][T28231] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 513.058801][T28231] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 513.058976][T28231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.059003][T28231] RIP: 0033:0x7f79f66ee0dc [ 513.059023][T28231] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 513.059045][T28231] RSP: 002b:00007f79f514f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 513.059090][T28231] RAX: ffffffffffffffda RBX: 00007f79f6945fa0 RCX: 00007f79f66ee0dc [ 513.059104][T28231] RDX: 000000000000000f RSI: 00007f79f514f0a0 RDI: 0000000000000004 [ 513.059117][T28231] RBP: 00007f79f514f090 R08: 0000000000000000 R09: 0000000000000000 [ 513.059132][T28231] R10: 0000200000000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 513.059194][T28231] R13: 00007f79f6946038 R14: 00007f79f6945fa0 R15: 00007fff5dcb1e48 [ 513.059211][T28231] [ 513.314277][T28238] xt_HMARK: spi-set and port-set can't be combined [ 513.553996][T28253] bridge0: port 1(macvtap1) entered blocking state [ 513.560717][T28253] bridge0: port 1(macvtap1) entered disabled state [ 513.579509][T28253] macvtap1: entered allmulticast mode [ 513.584976][T28253] bridge0: entered allmulticast mode [ 513.602801][T28253] macvtap1: left allmulticast mode [ 513.608115][T28253] bridge0: left allmulticast mode [ 513.668182][T28250] lo speed is unknown, defaulting to 1000 [ 513.779657][T28267] bridge0: entered promiscuous mode [ 513.790433][T28267] bridge0: port 3(macvtap1) entered blocking state [ 513.797277][T28267] bridge0: port 3(macvtap1) entered disabled state [ 513.816992][T28267] macvtap1: entered allmulticast mode [ 513.819381][T28263] netlink: 'syz.2.8260': attribute type 1 has an invalid length. [ 513.822425][T28267] bridge0: entered allmulticast mode [ 513.848840][T28267] macvtap1: left allmulticast mode [ 513.854048][T28267] bridge0: left allmulticast mode [ 513.860763][T28267] bridge0: left promiscuous mode [ 513.880945][T28273] bridge0: entered promiscuous mode [ 513.887669][T28273] bridge0: port 4(macvtap1) entered blocking state [ 513.894332][T28273] bridge0: port 4(macvtap1) entered disabled state [ 513.902004][T28273] macvtap1: entered allmulticast mode [ 513.907475][T28273] bridge0: entered allmulticast mode [ 513.926174][T28273] macvtap1: left allmulticast mode [ 513.931473][T28273] bridge0: left allmulticast mode [ 513.937819][T28279] 9pnet_fd: Insufficient options for proto=fd [ 513.945907][T28273] bridge0: left promiscuous mode [ 513.964490][T28263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.985738][T28278] bond3 (unregistering): Released all slaves [ 514.014079][T28289] FAULT_INJECTION: forcing a failure. [ 514.014079][T28289] name failslab, interval 1, probability 0, space 0, times 0 [ 514.026890][T28289] CPU: 1 UID: 0 PID: 28289 Comm: syz.4.8269 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 514.026932][T28289] Tainted: [W]=WARN [ 514.026940][T28289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.026953][T28289] Call Trace: [ 514.026960][T28289] [ 514.026968][T28289] __dump_stack+0x1d/0x30 [ 514.026993][T28289] dump_stack_lvl+0xe8/0x140 [ 514.027015][T28289] dump_stack+0x15/0x1b [ 514.027037][T28289] should_fail_ex+0x265/0x280 [ 514.027062][T28289] should_failslab+0x8c/0xb0 [ 514.027097][T28289] kmem_cache_alloc_noprof+0x50/0x480 [ 514.027127][T28289] ? mas_alloc_nodes+0x1a2/0x210 [ 514.027147][T28289] mas_alloc_nodes+0x1a2/0x210 [ 514.027168][T28289] mas_preallocate+0x2ca/0x510 [ 514.027197][T28289] __split_vma+0x240/0x650 [ 514.027226][T28289] ? mas_find+0x5d5/0x700 [ 514.027252][T28289] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 514.027282][T28289] mmap_region+0x52b/0x1620 [ 514.027312][T28289] ? __rcu_read_unlock+0x4f/0x70 [ 514.027352][T28289] ? mntput_no_expire+0x6f/0x440 [ 514.027399][T28289] do_mmap+0x9b3/0xbe0 [ 514.027426][T28289] vm_mmap_pgoff+0x17a/0x2e0 [ 514.027458][T28289] ksys_mmap_pgoff+0x268/0x310 [ 514.027482][T28289] x64_sys_call+0x14a3/0x3000 [ 514.027509][T28289] do_syscall_64+0xd2/0x200 [ 514.027535][T28289] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 514.027568][T28289] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 514.027602][T28289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.027623][T28289] RIP: 0033:0x7f2164a4f6c9 [ 514.027643][T28289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.027666][T28289] RSP: 002b:00007f21634b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 514.027692][T28289] RAX: ffffffffffffffda RBX: 00007f2164ca5fa0 RCX: 00007f2164a4f6c9 [ 514.027708][T28289] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000200000000000 [ 514.027723][T28289] RBP: 00007f21634b7090 R08: 0000000000000003 R09: 000000000010c000 [ 514.027742][T28289] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000001 [ 514.027754][T28289] R13: 00007f2164ca6038 R14: 00007f2164ca5fa0 R15: 00007ffe43153d88 [ 514.027774][T28289] [ 514.030867][T28276] ip6gre11: entered allmulticast mode [ 514.275929][T28290] bond_slave_1: mtu less than device minimum [ 514.306163][T28296] netlink: 'syz.6.8271': attribute type 39 has an invalid length. [ 514.331971][T28292] bridge0: entered promiscuous mode [ 514.344702][T28292] bridge0: port 4(macvtap1) entered blocking state [ 514.351697][T28292] bridge0: port 4(macvtap1) entered disabled state [ 514.380492][T28292] macvtap1: entered allmulticast mode [ 514.385930][T28292] bridge0: entered allmulticast mode [ 514.399680][T28292] macvtap1: left allmulticast mode [ 514.404854][T28292] bridge0: left allmulticast mode [ 514.421537][T28292] bridge0: left promiscuous mode [ 514.491995][T28311] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.502028][T28311] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.570600][T28311] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.580500][T28311] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.614944][T28316] loop5: detected capacity change from 0 to 4096 [ 514.634873][T28316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.662802][T28328] C: renamed from team_slave_0 [ 514.676298][T28311] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.686393][T28311] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.715728][T28331] lo speed is unknown, defaulting to 1000 [ 514.722854][T28331] lo speed is unknown, defaulting to 1000 [ 514.728845][T28331] lo speed is unknown, defaulting to 1000 [ 514.770823][T28311] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.780867][T28311] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.889602][ T52] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.897889][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.925456][ T52] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.933815][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.939408][T28331] infiniband sz1: set active [ 514.942366][ T52] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.946874][T28331] infiniband sz1: added lo [ 514.955108][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.967956][ T934] lo speed is unknown, defaulting to 1000 [ 514.975889][ T8699] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.984247][ T8699] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.990159][T28338] FAULT_INJECTION: forcing a failure. [ 514.990159][T28338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.999900][T28331] RDS/IB: sz1: added [ 515.005591][T28338] CPU: 1 UID: 0 PID: 28338 Comm: syz.2.8283 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 515.005629][T28338] Tainted: [W]=WARN [ 515.005704][T28338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.005775][T28338] Call Trace: [ 515.005781][T28338] [ 515.005789][T28338] __dump_stack+0x1d/0x30 [ 515.005815][T28338] dump_stack_lvl+0xe8/0x140 [ 515.005837][T28338] dump_stack+0x15/0x1b [ 515.005857][T28338] should_fail_ex+0x265/0x280 [ 515.005879][T28338] should_fail+0xb/0x20 [ 515.005896][T28338] should_fail_usercopy+0x1a/0x20 [ 515.005934][T28338] _copy_from_user+0x1c/0xb0 [ 515.005961][T28338] proc_control+0x43/0xa0 [ 515.005995][T28338] usbdev_ioctl+0x93c/0x1700 [ 515.006067][T28338] ? __pfx_usbdev_ioctl+0x10/0x10 [ 515.006094][T28338] __se_sys_ioctl+0xce/0x140 [ 515.006118][T28338] __x64_sys_ioctl+0x43/0x50 [ 515.006139][T28338] x64_sys_call+0x1816/0x3000 [ 515.006163][T28338] do_syscall_64+0xd2/0x200 [ 515.006235][T28338] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 515.006351][T28338] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 515.006404][T28338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.006428][T28338] RIP: 0033:0x7f79f66ef6c9 [ 515.006446][T28338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.006465][T28338] RSP: 002b:00007f79f514f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.006488][T28338] RAX: ffffffffffffffda RBX: 00007f79f6945fa0 RCX: 00007f79f66ef6c9 [ 515.006502][T28338] RDX: 00002000000000c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 515.006558][T28338] RBP: 00007f79f514f090 R08: 0000000000000000 R09: 0000000000000000 [ 515.006571][T28338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.006585][T28338] R13: 00007f79f6946038 R14: 00007f79f6945fa0 R15: 00007fff5dcb1e48 [ 515.006604][T28338] [ 515.038849][T28341] serio: Serial port ptm0 [ 515.041971][T28331] smc: adding ib device sz1 with port count 1 [ 515.211906][T28331] smc: ib device sz1 port 1 has no pnetid [ 515.224532][ T3420] lo speed is unknown, defaulting to 1000 [ 515.230649][T28331] lo speed is unknown, defaulting to 1000 [ 515.267237][T28331] lo speed is unknown, defaulting to 1000 [ 515.301359][T28331] lo speed is unknown, defaulting to 1000 [ 515.337644][T28331] lo speed is unknown, defaulting to 1000 [ 515.398895][T21447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.430147][T28331] lo speed is unknown, defaulting to 1000 [ 515.462450][T28351] __nla_validate_parse: 10 callbacks suppressed [ 515.462468][T28351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8286'. [ 515.477692][T28351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8286'. [ 515.495613][T28331] lo speed is unknown, defaulting to 1000 [ 515.554111][T28331] lo speed is unknown, defaulting to 1000 [ 515.713618][T28365] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 515.767648][T28367] lo speed is unknown, defaulting to 1000 [ 515.774711][T28367] lo speed is unknown, defaulting to 1000 [ 515.839831][T28376] FAULT_INJECTION: forcing a failure. [ 515.839831][T28376] name failslab, interval 1, probability 0, space 0, times 0 [ 515.852631][T28376] CPU: 0 UID: 0 PID: 28376 Comm: syz.0.8296 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 515.852670][T28376] Tainted: [W]=WARN [ 515.852678][T28376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.852744][T28376] Call Trace: [ 515.852753][T28376] [ 515.852761][T28376] __dump_stack+0x1d/0x30 [ 515.852789][T28376] dump_stack_lvl+0xe8/0x140 [ 515.852813][T28376] dump_stack+0x15/0x1b [ 515.852834][T28376] should_fail_ex+0x265/0x280 [ 515.852899][T28376] should_failslab+0x8c/0xb0 [ 515.852933][T28376] kmem_cache_alloc_noprof+0x50/0x480 [ 515.852968][T28376] ? getname_flags+0x80/0x3b0 [ 515.853085][T28376] getname_flags+0x80/0x3b0 [ 515.853120][T28376] user_path_at+0x28/0x130 [ 515.853140][T28376] do_fchmodat+0x9c/0x180 [ 515.853163][T28376] __x64_sys_chmod+0x38/0x50 [ 515.853206][T28376] x64_sys_call+0x2920/0x3000 [ 515.853234][T28376] do_syscall_64+0xd2/0x200 [ 515.853259][T28376] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 515.853291][T28376] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 515.853340][T28376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.853366][T28376] RIP: 0033:0x7fc6d5f3f6c9 [ 515.853394][T28376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.853455][T28376] RSP: 002b:00007fc6d49a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 515.853476][T28376] RAX: ffffffffffffffda RBX: 00007fc6d6195fa0 RCX: 00007fc6d5f3f6c9 [ 515.853490][T28376] RDX: 0000000000000000 RSI: 00000000000003ec RDI: 0000000000000000 [ 515.853504][T28376] RBP: 00007fc6d49a7090 R08: 0000000000000000 R09: 0000000000000000 [ 515.853518][T28376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.853577][T28376] R13: 00007fc6d6196038 R14: 00007fc6d6195fa0 R15: 00007fffd76b84b8 [ 515.853599][T28376] [ 516.065598][T28378] netlink: 'syz.2.8297': attribute type 2 has an invalid length. [ 516.073452][T28378] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8297'. [ 516.082673][T28378] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 516.126694][T28382] xt_HMARK: spi-set and port-set can't be combined [ 516.238721][T28391] netlink: 'syz.6.8301': attribute type 1 has an invalid length. [ 516.329707][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8301'. [ 516.609043][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 516.609062][ T29] audit: type=1400 audit(2000000564.377:57358): avc: denied { prog_load } for pid=28385 comm="syz.0.8299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 516.634660][ T29] audit: type=1400 audit(2000000564.377:57359): avc: denied { bpf } for pid=28385 comm="syz.0.8299" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 516.649954][T28391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.655691][ T29] audit: type=1400 audit(2000000564.377:57360): avc: denied { perfmon } for pid=28385 comm="syz.0.8299" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 516.656830][ T29] audit: type=1400 audit(2000000564.429:57361): avc: denied { prog_run } for pid=28385 comm="syz.0.8299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 516.757017][ T29] audit: type=1400 audit(2000000564.524:57362): avc: denied { create } for pid=28401 comm="syz.6.8303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 516.793243][ T29] audit: type=1400 audit(2000000564.566:57363): avc: denied { setopt } for pid=28401 comm="syz.6.8303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 516.845884][T28402] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 516.852664][ T29] audit: type=1400 audit(2000000564.618:57364): avc: denied { open } for pid=28401 comm="syz.6.8303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 516.872272][ T29] audit: type=1400 audit(2000000564.618:57365): avc: denied { kernel } for pid=28401 comm="syz.6.8303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 516.885758][T28406] FAULT_INJECTION: forcing a failure. [ 516.885758][T28406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.892053][ T29] audit: type=1400 audit(2000000564.618:57366): avc: denied { read write } for pid=21691 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 516.905226][T28406] CPU: 0 UID: 0 PID: 28406 Comm: syz.2.8305 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 516.905266][T28406] Tainted: [W]=WARN [ 516.905283][T28406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.905296][T28406] Call Trace: [ 516.905302][T28406] [ 516.905310][T28406] __dump_stack+0x1d/0x30 [ 516.905351][T28406] dump_stack_lvl+0xe8/0x140 [ 516.905374][T28406] dump_stack+0x15/0x1b [ 516.905393][T28406] should_fail_ex+0x265/0x280 [ 516.905494][T28406] should_fail+0xb/0x20 [ 516.905512][T28406] should_fail_usercopy+0x1a/0x20 [ 516.905540][T28406] _copy_from_user+0x1c/0xb0 [ 516.905567][T28406] ___sys_sendmsg+0xc1/0x1d0 [ 516.905600][T28406] __x64_sys_sendmsg+0xd4/0x160 [ 516.905625][T28406] x64_sys_call+0x191e/0x3000 [ 516.905814][T28406] do_syscall_64+0xd2/0x200 [ 516.905837][T28406] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 516.905948][T28406] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 516.905983][T28406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.906006][T28406] RIP: 0033:0x7f79f66ef6c9 [ 516.906023][T28406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.906068][T28406] RSP: 002b:00007f79f514f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.906090][T28406] RAX: ffffffffffffffda RBX: 00007f79f6945fa0 RCX: 00007f79f66ef6c9 [ 516.906120][T28406] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 516.906172][T28406] RBP: 00007f79f514f090 R08: 0000000000000000 R09: 0000000000000000 [ 516.906186][T28406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.906199][T28406] R13: 00007f79f6946038 R14: 00007f79f6945fa0 R15: 00007fff5dcb1e48 [ 516.906219][T28406] [ 517.057979][T28410] serio: Serial port ptm0 [ 517.061919][ T29] audit: type=1400 audit(2000000564.618:57368): avc: denied { open } for pid=21691 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 517.256332][T28421] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.334605][T28421] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.401704][T28421] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.455114][T28421] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.479840][T28427] lo speed is unknown, defaulting to 1000 [ 517.541407][ T8705] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.550160][ T8705] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.558494][T28427] lo speed is unknown, defaulting to 1000 [ 517.578766][ T8705] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.587178][ T8705] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.655787][T28438] loop5: detected capacity change from 0 to 512 [ 517.701263][T28438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.778496][T28441] lo speed is unknown, defaulting to 1000 [ 517.785032][T21447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.785425][T28441] lo speed is unknown, defaulting to 1000 [ 517.965960][T28457] loop5: detected capacity change from 0 to 128 [ 517.974545][T28457] FAT-fs (loop5): bogus number of reserved sectors [ 517.981211][T28457] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 517.990575][T28457] FAT-fs (loop5): Can't find a valid FAT filesystem [ 518.002713][T28457] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8321'. [ 518.181982][T28476] serio: Serial port ptm0 [ 518.198464][T28478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8329'. [ 518.216239][T28478] veth3: entered promiscuous mode [ 518.221371][T28478] veth3: entered allmulticast mode [ 518.227721][T28467] lo speed is unknown, defaulting to 1000 [ 518.233930][T28467] lo speed is unknown, defaulting to 1000 [ 518.295755][T28469] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 518.323334][T28486] netlink: 'syz.6.8331': attribute type 21 has an invalid length. [ 518.331656][T28486] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8331'. [ 518.340841][T28486] netlink: 'syz.6.8331': attribute type 1 has an invalid length. [ 518.351852][T28488] FAULT_INJECTION: forcing a failure. [ 518.351852][T28488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.365130][T28488] CPU: 0 UID: 0 PID: 28488 Comm: syz.0.8332 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 518.365163][T28488] Tainted: [W]=WARN [ 518.365170][T28488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 518.365205][T28488] Call Trace: [ 518.365214][T28488] [ 518.365224][T28488] __dump_stack+0x1d/0x30 [ 518.365254][T28488] dump_stack_lvl+0xe8/0x140 [ 518.365275][T28488] dump_stack+0x15/0x1b [ 518.365377][T28488] should_fail_ex+0x265/0x280 [ 518.365412][T28488] should_fail+0xb/0x20 [ 518.365430][T28488] should_fail_usercopy+0x1a/0x20 [ 518.365464][T28488] _copy_from_user+0x1c/0xb0 [ 518.365489][T28488] ___sys_sendmsg+0xc1/0x1d0 [ 518.365625][T28488] __x64_sys_sendmsg+0xd4/0x160 [ 518.365653][T28488] x64_sys_call+0x191e/0x3000 [ 518.365681][T28488] do_syscall_64+0xd2/0x200 [ 518.365702][T28488] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 518.365739][T28488] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 518.365828][T28488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.365968][T28488] RIP: 0033:0x7fc6d5f3f6c9 [ 518.365985][T28488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.366006][T28488] RSP: 002b:00007fc6d49a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.366043][T28488] RAX: ffffffffffffffda RBX: 00007fc6d6195fa0 RCX: 00007fc6d5f3f6c9 [ 518.366137][T28488] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 518.366152][T28488] RBP: 00007fc6d49a7090 R08: 0000000000000000 R09: 0000000000000000 [ 518.366166][T28488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.366192][T28488] R13: 00007fc6d6196038 R14: 00007fc6d6195fa0 R15: 00007fffd76b84b8 [ 518.366214][T28488] [ 518.572668][T28493] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8334'. [ 518.710121][T28508] bridge0: entered promiscuous mode [ 518.742039][T28508] bridge0: port 3(macvtap1) entered blocking state [ 518.748681][T28508] bridge0: port 3(macvtap1) entered disabled state [ 518.748858][T28508] macvtap1: entered allmulticast mode [ 518.748876][T28508] bridge0: entered allmulticast mode [ 518.749298][T28508] macvtap1: left allmulticast mode [ 518.749314][T28508] bridge0: left allmulticast mode [ 518.767748][T28508] bridge0: left promiscuous mode [ 518.778788][T28506] hub 1-0:1.0: USB hub found [ 518.788481][T28506] hub 1-0:1.0: 8 ports detected [ 518.804138][T28510] bridge0: port 1(macvtap1) entered blocking state [ 518.810869][T28510] bridge0: port 1(macvtap1) entered disabled state [ 518.817910][T28510] macvtap1: entered allmulticast mode [ 518.823310][T28510] bridge0: entered allmulticast mode [ 518.829319][T28510] macvtap1: left allmulticast mode [ 518.834481][T28510] bridge0: left allmulticast mode [ 518.926960][T28514] loop5: detected capacity change from 0 to 8192 [ 518.944795][T28516] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 519.074202][T28528] loop5: detected capacity change from 0 to 128 [ 519.105509][T28528] FAT-fs (loop5): bogus number of reserved sectors [ 519.112088][T28528] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 519.121421][T28528] FAT-fs (loop5): Can't find a valid FAT filesystem [ 519.273667][T28531] rdma_op ffff8881222e6580 conn xmit_rdma 0000000000000000 [ 519.369964][T28528] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8346'. [ 519.379777][T28526] lo speed is unknown, defaulting to 1000 [ 519.386028][T28526] lo speed is unknown, defaulting to 1000 [ 519.459279][T28535] loop5: detected capacity change from 0 to 512 [ 519.466966][T28535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 519.479749][T28535] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 519.487740][T28535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 519.511653][T28535] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 519.521295][T28535] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 519.531237][T28535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 519.544667][T28535] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8349: dx entry: limit 65535 != root limit 120 [ 519.556858][T28535] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8349: Corrupt directory, running e2fsck is recommended [ 519.673482][T21447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.698660][T28541] FAULT_INJECTION: forcing a failure. [ 519.698660][T28541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.711875][T28541] CPU: 0 UID: 0 PID: 28541 Comm: syz.5.8351 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 519.711911][T28541] Tainted: [W]=WARN [ 519.711918][T28541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 519.711931][T28541] Call Trace: [ 519.711938][T28541] [ 519.711946][T28541] __dump_stack+0x1d/0x30 [ 519.711989][T28541] dump_stack_lvl+0xe8/0x140 [ 519.712013][T28541] dump_stack+0x15/0x1b [ 519.712093][T28541] should_fail_ex+0x265/0x280 [ 519.712196][T28541] should_fail+0xb/0x20 [ 519.712213][T28541] should_fail_usercopy+0x1a/0x20 [ 519.712235][T28541] _copy_to_user+0x20/0xa0 [ 519.712272][T28541] simple_read_from_buffer+0xb5/0x130 [ 519.712297][T28541] proc_fail_nth_read+0x10e/0x150 [ 519.712334][T28541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.712443][T28541] vfs_read+0x1a8/0x770 [ 519.712500][T28541] ? __rcu_read_unlock+0x4f/0x70 [ 519.712533][T28541] ? __fget_files+0x184/0x1c0 [ 519.712600][T28541] ? __sys_bind+0x223/0x2a0 [ 519.712630][T28541] ksys_read+0xda/0x1a0 [ 519.712655][T28541] __x64_sys_read+0x40/0x50 [ 519.712679][T28541] x64_sys_call+0x27c0/0x3000 [ 519.712751][T28541] do_syscall_64+0xd2/0x200 [ 519.712777][T28541] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 519.712878][T28541] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 519.712912][T28541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.712934][T28541] RIP: 0033:0x7fcdbde4e0dc [ 519.712961][T28541] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 519.712984][T28541] RSP: 002b:00007fcdbc8af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.713007][T28541] RAX: ffffffffffffffda RBX: 00007fcdbe0a5fa0 RCX: 00007fcdbde4e0dc [ 519.713020][T28541] RDX: 000000000000000f RSI: 00007fcdbc8af0a0 RDI: 0000000000000007 [ 519.713032][T28541] RBP: 00007fcdbc8af090 R08: 0000000000000000 R09: 0000000000000000 [ 519.713045][T28541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.713124][T28541] R13: 00007fcdbe0a6038 R14: 00007fcdbe0a5fa0 R15: 00007ffdef21a598 [ 519.713147][T28541] [ 519.945440][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8353'. [ 519.978421][T28545] bridge0: port 4(macvtap1) entered blocking state [ 519.985276][T28545] bridge0: port 4(macvtap1) entered disabled state [ 519.998704][T28545] macvtap1: entered allmulticast mode [ 520.004198][T28545] bridge0: entered allmulticast mode [ 520.020528][T28545] macvtap1: left allmulticast mode [ 520.025789][T28545] bridge0: left allmulticast mode [ 520.052001][T28551] serio: Serial port ptm0 [ 520.080165][T28543] bridge0: entered promiscuous mode [ 520.087695][T28543] bridge0: port 3(macvtap1) entered blocking state [ 520.094416][T28543] bridge0: port 3(macvtap1) entered disabled state [ 520.102388][T28543] macvtap1: entered allmulticast mode [ 520.107916][T28543] bridge0: entered allmulticast mode [ 520.116841][T28543] macvtap1: left allmulticast mode [ 520.122074][T28543] bridge0: left allmulticast mode [ 520.134639][T28543] bridge0: left promiscuous mode [ 520.206720][T28557] lo speed is unknown, defaulting to 1000 [ 520.222551][T28557] lo speed is unknown, defaulting to 1000 [ 520.233578][T28567] loop5: detected capacity change from 0 to 512 [ 520.321092][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8363'. [ 520.330416][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8363'. [ 520.352584][T28567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.365671][T28573] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8363'. [ 520.375147][T28567] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.444797][T21447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.476181][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8366'. [ 520.485308][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8366'. [ 520.517614][T28582] loop5: detected capacity change from 0 to 512 [ 520.524906][T28582] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.8365: inode #196608: comm syz.5.8365: iget: illegal inode # [ 520.539154][T28582] EXT4-fs (loop5): Remounting filesystem read-only [ 520.545766][T28582] EXT4-fs (loop5): no journal found [ 520.551028][T28582] EXT4-fs (loop5): can't get journal size [ 520.557787][T28582] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 520.567567][T28582] EXT4-fs (loop5): failed to initialize system zone (-22) [ 520.574897][T28582] EXT4-fs (loop5): mount failed [ 520.871817][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8369'. [ 520.890436][T28590] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 520.904180][T28588] bridge0: entered promiscuous mode [ 520.911817][T28588] bridge0: port 3(macvtap1) entered blocking state [ 520.918433][T28588] bridge0: port 3(macvtap1) entered disabled state [ 520.925507][T28588] macvtap1: entered allmulticast mode [ 520.931077][T28588] bridge0: entered allmulticast mode [ 520.937738][T28588] macvtap1: left allmulticast mode [ 520.942959][T28588] bridge0: left allmulticast mode [ 520.968142][T28588] bridge0: left promiscuous mode [ 520.998267][T28600] tipc: Enabling of bearer rejected, failed to enable media [ 521.018019][T28602] bridge0: port 4(macvtap1) entered blocking state [ 521.024736][T28602] bridge0: port 4(macvtap1) entered disabled state [ 521.031641][T28602] macvtap1: entered allmulticast mode [ 521.037088][T28602] bridge0: entered allmulticast mode [ 521.042982][T28602] macvtap1: left allmulticast mode [ 521.048185][T28602] bridge0: left allmulticast mode [ 521.109817][T28607] syzkaller0: entered promiscuous mode [ 521.115476][T28607] syzkaller0: entered allmulticast mode [ 521.163197][T28608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8374'. [ 521.368957][T28620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8380'. [ 521.412367][T28620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65518 sclass=netlink_route_socket pid=28620 comm=syz.5.8380 [ 521.431279][T28625] syz0: rxe_newlink: already configured on bond_slave_0 [ 521.473146][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8384'. [ 521.497818][T28629] bridge0: port 4(macvtap1) entered blocking state [ 521.504527][T28629] bridge0: port 4(macvtap1) entered disabled state [ 521.511681][T28629] macvtap1: entered allmulticast mode [ 521.517257][T28629] bridge0: entered allmulticast mode [ 521.523132][T28629] macvtap1: left allmulticast mode [ 521.528347][T28629] bridge0: left allmulticast mode [ 521.571227][T28633] lo speed is unknown, defaulting to 1000 [ 521.577545][T28633] lo speed is unknown, defaulting to 1000 [ 521.679658][T28643] siw: device registration error -23 [ 521.687875][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 521.687961][ T29] audit: type=1400 audit(2000000569.699:57579): avc: denied { read } for pid=28642 comm="syz.0.8389" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 521.717986][ T29] audit: type=1400 audit(2000000569.699:57580): avc: denied { open } for pid=28642 comm="syz.0.8389" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 521.795677][ T29] audit: type=1400 audit(2000000569.762:57581): avc: denied { ioctl } for pid=28642 comm="syz.0.8389" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 521.821401][ T29] audit: type=1400 audit(2000000569.762:57582): avc: denied { write } for pid=28642 comm="syz.0.8389" name="arp" dev="proc" ino=4026532673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 521.844159][ T29] audit: type=1400 audit(2000000569.783:57583): avc: denied { write } for pid=28648 comm="syz.0.8392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 521.890892][T28651] netlink: 'syz.2.8393': attribute type 21 has an invalid length. [ 521.902268][T28651] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8393'. [ 521.918598][T28655] syz0: rxe_newlink: already configured on bond_slave_0 [ 521.927854][ T29] audit: type=1326 audit(2000000569.941:57584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28650 comm="syz.2.8393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 521.951578][ T29] audit: type=1326 audit(2000000569.941:57585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28650 comm="syz.2.8393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 521.975393][ T29] audit: type=1326 audit(2000000569.941:57586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28650 comm="syz.2.8393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 521.977520][T28656] netem: change failed [ 521.999235][ T29] audit: type=1326 audit(2000000569.941:57587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28650 comm="syz.2.8393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f79f66f155c code=0x7ffc0000 [ 522.027061][ T29] audit: type=1326 audit(2000000569.941:57588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28650 comm="syz.2.8393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f66ef6c9 code=0x7ffc0000 [ 522.077604][T28658] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.124453][T28658] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.186039][T28663] bridge0: entered promiscuous mode [ 522.192808][T28663] bridge0: port 4(macvtap1) entered blocking state [ 522.199584][T28663] bridge0: port 4(macvtap1) entered disabled state [ 522.208161][T28663] macvtap1: entered allmulticast mode [ 522.213626][T28663] bridge0: entered allmulticast mode [ 522.220074][T28663] macvtap1: left allmulticast mode [ 522.225333][T28663] bridge0: left allmulticast mode [ 522.232420][T28663] bridge0: left promiscuous mode [ 522.242754][T28658] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.327028][T28666] FAULT_INJECTION: forcing a failure. [ 522.327028][T28666] name failslab, interval 1, probability 0, space 0, times 0 [ 522.339967][T28666] CPU: 1 UID: 0 PID: 28666 Comm: syz.4.8398 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 522.340126][T28666] Tainted: [W]=WARN [ 522.340136][T28666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 522.340152][T28666] Call Trace: [ 522.340162][T28666] [ 522.340175][T28666] __dump_stack+0x1d/0x30 [ 522.340200][T28666] dump_stack_lvl+0xe8/0x140 [ 522.340290][T28666] dump_stack+0x15/0x1b [ 522.340312][T28666] should_fail_ex+0x265/0x280 [ 522.340338][T28666] should_failslab+0x8c/0xb0 [ 522.340416][T28666] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 522.340457][T28666] ? __alloc_skb+0x101/0x320 [ 522.340496][T28666] __alloc_skb+0x101/0x320 [ 522.340581][T28666] mpls_netconf_notify_devconf+0x46/0x100 [ 522.340614][T28666] mpls_dev_sysctl_unregister+0x6b/0x80 [ 522.340717][T28666] ? __pfx_mpls_dev_notify+0x10/0x10 [ 522.340751][T28666] mpls_dev_notify+0x7a7/0x8d0 [ 522.340783][T28666] ? __pfx_batadv_hard_if_event+0x10/0x10 [ 522.340881][T28666] ? batadv_hard_if_event+0x217/0xf10 [ 522.340934][T28666] ? ovs_netdev_get_vport+0x5a/0x60 [ 522.340965][T28666] ? __pfx_mpls_dev_notify+0x10/0x10 [ 522.341064][T28666] raw_notifier_call_chain+0x6f/0x1b0 [ 522.341090][T28666] ? call_netdevice_notifiers_info+0x9c/0x100 [ 522.341125][T28666] call_netdevice_notifiers_info+0xae/0x100 [ 522.341233][T28666] unregister_netdevice_many_notify+0xe76/0x1690 [ 522.341266][T28666] unregister_netdevice_queue+0x1f5/0x220 [ 522.341389][T28666] unregister_netdev+0xb3/0xe0 [ 522.341414][T28666] slip_close+0xe4/0x100 [ 522.341521][T28666] ? __pfx_slip_close+0x10/0x10 [ 522.341567][T28666] tty_ldisc_close+0x74/0xa0 [ 522.341596][T28666] tty_set_ldisc+0x1b9/0x380 [ 522.341632][T28666] tiocsetd+0x51/0x60 [ 522.341654][T28666] tty_ioctl+0xa79/0xb80 [ 522.341714][T28666] ? __pfx_tty_ioctl+0x10/0x10 [ 522.341743][T28666] __se_sys_ioctl+0xce/0x140 [ 522.341771][T28666] __x64_sys_ioctl+0x43/0x50 [ 522.341798][T28666] x64_sys_call+0x1816/0x3000 [ 522.341884][T28666] do_syscall_64+0xd2/0x200 [ 522.341911][T28666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 522.342041][T28666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 522.342074][T28666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.342142][T28666] RIP: 0033:0x7f2164a4f6c9 [ 522.342164][T28666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.342183][T28666] RSP: 002b:00007f21634b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.342204][T28666] RAX: ffffffffffffffda RBX: 00007f2164ca5fa0 RCX: 00007f2164a4f6c9 [ 522.342218][T28666] RDX: 0000200000000080 RSI: 0000000000005423 RDI: 0000000000000003 [ 522.342233][T28666] RBP: 00007f21634b7090 R08: 0000000000000000 R09: 0000000000000000 [ 522.342313][T28666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.342330][T28666] R13: 00007f2164ca6038 R14: 00007f2164ca5fa0 R15: 00007ffe43153d88 [ 522.342351][T28666] [ 522.659416][T28658] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.701364][T28673] netlink: 'syz.2.8402': attribute type 1 has an invalid length. [ 522.752934][ T8699] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.784390][T28686] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 522.794905][T28673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.815081][ T8699] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.883619][ T8699] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.911642][ T8699] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.941172][T28694] bridge0: port 1(macvtap1) entered blocking state [ 522.948081][T28694] bridge0: port 1(macvtap1) entered disabled state [ 522.955035][T28694] macvtap1: entered allmulticast mode [ 522.960440][T28694] bridge0: entered allmulticast mode [ 522.976621][T28694] macvtap1: left allmulticast mode [ 522.981817][T28694] bridge0: left allmulticast mode [ 523.043567][T28703] loop5: detected capacity change from 0 to 512 [ 523.059007][T28703] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 523.079951][T28697] lo speed is unknown, defaulting to 1000 [ 523.087303][T28697] lo speed is unknown, defaulting to 1000 [ 523.097900][T28703] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 523.105918][T28703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 523.115481][T28702] lo speed is unknown, defaulting to 1000 [ 523.129123][T28703] System zones: 0-1, 15-15, 18-18, 34-34 [ 523.186776][T28702] lo speed is unknown, defaulting to 1000 [ 523.188530][T28703] EXT4-fs (loop5): orphan cleanup on readonly fs [ 523.216159][T28703] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 523.230880][T28703] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 523.238699][T28703] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8401: bg 0: block 40: padding at end of block bitmap is not set [ 523.255978][T28703] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 523.265525][T28703] EXT4-fs (loop5): 1 truncate cleaned up [ 523.272178][T28703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.573538][T21447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.707590][T28725] loop4: detected capacity change from 0 to 512 [ 523.715019][T28725] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.8414: inode #196608: comm syz.4.8414: iget: illegal inode # [ 523.729024][T28725] EXT4-fs (loop4): Remounting filesystem read-only [ 523.735636][T28725] EXT4-fs (loop4): no journal found [ 523.740870][T28725] EXT4-fs (loop4): can't get journal size [ 523.751939][T28725] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 523.761664][T28725] EXT4-fs (loop4): failed to initialize system zone (-22) [ 523.769014][T28725] EXT4-fs (loop4): mount failed [ 524.072772][T28740] netlink: 'syz.2.8418': attribute type 1 has an invalid length. [ 524.096772][T28742] bridge0: port 4(macvtap1) entered blocking state [ 524.103372][T28742] bridge0: port 4(macvtap1) entered disabled state [ 524.115469][T28742] macvtap1: entered allmulticast mode [ 524.120933][T28742] bridge0: entered allmulticast mode [ 524.144601][T28742] macvtap1: left allmulticast mode [ 524.149818][T28742] bridge0: left allmulticast mode [ 524.234597][T28740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.273440][T28746] bond4 (unregistering): Released all slaves [ 524.377501][T28762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65518 sclass=netlink_route_socket pid=28762 comm=syz.0.8426 [ 524.604495][T28773] SELinux: failed to load policy [ 524.675078][T28777] ip6gre8: entered allmulticast mode [ 524.686424][T28777] bond_slave_1: mtu less than device minimum [ 524.742827][T28788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28788 comm=syz.6.8440 [ 524.794783][T28794] serio: Serial port ptm0 [ 524.815263][T28788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=28788 comm=syz.6.8440 [ 524.896931][T28803] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 524.905708][T28806] bridge0: entered promiscuous mode [ 524.933905][T28806] bridge0: port 3(macvtap1) entered blocking state [ 524.940568][T28806] bridge0: port 3(macvtap1) entered disabled state [ 524.952299][T28806] macvtap1: entered allmulticast mode [ 524.957763][T28806] bridge0: entered allmulticast mode [ 524.971603][T28806] macvtap1: left allmulticast mode [ 524.976790][T28806] bridge0: left allmulticast mode [ 525.017686][T28806] bridge0: left promiscuous mode [ 525.086484][T28815] IPv6: NLM_F_CREATE should be specified when creating new route [ 525.847121][T28838] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 525.863293][T28840] netlink: 'syz.0.8457': attribute type 1 has an invalid length. [ 525.909611][T28840] smc: adding net device bond0 with user defined pnetid SYZ2 [ 525.942619][T28844] __nla_validate_parse: 13 callbacks suppressed [ 525.942637][T28844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8457'. [ 525.944377][T28840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.985540][T28844] smc: removing net device bond0 with user defined pnetid SYZ2 [ 525.993692][T28844] bond0 (unregistering): Released all slaves [ 526.012615][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8460'. [ 526.100686][T28854] FAULT_INJECTION: forcing a failure. [ 526.100686][T28854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.113850][T28854] CPU: 0 UID: 0 PID: 28854 Comm: syz.4.8461 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 526.113887][T28854] Tainted: [W]=WARN [ 526.113895][T28854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 526.113909][T28854] Call Trace: [ 526.113916][T28854] [ 526.113924][T28854] __dump_stack+0x1d/0x30 [ 526.113979][T28854] dump_stack_lvl+0xe8/0x140 [ 526.113998][T28854] dump_stack+0x15/0x1b [ 526.114015][T28854] should_fail_ex+0x265/0x280 [ 526.114034][T28854] should_fail+0xb/0x20 [ 526.114076][T28854] should_fail_usercopy+0x1a/0x20 [ 526.114096][T28854] strncpy_from_user+0x25/0x230 [ 526.114122][T28854] ? kmem_cache_alloc_noprof+0x242/0x480 [ 526.114207][T28854] ? getname_flags+0x80/0x3b0 [ 526.114237][T28854] getname_flags+0xae/0x3b0 [ 526.114265][T28854] __x64_sys_unlinkat+0x70/0xb0 [ 526.114290][T28854] x64_sys_call+0x2eed/0x3000 [ 526.114318][T28854] do_syscall_64+0xd2/0x200 [ 526.114358][T28854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 526.114435][T28854] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 526.114467][T28854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.114487][T28854] RIP: 0033:0x7f2164a4f6c9 [ 526.114568][T28854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.114587][T28854] RSP: 002b:00007f21634b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 526.114628][T28854] RAX: ffffffffffffffda RBX: 00007f2164ca5fa0 RCX: 00007f2164a4f6c9 [ 526.114685][T28854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 526.114697][T28854] RBP: 00007f21634b7090 R08: 0000000000000000 R09: 0000000000000000 [ 526.114709][T28854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.114720][T28854] R13: 00007f2164ca6038 R14: 00007f2164ca5fa0 R15: 00007ffe43153d88 [ 526.114738][T28854] [ 526.377023][T28859] serio: Serial port ptm0 [ 526.404102][T28861] rdma_op ffff888123d54180 conn xmit_rdma 0000000000000000 [ 526.492989][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 526.493009][ T29] audit: type=1326 audit(2000000574.738:57817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.532298][ T29] audit: type=1326 audit(2000000574.780:57818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.570367][ T29] audit: type=1326 audit(2000000574.791:57819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.594247][ T29] audit: type=1326 audit(2000000574.791:57820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.617860][ T29] audit: type=1326 audit(2000000574.791:57821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.624771][T28871] lo speed is unknown, defaulting to 1000 [ 526.641723][ T29] audit: type=1326 audit(2000000574.791:57822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.641757][ T29] audit: type=1326 audit(2000000574.791:57823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.641787][ T29] audit: type=1326 audit(2000000574.791:57824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.673268][T28871] lo speed is unknown, defaulting to 1000 [ 526.695094][ T29] audit: type=1326 audit(2000000574.791:57825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.748073][ T29] audit: type=1326 audit(2000000574.791:57826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28867 comm="syz.5.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 526.774065][T28873] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 526.812276][T28881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8471'. [ 526.823862][T28881] ip6gre8: entered allmulticast mode [ 526.833394][T28883] netlink: 'syz.0.8472': attribute type 1 has an invalid length. [ 526.833674][T28881] bond_slave_1: mtu less than device minimum [ 526.873541][T28883] smc: adding net device bond0 with user defined pnetid SYZ2 [ 526.884884][T28883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.902120][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8472'. [ 526.913918][T28883] smc: removing net device bond0 with user defined pnetid SYZ2 [ 526.927967][T28883] bond0 (unregistering): Released all slaves [ 527.189375][T28901] FAULT_INJECTION: forcing a failure. [ 527.189375][T28901] name failslab, interval 1, probability 0, space 0, times 0 [ 527.202083][T28901] CPU: 1 UID: 0 PID: 28901 Comm: syz.0.8477 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 527.202165][T28901] Tainted: [W]=WARN [ 527.202171][T28901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.202183][T28901] Call Trace: [ 527.202191][T28901] [ 527.202201][T28901] __dump_stack+0x1d/0x30 [ 527.202225][T28901] dump_stack_lvl+0xe8/0x140 [ 527.202245][T28901] dump_stack+0x15/0x1b [ 527.202326][T28901] should_fail_ex+0x265/0x280 [ 527.202351][T28901] should_failslab+0x8c/0xb0 [ 527.202397][T28901] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 527.202433][T28901] ? cond_bools_copy+0x30/0x80 [ 527.202461][T28901] ? __pfx_cond_bools_destroy+0x10/0x10 [ 527.202486][T28901] kmemdup_noprof+0x2b/0x70 [ 527.202576][T28901] ? __pfx_cond_bools_destroy+0x10/0x10 [ 527.202602][T28901] cond_bools_copy+0x30/0x80 [ 527.202628][T28901] ? __pfx_cond_bools_destroy+0x10/0x10 [ 527.202650][T28901] hashtab_duplicate+0x11e/0x360 [ 527.202753][T28901] ? __pfx_cond_bools_copy+0x10/0x10 [ 527.202776][T28901] cond_policydb_dup+0xd2/0x4e0 [ 527.202801][T28901] security_set_bools+0xa0/0x340 [ 527.202843][T28901] sel_commit_bools_write+0x1ea/0x270 [ 527.202922][T28901] vfs_writev+0x406/0x8b0 [ 527.202954][T28901] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 527.203052][T28901] ? mutex_lock+0xd/0x30 [ 527.203088][T28901] do_writev+0xe7/0x210 [ 527.203218][T28901] __x64_sys_writev+0x45/0x50 [ 527.203252][T28901] x64_sys_call+0x1e9a/0x3000 [ 527.203281][T28901] do_syscall_64+0xd2/0x200 [ 527.203314][T28901] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 527.203346][T28901] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 527.203387][T28901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.203424][T28901] RIP: 0033:0x7fc6d5f3f6c9 [ 527.203444][T28901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.203467][T28901] RSP: 002b:00007fc6d4965038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 527.203492][T28901] RAX: ffffffffffffffda RBX: 00007fc6d6196180 RCX: 00007fc6d5f3f6c9 [ 527.203508][T28901] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000005 [ 527.203524][T28901] RBP: 00007fc6d4965090 R08: 0000000000000000 R09: 0000000000000000 [ 527.203595][T28901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.203609][T28901] R13: 00007fc6d6196218 R14: 00007fc6d6196180 R15: 00007fffd76b84b8 [ 527.203632][T28901] [ 527.749279][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8484'. [ 527.830231][T28918] lo speed is unknown, defaulting to 1000 [ 527.836619][T28918] lo speed is unknown, defaulting to 1000 [ 527.853945][T28921] netlink: 'syz.0.8486': attribute type 1 has an invalid length. [ 527.871396][T28921] smc: adding net device bond0 with user defined pnetid SYZ2 [ 527.883162][T28921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.892744][T28921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8486'. [ 527.904146][T28921] smc: removing net device bond0 with user defined pnetid SYZ2 [ 527.912201][T28921] bond0 (unregistering): Released all slaves [ 527.942138][T28931] serio: Serial port ptm0 [ 527.982884][T28933] syz0: rxe_newlink: already configured on bond_slave_0 [ 528.857743][T28968] netlink: 'syz.4.8500': attribute type 1 has an invalid length. [ 528.905712][T28973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8500'. [ 528.932999][T28968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.972222][T28973] bond2 (unregistering): Released all slaves [ 529.577123][T28960] random: crng reseeded on system resumption [ 529.687977][T28985] netlink: 'syz.0.8505': attribute type 39 has an invalid length. [ 530.042184][T28995] lo speed is unknown, defaulting to 1000 [ 530.049472][T28995] lo speed is unknown, defaulting to 1000 [ 530.254927][T29015] bridge0: entered promiscuous mode [ 530.263262][T29015] bridge0: port 4(macvtap1) entered blocking state [ 530.269863][T29015] bridge0: port 4(macvtap1) entered disabled state [ 530.278044][T29015] macvtap1: entered allmulticast mode [ 530.283478][T29015] bridge0: entered allmulticast mode [ 530.289596][T29015] macvtap1: left allmulticast mode [ 530.294758][T29015] bridge0: left allmulticast mode [ 530.301103][T29015] bridge0: left promiscuous mode [ 530.376492][T29023] loop5: detected capacity change from 0 to 512 [ 530.383715][T29023] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.8516: inode #196608: comm syz.5.8516: iget: illegal inode # [ 530.397504][T29023] EXT4-fs (loop5): Remounting filesystem read-only [ 530.404076][T29023] EXT4-fs (loop5): no journal found [ 530.409299][T29023] EXT4-fs (loop5): can't get journal size [ 530.431470][T29023] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 530.441945][T29023] EXT4-fs (loop5): failed to initialize system zone (-22) [ 530.449228][T29023] EXT4-fs (loop5): mount failed [ 530.984847][T29041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8521'. [ 531.099448][T29044] lo speed is unknown, defaulting to 1000 [ 531.115183][T29044] lo speed is unknown, defaulting to 1000 [ 531.230002][T29050] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.271194][ T29] kauditd_printk_skb: 1064 callbacks suppressed [ 531.271215][ T29] audit: type=1400 audit(2000000579.767:58889): avc: denied { create } for pid=29051 comm="syz.5.8525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.319760][ T29] audit: type=1400 audit(2000000579.767:58890): avc: denied { setopt } for pid=29051 comm="syz.5.8525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.339582][ T29] audit: type=1400 audit(2000000579.798:58891): avc: denied { bind } for pid=29051 comm="syz.5.8525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.359287][ T29] audit: type=1400 audit(2000000579.798:58892): avc: denied { name_bind } for pid=29051 comm="syz.5.8525" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 531.381976][ T29] audit: type=1400 audit(2000000579.798:58893): avc: denied { node_bind } for pid=29051 comm="syz.5.8525" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 531.404027][ T29] audit: type=1400 audit(2000000579.798:58894): avc: denied { write } for pid=29051 comm="syz.5.8525" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.412581][T29052] bridge0: entered promiscuous mode [ 531.425653][ T29] audit: type=1400 audit(2000000579.798:58895): avc: denied { connect } for pid=29051 comm="syz.5.8525" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.452884][ T29] audit: type=1400 audit(2000000579.798:58896): avc: denied { name_connect } for pid=29051 comm="syz.5.8525" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 531.506702][T29052] bridge0: port 3(macvtap1) entered blocking state [ 531.513256][T29052] bridge0: port 3(macvtap1) entered disabled state [ 531.540074][T29052] macvtap1: entered allmulticast mode [ 531.545613][T29052] bridge0: entered allmulticast mode [ 531.565655][T29052] macvtap1: left allmulticast mode [ 531.570818][T29052] bridge0: left allmulticast mode [ 531.638530][T29052] bridge0: left promiscuous mode [ 531.649515][T29050] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.695989][ T29] audit: type=1400 audit(2000000579.935:58897): avc: denied { create } for pid=29049 comm="syz.4.8524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.735646][T29050] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.791079][ T29] audit: type=1400 audit(2000000580.302:58898): avc: denied { tracepoint } for pid=29059 comm="syz.5.8526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 531.831624][T29050] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.851104][T29063] netlink: 'syz.6.8527': attribute type 39 has an invalid length. [ 531.860578][T29064] netlink: 'syz.5.8528': attribute type 39 has an invalid length. [ 531.917181][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.934779][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.954396][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.981090][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.163479][T29074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8531'. [ 532.232919][T29078] ip6t_srh: unknown srh match flags 4000 [ 532.268202][T29081] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8532'. [ 532.305717][T29076] sd 0:0:1:0: device reset [ 532.534918][T29094] netlink: 'syz.2.8537': attribute type 1 has an invalid length. [ 532.569123][T29094] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.579389][T29094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8537'. [ 532.591066][T29094] bond4 (unregistering): Released all slaves [ 532.776904][T29097] lo speed is unknown, defaulting to 1000 [ 532.789651][T29113] veth1_macvtap: left promiscuous mode [ 532.803904][T29113] macsec0: entered promiscuous mode [ 532.817873][T29097] lo speed is unknown, defaulting to 1000 [ 532.932375][T29117] macvtap0: entered promiscuous mode [ 532.957605][T29117] macvtap0: left promiscuous mode [ 533.028517][T29121] serio: Serial port ptm0 [ 533.407822][T29124] serio: Serial port ptm1 [ 533.516936][T29130] syz0: rxe_newlink: already configured on bond_slave_0 [ 533.576478][T29135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8550'. [ 533.640579][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8551'. [ 533.652600][T29137] ip6gre12: entered allmulticast mode [ 533.671669][T29137] bond_slave_1: mtu less than device minimum [ 533.783821][T29142] netlink: 'syz.0.8552': attribute type 1 has an invalid length. [ 533.842493][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8552'. [ 533.910641][T29142] smc: adding net device bond0 with user defined pnetid SYZ2 [ 533.985430][T29142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.014933][T29139] smc: removing net device bond0 with user defined pnetid SYZ2 [ 534.022991][T29139] bond0 (unregistering): Released all slaves [ 534.032574][T29141] lo speed is unknown, defaulting to 1000 [ 534.043703][T29141] lo speed is unknown, defaulting to 1000 [ 534.283636][T29151] lo speed is unknown, defaulting to 1000 [ 534.289969][T29151] lo speed is unknown, defaulting to 1000 [ 534.313490][T29162] FAULT_INJECTION: forcing a failure. [ 534.313490][T29162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.326917][T29162] CPU: 0 UID: 0 PID: 29162 Comm: syz.4.8559 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 534.326954][T29162] Tainted: [W]=WARN [ 534.326961][T29162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.326973][T29162] Call Trace: [ 534.326979][T29162] [ 534.326986][T29162] __dump_stack+0x1d/0x30 [ 534.327014][T29162] dump_stack_lvl+0xe8/0x140 [ 534.327041][T29162] dump_stack+0x15/0x1b [ 534.327128][T29162] should_fail_ex+0x265/0x280 [ 534.327153][T29162] should_fail_alloc_page+0xf2/0x100 [ 534.327192][T29162] __alloc_frozen_pages_noprof+0xff/0x360 [ 534.327248][T29162] alloc_pages_mpol+0xb3/0x260 [ 534.327270][T29162] folio_alloc_mpol_noprof+0x39/0x80 [ 534.327293][T29162] shmem_get_folio_gfp+0x3cf/0xd60 [ 534.327336][T29162] shmem_write_begin+0xa8/0x190 [ 534.327423][T29162] generic_perform_write+0x184/0x490 [ 534.327455][T29162] shmem_file_write_iter+0xc5/0xf0 [ 534.327489][T29162] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 534.327513][T29162] vfs_write+0x52a/0x960 [ 534.327558][T29162] ksys_write+0xda/0x1a0 [ 534.327611][T29162] __x64_sys_write+0x40/0x50 [ 534.327759][T29162] x64_sys_call+0x2802/0x3000 [ 534.327784][T29162] do_syscall_64+0xd2/0x200 [ 534.327877][T29162] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 534.327913][T29162] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 534.328001][T29162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.328029][T29162] RIP: 0033:0x7f2164a4f6c9 [ 534.328049][T29162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.328068][T29162] RSP: 002b:00007f21634b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 534.328094][T29162] RAX: ffffffffffffffda RBX: 00007f2164ca5fa0 RCX: 00007f2164a4f6c9 [ 534.328155][T29162] RDX: 0000000000032600 RSI: 00002000000000c0 RDI: 0000000000000008 [ 534.328170][T29162] RBP: 00007f21634b7090 R08: 0000000000000000 R09: 0000000000000000 [ 534.328182][T29162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.328221][T29162] R13: 00007f2164ca6038 R14: 00007f2164ca5fa0 R15: 00007ffe43153d88 [ 534.328240][T29162] [ 534.679496][T29172] syz0: rxe_newlink: already configured on bond_slave_0 [ 535.880841][T29183] serio: Serial port ptm0 [ 535.985833][T29189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8567'. [ 536.176718][T29192] netlink: 'syz.6.8566': attribute type 1 has an invalid length. [ 536.227321][T29196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8566'. [ 536.258336][T29192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.444239][T29196] bond2 (unregistering): Released all slaves [ 536.548071][T29203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8571'. [ 536.594327][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 536.594347][ T29] audit: type=1400 audit(555.915:58985): avc: denied { read } for pid=29202 comm="syz.6.8571" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 536.662622][ T29] audit: type=1400 audit(555.915:58986): avc: denied { open } for pid=29202 comm="syz.6.8571" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 536.687038][ T29] audit: type=1400 audit(555.947:58987): avc: denied { ioctl } for pid=29202 comm="syz.6.8571" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 536.765541][ T29] audit: type=1400 audit(556.094:58988): avc: denied { append } for pid=29206 comm="syz.5.8572" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 536.898873][T29209] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 537.002521][ T29] audit: type=1400 audit(556.346:58989): avc: denied { ioctl } for pid=29202 comm="syz.6.8571" path="socket:[104892]" dev="sockfs" ino=104892 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 537.180319][ T29] audit: type=1400 audit(556.524:58990): avc: denied { append } for pid=29217 comm="syz.6.8576" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 537.263377][ T29] audit: type=1400 audit(556.608:58991): avc: denied { setopt } for pid=29217 comm="syz.6.8576" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 537.283532][ T29] audit: type=1400 audit(556.608:58992): avc: denied { connect } for pid=29217 comm="syz.6.8576" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 537.488506][T29221] lo speed is unknown, defaulting to 1000 [ 537.515903][T29221] lo speed is unknown, defaulting to 1000 [ 537.532063][ T29] audit: type=1400 audit(556.892:58993): avc: denied { getopt } for pid=29231 comm="syz.5.8582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 537.563132][T29232] FAULT_INJECTION: forcing a failure. [ 537.563132][T29232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.576341][T29232] CPU: 1 UID: 0 PID: 29232 Comm: syz.5.8582 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 537.576395][T29232] Tainted: [W]=WARN [ 537.576404][T29232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.576418][T29232] Call Trace: [ 537.576426][T29232] [ 537.576433][T29232] __dump_stack+0x1d/0x30 [ 537.576457][T29232] dump_stack_lvl+0xe8/0x140 [ 537.576477][T29232] dump_stack+0x15/0x1b [ 537.576567][T29232] should_fail_ex+0x265/0x280 [ 537.576591][T29232] should_fail+0xb/0x20 [ 537.576619][T29232] should_fail_usercopy+0x1a/0x20 [ 537.576642][T29232] _copy_from_user+0x1c/0xb0 [ 537.576689][T29232] sctp_getsockopt_default_send_param+0x6f/0x3e0 [ 537.576771][T29232] sctp_getsockopt+0x4b7/0xaa0 [ 537.576802][T29232] sock_common_getsockopt+0x60/0x70 [ 537.576911][T29232] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 537.576945][T29232] do_sock_getsockopt+0x200/0x240 [ 537.576984][T29232] __x64_sys_getsockopt+0x11e/0x1a0 [ 537.577021][T29232] x64_sys_call+0x2bca/0x3000 [ 537.577095][T29232] do_syscall_64+0xd2/0x200 [ 537.577120][T29232] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 537.577152][T29232] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 537.577213][T29232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.577237][T29232] RIP: 0033:0x7fcdbde4f6c9 [ 537.577252][T29232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.577272][T29232] RSP: 002b:00007fcdbc8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 537.577295][T29232] RAX: ffffffffffffffda RBX: 00007fcdbe0a5fa0 RCX: 00007fcdbde4f6c9 [ 537.577370][T29232] RDX: 000000000000000a RSI: 0000000000000084 RDI: 0000000000000004 [ 537.577387][T29232] RBP: 00007fcdbc8af090 R08: 0000200000000040 R09: 0000000000000000 [ 537.577436][T29232] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.577473][T29232] R13: 00007fcdbe0a6038 R14: 00007fcdbe0a5fa0 R15: 00007ffdef21a598 [ 537.577492][T29232] [ 537.794759][T29236] netlink: 'syz.0.8581': attribute type 1 has an invalid length. [ 537.831909][T29236] smc: adding net device bond0 with user defined pnetid SYZ2 [ 537.852582][T29238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8581'. [ 537.872438][T29236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.881413][T29242] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 537.908911][T29238] smc: removing net device bond0 with user defined pnetid SYZ2 [ 537.944221][T29238] bond0 (unregistering): Released all slaves [ 538.256199][T29261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8592'. [ 538.260619][ T29] audit: type=1400 audit(557.658:58994): avc: denied { write } for pid=29262 comm="syz.2.8591" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 538.292449][T29263] netlink: 'syz.2.8591': attribute type 10 has an invalid length. [ 538.310701][T29263] netlink: 'syz.2.8591': attribute type 10 has an invalid length. [ 538.339824][T29263] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 538.419432][T29261] ip6gre4: entered allmulticast mode [ 538.567217][T29275] FAULT_INJECTION: forcing a failure. [ 538.567217][T29275] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 538.580654][T29275] CPU: 0 UID: 0 PID: 29275 Comm: syz.6.8595 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 538.580707][T29275] Tainted: [W]=WARN [ 538.580716][T29275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.580789][T29275] Call Trace: [ 538.580797][T29275] [ 538.580807][T29275] __dump_stack+0x1d/0x30 [ 538.580932][T29275] dump_stack_lvl+0xe8/0x140 [ 538.580955][T29275] dump_stack+0x15/0x1b [ 538.580978][T29275] should_fail_ex+0x265/0x280 [ 538.581008][T29275] should_fail_alloc_page+0xf2/0x100 [ 538.581061][T29275] __alloc_frozen_pages_noprof+0xff/0x360 [ 538.581135][T29275] alloc_pages_mpol+0xb3/0x260 [ 538.581164][T29275] vma_alloc_folio_noprof+0x1aa/0x300 [ 538.581189][T29275] handle_mm_fault+0xec2/0x2be0 [ 538.581213][T29275] ? mt_find+0x208/0x320 [ 538.581259][T29275] do_user_addr_fault+0x3fe/0x1080 [ 538.581291][T29275] exc_page_fault+0x62/0xa0 [ 538.581341][T29275] asm_exc_page_fault+0x26/0x30 [ 538.581367][T29275] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 538.581397][T29275] Code: f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f9 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 538.581416][T29275] RSP: 0018:ffffc900027ffac8 EFLAGS: 00050206 [ 538.581444][T29275] RAX: ffff8881010b4ca0 RBX: ffff888008e35000 RCX: 0000000000001000 [ 538.581459][T29275] RDX: 0000000000000000 RSI: ffff888008e35000 RDI: 0000200000003000 [ 538.581477][T29275] RBP: 0000200000003000 R08: 0000000000000664 R09: 0000000000000000 [ 538.581493][T29275] R10: 0001888008e35000 R11: 0001888008e35fff R12: 0000200000004000 [ 538.581510][T29275] R13: ffffc900027ffc78 R14: 0000000000001000 R15: 00007ffffffff000 [ 538.581533][T29275] _copy_to_iter+0x141/0xe70 [ 538.581602][T29275] ? shmem_get_folio_gfp+0xa6a/0xd60 [ 538.581643][T29275] ? css_rstat_updated+0xb7/0x240 [ 538.581669][T29275] copy_page_to_iter+0x18f/0x2d0 [ 538.581735][T29275] shmem_file_read_iter+0x37d/0x540 [ 538.581771][T29275] aio_read+0x1dd/0x2e0 [ 538.581836][T29275] io_submit_one+0xab2/0x11d0 [ 538.581874][T29275] __se_sys_io_submit+0xfb/0x280 [ 538.581978][T29275] __x64_sys_io_submit+0x43/0x50 [ 538.582029][T29275] x64_sys_call+0x2d6c/0x3000 [ 538.582052][T29275] do_syscall_64+0xd2/0x200 [ 538.582073][T29275] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 538.582104][T29275] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 538.582203][T29275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.582224][T29275] RIP: 0033:0x7f2902ccf6c9 [ 538.582240][T29275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.582338][T29275] RSP: 002b:00007f290172f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 538.582362][T29275] RAX: ffffffffffffffda RBX: 00007f2902f25fa0 RCX: 00007f2902ccf6c9 [ 538.582388][T29275] RDX: 0000200000001d00 RSI: 0000000000000002 RDI: 00007f2903a5e000 [ 538.582426][T29275] RBP: 00007f290172f090 R08: 0000000000000000 R09: 0000000000000000 [ 538.582438][T29275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.582450][T29275] R13: 00007f2902f26038 R14: 00007f2902f25fa0 R15: 00007ffdefa28168 [ 538.582471][T29275] [ 538.945101][T29278] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 538.969476][T29282] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8598'. [ 539.230764][T29296] siw: device registration error -23 [ 539.324752][T29304] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 539.412033][T29313] syz0: rxe_newlink: already configured on bond_slave_0 [ 539.473104][T29319] netlink: 'syz.0.8611': attribute type 39 has an invalid length. [ 539.541382][T29321] netlink: 44 bytes leftover after parsing attributes in process `'. [ 539.559017][T29326] rdma_op ffff888106d22980 conn xmit_rdma 0000000000000000 [ 539.682942][T29336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8617'. [ 539.691907][T29336] netlink: 'syz.2.8617': attribute type 5 has an invalid length. [ 539.699665][T29336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8617'. [ 539.714468][T29336] geneve2: entered promiscuous mode [ 539.719848][T29336] geneve2: entered allmulticast mode [ 539.741155][T29331] lo speed is unknown, defaulting to 1000 [ 539.747552][T29331] lo speed is unknown, defaulting to 1000 [ 539.800451][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8619'. [ 539.858428][ T52] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 539.873568][ T52] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 539.892903][ T52] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 539.907482][ T52] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 540.464029][T29367] bridge_slave_0: left promiscuous mode [ 540.469799][T29367] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.132256][T29367] bridge_slave_1: left allmulticast mode [ 541.138071][T29367] bridge_slave_1: left promiscuous mode [ 541.143832][T29367] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.206535][T29367] bond0: (slave bond_slave_0): Releasing backup interface [ 541.225845][T29367] bond0: (slave bond_slave_1): Releasing backup interface [ 541.247605][T29367] team0: Port device C removed [ 541.254790][T29383] siw: device registration error -23 [ 541.263833][T29367] team0: Port device team_slave_1 removed [ 541.272070][T29367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.279546][T29367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.290947][T29367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.298413][T29367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.308897][T29367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 541.325099][ T36] lo speed is unknown, defaulting to 1000 [ 541.381217][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 541.381235][ T29] audit: type=1326 audit(560.933:59208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.6.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 541.411004][ T29] audit: type=1326 audit(560.933:59209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.6.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 541.434001][ T29] audit: type=1326 audit(560.933:59210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.6.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 541.456840][ T29] audit: type=1326 audit(560.933:59211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.6.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 541.480037][ T29] audit: type=1326 audit(560.933:59212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.6.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 541.503070][ T29] audit: type=1326 audit(560.933:59213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29388 comm="syz.6.8633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 541.536678][ T29] audit: type=1326 audit(561.017:59214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.5.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 541.559850][ T29] audit: type=1326 audit(561.017:59215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.5.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 541.583109][ T29] audit: type=1326 audit(561.017:59216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.5.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 541.607081][ T29] audit: type=1326 audit(561.017:59217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.5.8632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 541.624209][T29379] pimreg: entered allmulticast mode [ 541.753641][T29407] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 541.765933][T29405] netlink: 'syz.0.8637': attribute type 1 has an invalid length. [ 541.783597][T29400] __nla_validate_parse: 2 callbacks suppressed [ 541.783628][T29400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8636'. [ 541.809931][T29405] smc: adding net device bond0 with user defined pnetid SYZ2 [ 541.851862][T29405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.859047][T29413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8637'. [ 541.898266][T29413] smc: removing net device bond0 with user defined pnetid SYZ2 [ 541.924486][T29413] bond0 (unregistering): Released all slaves [ 542.072311][T29421] lo speed is unknown, defaulting to 1000 [ 542.090569][T29421] lo speed is unknown, defaulting to 1000 [ 542.181556][T29429] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.237772][T29429] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.300208][T29429] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.366292][T29429] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.439926][ T38] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.485565][ T38] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.500075][ T38] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.524872][ T38] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.536082][T29434] FAULT_INJECTION: forcing a failure. [ 542.536082][T29434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.549273][T29434] CPU: 1 UID: 0 PID: 29434 Comm: syz.6.8646 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 542.549373][T29434] Tainted: [W]=WARN [ 542.549381][T29434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.549396][T29434] Call Trace: [ 542.549403][T29434] [ 542.549411][T29434] __dump_stack+0x1d/0x30 [ 542.549437][T29434] dump_stack_lvl+0xe8/0x140 [ 542.549461][T29434] dump_stack+0x15/0x1b [ 542.549481][T29434] should_fail_ex+0x265/0x280 [ 542.549556][T29434] should_fail+0xb/0x20 [ 542.549574][T29434] should_fail_usercopy+0x1a/0x20 [ 542.549640][T29434] _copy_from_iter+0xd2/0xe80 [ 542.549667][T29434] ? __build_skb_around+0x1ab/0x200 [ 542.549702][T29434] ? __alloc_skb+0x223/0x320 [ 542.549791][T29434] netlink_sendmsg+0x471/0x6b0 [ 542.549816][T29434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.549914][T29434] __sock_sendmsg+0x145/0x180 [ 542.549943][T29434] ____sys_sendmsg+0x31e/0x4e0 [ 542.549984][T29434] ___sys_sendmsg+0x17b/0x1d0 [ 542.550019][T29434] __x64_sys_sendmsg+0xd4/0x160 [ 542.550047][T29434] x64_sys_call+0x191e/0x3000 [ 542.550123][T29434] do_syscall_64+0xd2/0x200 [ 542.550147][T29434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 542.550188][T29434] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 542.550240][T29434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.550265][T29434] RIP: 0033:0x7f2902ccf6c9 [ 542.550283][T29434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.550305][T29434] RSP: 002b:00007f290172f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.550328][T29434] RAX: ffffffffffffffda RBX: 00007f2902f25fa0 RCX: 00007f2902ccf6c9 [ 542.550343][T29434] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000004 [ 542.550409][T29434] RBP: 00007f290172f090 R08: 0000000000000000 R09: 0000000000000000 [ 542.550423][T29434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.550437][T29434] R13: 00007f2902f26038 R14: 00007f2902f25fa0 R15: 00007ffdefa28168 [ 542.550458][T29434] [ 542.828885][T29440] loop5: detected capacity change from 0 to 128 [ 542.851258][T29437] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8647' sets config #0 [ 542.868708][T29437] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8647' sets config #1 [ 542.904368][T29440] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 542.912025][T29440] FAT-fs (loop5): Filesystem has been set read-only [ 542.936198][T29440] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 543.004880][T29449] netlink: 'syz.4.8647': attribute type 4 has an invalid length. [ 543.021711][T29442] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 543.021711][T29442] program syz.0.8648 not setting count and/or reply_len properly [ 543.070726][ T3400] lo speed is unknown, defaulting to 1000 [ 543.076561][ T3400] sz1: Port: 1 Link DOWN [ 543.081897][T29437] lo speed is unknown, defaulting to 1000 [ 543.091608][ T3400] lo speed is unknown, defaulting to 1000 [ 543.102976][T29451] loop5: detected capacity change from 0 to 1764 [ 543.122980][T29437] lo speed is unknown, defaulting to 1000 [ 543.143112][T29451] isofs_fill_super: get root inode failed [ 543.362100][T29461] loop5: detected capacity change from 0 to 512 [ 543.436357][T29461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.572400][T21447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.645105][T29481] netlink: 'syz.0.8662': attribute type 1 has an invalid length. [ 543.659175][T29481] smc: adding net device bond0 with user defined pnetid SYZ2 [ 543.668063][T29481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.676021][T29477] lo speed is unknown, defaulting to 1000 [ 543.689766][T29481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8662'. [ 543.701030][T29481] smc: removing net device bond0 with user defined pnetid SYZ2 [ 543.711693][T29481] bond0 (unregistering): Released all slaves [ 543.717993][T29493] loop5: detected capacity change from 0 to 512 [ 543.724465][T29477] lo speed is unknown, defaulting to 1000 [ 543.757961][T29493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.854581][T21447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.876478][T29504] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8667'. [ 543.912606][T29511] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 543.954201][T29514] loop5: detected capacity change from 0 to 164 [ 543.969995][T29514] syz.5.8671: attempt to access beyond end of device [ 543.969995][T29514] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 544.003305][T29514] syz.5.8671: attempt to access beyond end of device [ 544.003305][T29514] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 544.082790][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8675'. [ 544.093721][T29505] lo speed is unknown, defaulting to 1000 [ 544.108393][T29530] bridge0: entered promiscuous mode [ 544.115052][T29530] bridge0: port 3(macvtap1) entered blocking state [ 544.121697][T29530] bridge0: port 3(macvtap1) entered disabled state [ 544.128635][T29530] macvtap1: entered allmulticast mode [ 544.134059][T29530] bridge0: entered allmulticast mode [ 544.140088][T29530] macvtap1: left allmulticast mode [ 544.143048][T29534] loop5: detected capacity change from 0 to 128 [ 544.145240][T29530] bridge0: left allmulticast mode [ 544.158124][T29530] bridge0: left promiscuous mode [ 544.166937][T29505] lo speed is unknown, defaulting to 1000 [ 544.248552][T29505] chnl_net:caif_netlink_parms(): no params data found [ 544.292338][T29505] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.299822][T29505] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.307187][T29505] bridge_slave_0: entered allmulticast mode [ 544.314048][T29505] bridge_slave_0: entered promiscuous mode [ 544.321400][T29505] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.322639][T29545] FAULT_INJECTION: forcing a failure. [ 544.322639][T29545] name failslab, interval 1, probability 0, space 0, times 0 [ 544.328566][T29505] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.341126][T29545] CPU: 0 UID: 0 PID: 29545 Comm: syz.5.8679 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 544.341237][T29545] Tainted: [W]=WARN [ 544.341261][T29545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 544.341311][T29545] Call Trace: [ 544.341318][T29545] [ 544.341326][T29545] __dump_stack+0x1d/0x30 [ 544.341351][T29545] dump_stack_lvl+0xe8/0x140 [ 544.341373][T29545] dump_stack+0x15/0x1b [ 544.341393][T29545] should_fail_ex+0x265/0x280 [ 544.341414][T29545] should_failslab+0x8c/0xb0 [ 544.341490][T29545] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 544.341580][T29545] ? sidtab_sid2str_get+0xa0/0x130 [ 544.341614][T29545] kmemdup_noprof+0x2b/0x70 [ 544.341703][T29545] sidtab_sid2str_get+0xa0/0x130 [ 544.341734][T29545] security_sid_to_context_core+0x1eb/0x2e0 [ 544.341786][T29545] security_sid_to_context+0x27/0x40 [ 544.341816][T29545] avc_audit_post_callback+0x10f/0x520 [ 544.341852][T29545] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 544.341961][T29545] common_lsm_audit+0x1bb/0x230 [ 544.341988][T29545] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 544.342109][T29545] ? avc_denied+0xe4/0x100 [ 544.342129][T29545] slow_avc_audit+0x104/0x140 [ 544.342165][T29545] avc_has_perm+0x13a/0x180 [ 544.342188][T29545] file_has_perm+0x35c/0x3a0 [ 544.342248][T29545] selinux_file_permission+0x2f0/0x320 [ 544.342282][T29545] security_file_permission+0x3e/0x80 [ 544.342361][T29545] vfs_read+0x139/0x770 [ 544.342407][T29545] ? __rcu_read_unlock+0x4f/0x70 [ 544.342434][T29545] ? __fget_files+0x184/0x1c0 [ 544.342525][T29545] ksys_read+0xda/0x1a0 [ 544.342584][T29545] __x64_sys_read+0x40/0x50 [ 544.342610][T29545] x64_sys_call+0x27c0/0x3000 [ 544.342640][T29545] do_syscall_64+0xd2/0x200 [ 544.342674][T29545] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 544.342769][T29545] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 544.342803][T29545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.342826][T29545] RIP: 0033:0x7fcdbde4f6c9 [ 544.342843][T29545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.342902][T29545] RSP: 002b:00007fcdbc8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 544.342925][T29545] RAX: ffffffffffffffda RBX: 00007fcdbe0a5fa0 RCX: 00007fcdbde4f6c9 [ 544.343016][T29545] RDX: 00000000000000a6 RSI: 0000200000000840 RDI: 0000000000000003 [ 544.343082][T29545] RBP: 00007fcdbc8af090 R08: 0000000000000000 R09: 0000000000000000 [ 544.343095][T29545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.343166][T29545] R13: 00007fcdbe0a6038 R14: 00007fcdbe0a5fa0 R15: 00007ffdef21a598 [ 544.343186][T29545] [ 544.481112][T29547] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 544.483405][T29505] bridge_slave_1: entered allmulticast mode [ 544.593385][T29552] loop5: detected capacity change from 0 to 1024 [ 544.596861][T29505] bridge_slave_1: entered promiscuous mode [ 544.623236][T29552] EXT4-fs: Ignoring removed orlov option [ 544.645923][T29552] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 544.691604][T29505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.702274][T29552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.710028][T29558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8684'. [ 544.720276][T29505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.849393][T29505] team0: Port device team_slave_0 added [ 544.857663][T29505] team0: Port device team_slave_1 added [ 544.866308][T21447] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.890228][T29505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.897268][T29505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.923472][T29505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.934275][T29567] 9pnet: Could not find request transport: tcpfective_cpus [ 544.950812][T29505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.957868][T29505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.984238][T29505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.018769][T29570] netlink: 'syz.4.8688': attribute type 39 has an invalid length. [ 545.039373][T29505] hsr_slave_0: entered promiscuous mode [ 545.046089][T29505] hsr_slave_1: entered promiscuous mode [ 545.052733][T29505] debugfs: 'hsr0' already exists in 'hsr' [ 545.058496][T29505] Cannot create hsr debugfs directory [ 545.173853][T29505] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.210088][T29582] lo speed is unknown, defaulting to 1000 [ 545.217320][T29582] lo speed is unknown, defaulting to 1000 [ 545.233005][T29505] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.299022][T29505] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.348381][T29505] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.416508][T29505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 545.427532][T29505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 545.438199][T29505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 545.448567][T29505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 545.557253][T29505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.570814][T29505] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.581240][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.588366][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.615923][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.623080][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.714801][T29594] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 545.739783][T29505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.855630][T29505] veth0_vlan: entered promiscuous mode [ 545.865689][T29613] lo speed is unknown, defaulting to 1000 [ 545.867633][T29505] veth1_vlan: entered promiscuous mode [ 545.877931][T29613] lo speed is unknown, defaulting to 1000 [ 545.905704][T29505] veth0_macvtap: entered promiscuous mode [ 545.933115][T29505] veth1_macvtap: entered promiscuous mode [ 545.975454][T29505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.006250][T29505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.024727][ T8705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.040576][ T8705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.061751][ T8705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.080931][ T8705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.420831][T29637] loop5: detected capacity change from 0 to 512 [ 546.428090][T29637] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.8703: inode #196608: comm syz.5.8703: iget: illegal inode # [ 546.440446][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 546.440462][ T29] audit: type=1326 audit(566.245:59429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29638 comm="syz.0.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34eef6c9 code=0x7ffc0000 [ 546.472598][T29637] EXT4-fs (loop5): Remounting filesystem read-only [ 546.479290][T29637] EXT4-fs (loop5): no journal found [ 546.484608][T29637] EXT4-fs (loop5): can't get journal size [ 546.485680][ T29] audit: type=1326 audit(566.287:59430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29638 comm="syz.0.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f9a34eef6c9 code=0x7ffc0000 [ 546.513629][ T29] audit: type=1326 audit(566.287:59431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29638 comm="syz.0.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34eef6c9 code=0x7ffc0000 [ 546.536885][ T29] audit: type=1326 audit(566.287:59432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29638 comm="syz.0.8702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a34eef6c9 code=0x7ffc0000 [ 546.561993][T29637] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 546.571976][T29637] EXT4-fs (loop5): failed to initialize system zone (-22) [ 546.579269][T29637] EXT4-fs (loop5): mount failed [ 546.620663][T29645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8706'. [ 546.651207][T29647] FAULT_INJECTION: forcing a failure. [ 546.651207][T29647] name failslab, interval 1, probability 0, space 0, times 0 [ 546.663902][T29647] CPU: 0 UID: 0 PID: 29647 Comm: syz.2.8707 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 546.663940][T29647] Tainted: [W]=WARN [ 546.663947][T29647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.664026][T29647] Call Trace: [ 546.664034][T29647] [ 546.664045][T29647] __dump_stack+0x1d/0x30 [ 546.664074][T29647] dump_stack_lvl+0xe8/0x140 [ 546.664099][T29647] dump_stack+0x15/0x1b [ 546.664121][T29647] should_fail_ex+0x265/0x280 [ 546.664145][T29647] should_failslab+0x8c/0xb0 [ 546.664205][T29647] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 546.664240][T29647] ? __alloc_skb+0x101/0x320 [ 546.664354][T29647] __alloc_skb+0x101/0x320 [ 546.664406][T29647] netlink_dump+0x10d/0x8a0 [ 546.664437][T29647] ? genl_start+0x117/0x390 [ 546.664462][T29647] ? should_failslab+0x8c/0xb0 [ 546.664515][T29647] __netlink_dump_start+0x43e/0x520 [ 546.664612][T29647] genl_family_rcv_msg_dumpit+0x115/0x180 [ 546.664640][T29647] ? __pfx_genl_start+0x10/0x10 [ 546.664663][T29647] ? __pfx_genl_dumpit+0x10/0x10 [ 546.664688][T29647] ? __pfx_genl_done+0x10/0x10 [ 546.664726][T29647] genl_rcv_msg+0x3f0/0x460 [ 546.664758][T29647] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 546.664872][T29647] netlink_rcv_skb+0x123/0x220 [ 546.664912][T29647] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.664946][T29647] genl_rcv+0x28/0x40 [ 546.665040][T29647] netlink_unicast+0x5c0/0x690 [ 546.665071][T29647] netlink_sendmsg+0x58b/0x6b0 [ 546.665095][T29647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.665141][T29647] __sock_sendmsg+0x145/0x180 [ 546.665251][T29647] ____sys_sendmsg+0x31e/0x4e0 [ 546.665294][T29647] ___sys_sendmsg+0x17b/0x1d0 [ 546.665332][T29647] __x64_sys_sendmsg+0xd4/0x160 [ 546.665377][T29647] x64_sys_call+0x191e/0x3000 [ 546.665406][T29647] do_syscall_64+0xd2/0x200 [ 546.665449][T29647] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 546.665560][T29647] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 546.665598][T29647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.665683][T29647] RIP: 0033:0x7f79f66ef6c9 [ 546.665703][T29647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.665722][T29647] RSP: 002b:00007f79f514f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.665749][T29647] RAX: ffffffffffffffda RBX: 00007f79f6945fa0 RCX: 00007f79f66ef6c9 [ 546.665764][T29647] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 546.665780][T29647] RBP: 00007f79f514f090 R08: 0000000000000000 R09: 0000000000000000 [ 546.665795][T29647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.665810][T29647] R13: 00007f79f6946038 R14: 00007f79f6945fa0 R15: 00007fff5dcb1e48 [ 546.665829][T29647] [ 547.022756][ T29] audit: type=1326 audit(566.854:59433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.6.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 547.023185][T29658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8711'. [ 547.046082][ T29] audit: type=1326 audit(566.854:59434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.6.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 547.046144][ T29] audit: type=1326 audit(566.854:59435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.6.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 547.046170][ T29] audit: type=1326 audit(566.854:59436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.6.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 547.046197][ T29] audit: type=1326 audit(566.854:59437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.6.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 547.147675][ T29] audit: type=1326 audit(566.854:59438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29652 comm="syz.6.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2902ccf6c9 code=0x7ffc0000 [ 547.220939][T29660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8713'. [ 547.308695][T29663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8711'. [ 547.345154][T29668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8715'. [ 547.400020][T29653] lo speed is unknown, defaulting to 1000 [ 547.541034][T29673] netlink: 'syz.5.8716': attribute type 39 has an invalid length. [ 547.650582][T29653] lo speed is unknown, defaulting to 1000 [ 547.916747][T29694] nfs4: Bad value for 'source' [ 547.923905][T29694] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8722'. [ 547.933440][T29694] unsupported nlmsg_type 40 [ 547.965759][T29699] loop5: detected capacity change from 0 to 512 [ 547.973325][T29699] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.8724: inode #196608: comm syz.5.8724: iget: illegal inode # [ 547.988564][T29699] EXT4-fs (loop5): Remounting filesystem read-only [ 547.995177][T29699] EXT4-fs (loop5): no journal found [ 548.000472][T29699] EXT4-fs (loop5): can't get journal size [ 548.007120][T29699] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 548.016778][T29699] EXT4-fs (loop5): failed to initialize system zone (-22) [ 548.023975][T29699] EXT4-fs (loop5): mount failed [ 548.206668][T29697] lo speed is unknown, defaulting to 1000 [ 548.235692][T29697] lo speed is unknown, defaulting to 1000 [ 548.338560][T29716] netlink: 'syz.4.8729': attribute type 39 has an invalid length. [ 548.411134][T29722] bridge0: port 1(macvtap1) entered blocking state [ 548.417729][T29722] bridge0: port 1(macvtap1) entered disabled state [ 548.429974][T29722] macvtap1: entered allmulticast mode [ 548.435506][T29722] bridge0: entered allmulticast mode [ 548.442451][T29722] macvtap1: left allmulticast mode [ 548.447705][T29722] bridge0: left allmulticast mode [ 548.489814][T29732] netlink: 'syz.4.8734': attribute type 39 has an invalid length. [ 548.619763][T29740] lo speed is unknown, defaulting to 1000 [ 548.627485][T29740] lo speed is unknown, defaulting to 1000 [ 548.646274][T29747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8740'. [ 548.712708][T29754] netlink: 'syz.4.8743': attribute type 39 has an invalid length. [ 548.801843][T29758] serio: Serial port ptm0 [ 548.819358][T29760] bridge0: entered promiscuous mode [ 548.825657][T29760] bridge0: port 1(macvtap1) entered blocking state [ 548.832459][T29760] bridge0: port 1(macvtap1) entered disabled state [ 548.840737][T29760] macvtap1: entered allmulticast mode [ 548.846181][T29760] bridge0: entered allmulticast mode [ 548.852770][T29760] macvtap1: left allmulticast mode [ 548.857959][T29760] bridge0: left allmulticast mode [ 548.865678][T29760] bridge0: left promiscuous mode [ 548.943543][T29773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8750'. [ 548.967925][T29773] bridge0: entered promiscuous mode [ 548.974829][T29773] bridge0: port 3(macvtap1) entered blocking state [ 548.981479][T29773] bridge0: port 3(macvtap1) entered disabled state [ 548.988237][T29775] FAULT_INJECTION: forcing a failure. [ 548.988237][T29775] name failslab, interval 1, probability 0, space 0, times 0 [ 548.988595][T29773] macvtap1: entered allmulticast mode [ 549.000978][T29775] CPU: 0 UID: 0 PID: 29775 Comm: syz.5.8751 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 549.001015][T29775] Tainted: [W]=WARN [ 549.001022][T29775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 549.001074][T29775] Call Trace: [ 549.001082][T29775] [ 549.001091][T29775] __dump_stack+0x1d/0x30 [ 549.001118][T29775] dump_stack_lvl+0xe8/0x140 [ 549.001139][T29775] dump_stack+0x15/0x1b [ 549.001159][T29775] should_fail_ex+0x265/0x280 [ 549.001181][T29775] should_failslab+0x8c/0xb0 [ 549.001292][T29775] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 549.001326][T29775] ? page_pool_create_percpu+0x4d/0x630 [ 549.001358][T29775] page_pool_create_percpu+0x4d/0x630 [ 549.001444][T29775] ? bpf_test_run_xdp_live+0x119/0x11c0 [ 549.001481][T29775] page_pool_create+0x1a/0x30 [ 549.001508][T29775] bpf_test_run_xdp_live+0x133/0x11c0 [ 549.001614][T29775] ? cpus_read_unlock+0x6e/0xc0 [ 549.001645][T29775] ? __static_call_update+0x37c/0x3b0 [ 549.001676][T29775] ? 0xffffffffa02053c0 [ 549.001692][T29775] ? synchronize_rcu+0x45/0x320 [ 549.001713][T29775] ? 0xffffffffa02053c0 [ 549.001728][T29775] ? 0xffffffffa02053c0 [ 549.001785][T29775] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 549.001815][T29775] ? 0xffffffffa02053c0 [ 549.001838][T29775] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 549.001867][T29775] bpf_prog_test_run_xdp+0x525/0x970 [ 549.001957][T29775] ? kstrtouint+0x71/0xc0 [ 549.002027][T29775] ? __rcu_read_unlock+0x4f/0x70 [ 549.002058][T29775] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 549.002090][T29775] bpf_prog_test_run+0x22a/0x390 [ 549.002167][T29775] __sys_bpf+0x4c0/0x7c0 [ 549.002209][T29775] __x64_sys_bpf+0x41/0x50 [ 549.002327][T29775] x64_sys_call+0x2aee/0x3000 [ 549.002357][T29775] do_syscall_64+0xd2/0x200 [ 549.002378][T29775] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 549.002419][T29775] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 549.002453][T29775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.002477][T29775] RIP: 0033:0x7fcdbde4f6c9 [ 549.002494][T29775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.002515][T29775] RSP: 002b:00007fcdbc8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.002599][T29775] RAX: ffffffffffffffda RBX: 00007fcdbe0a5fa0 RCX: 00007fcdbde4f6c9 [ 549.002614][T29775] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 549.002628][T29775] RBP: 00007fcdbc8af090 R08: 0000000000000000 R09: 0000000000000000 [ 549.002671][T29775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.002685][T29775] R13: 00007fcdbe0a6038 R14: 00007fcdbe0a5fa0 R15: 00007ffdef21a598 [ 549.002704][T29775] [ 549.274875][T29773] bridge0: entered allmulticast mode [ 549.280841][T29773] macvtap1: left allmulticast mode [ 549.286043][T29773] bridge0: left allmulticast mode [ 549.292002][T29773] bridge0: left promiscuous mode [ 549.353126][T29783] netlink: 'syz.6.8754': attribute type 39 has an invalid length. [ 549.465499][T29794] bridge0: entered promiscuous mode [ 549.472278][T29794] bridge0: port 3(macvtap1) entered blocking state [ 549.478872][T29794] bridge0: port 3(macvtap1) entered disabled state [ 549.486165][T29794] macvtap1: entered allmulticast mode [ 549.491659][T29794] bridge0: entered allmulticast mode [ 549.497583][T29794] macvtap1: left allmulticast mode [ 549.502749][T29794] bridge0: left allmulticast mode [ 549.521891][T29794] bridge0: left promiscuous mode [ 549.643328][T29812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8767'. [ 549.664938][T29812] bridge0: entered promiscuous mode [ 549.671574][T29812] bridge0: port 4(macvtap1) entered blocking state [ 549.678243][T29812] bridge0: port 4(macvtap1) entered disabled state [ 549.684953][T29812] macvtap1: entered allmulticast mode [ 549.690380][T29812] bridge0: entered allmulticast mode [ 549.696320][T29812] macvtap1: left allmulticast mode [ 549.701550][T29812] bridge0: left allmulticast mode [ 549.707133][T29812] bridge0: left promiscuous mode [ 549.790979][T29819] netlink: 'syz.4.8769': attribute type 39 has an invalid length. [ 549.848945][T29827] serio: Serial port ptm0 [ 549.910936][T29835] bridge0: entered promiscuous mode [ 549.917481][T29835] bridge0: port 4(macvtap1) entered blocking state [ 549.924066][T29835] bridge0: port 4(macvtap1) entered disabled state [ 549.930939][T29835] macvtap1: entered allmulticast mode [ 549.936368][T29835] bridge0: entered allmulticast mode [ 549.941985][T29835] macvtap1: left allmulticast mode [ 549.947158][T29835] bridge0: left allmulticast mode [ 549.952863][T29835] bridge0: left promiscuous mode [ 550.179274][T29849] lo speed is unknown, defaulting to 1000 [ 550.185801][T29849] lo speed is unknown, defaulting to 1000 [ 550.298911][T29856] netlink: 'syz.2.8784': attribute type 39 has an invalid length. [ 550.440602][T29864] bridge0: entered promiscuous mode [ 550.450812][T29864] bridge0: port 3(macvtap1) entered blocking state [ 550.457641][T29864] bridge0: port 3(macvtap1) entered disabled state [ 550.467622][T29864] macvtap1: entered allmulticast mode [ 550.473165][T29864] bridge0: entered allmulticast mode [ 550.479436][T29864] macvtap1: left allmulticast mode [ 550.484689][T29864] bridge0: left allmulticast mode [ 550.491822][T29864] bridge0: left promiscuous mode [ 550.593524][T29877] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 550.615988][T29875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.670535][T29875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.797516][T29889] netlink: 'syz.6.8796': attribute type 39 has an invalid length. [ 550.866286][T29883] loop5: detected capacity change from 0 to 128 [ 550.880444][T29847] ================================================================== [ 550.888667][T29847] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 550.898527][T29847] [ 550.900857][T29847] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 550.908925][T29847] tick_do_update_jiffies64+0x113/0x1c0 [ 550.914582][T29847] tick_nohz_handler+0x7f/0x2d0 [ 550.919447][T29847] __hrtimer_run_queues+0x20f/0x5a0 [ 550.924756][T29847] hrtimer_interrupt+0x21a/0x460 [ 550.929793][T29847] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 550.936136][T29847] sysvec_apic_timer_interrupt+0x6f/0x80 [ 550.941786][T29847] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.947774][T29847] kcsan_setup_watchpoint+0x415/0x430 [ 550.953158][T29847] folios_put_refs+0xa1/0x2d0 [ 550.957842][T29847] free_pages_and_swap_cache+0x278/0x400 [ 550.963514][T29847] tlb_flush_mmu+0x2dc/0x450 [ 550.968116][T29847] unmap_page_range+0x22c8/0x25c0 [ 550.973149][T29847] unmap_vmas+0x23d/0x3a0 [ 550.977479][T29847] exit_mmap+0x1b0/0x6c0 [ 550.981725][T29847] __mmput+0x28/0x1c0 [ 550.985714][T29847] mmput+0x40/0x50 [ 550.989444][T29847] exit_mm+0xe4/0x180 [ 550.993426][T29847] do_exit+0x417/0x15c0 [ 550.997626][T29847] do_group_exit+0xff/0x140 [ 551.002132][T29847] get_signal+0xe58/0xf70 [ 551.006466][T29847] arch_do_signal_or_restart+0x96/0x440 [ 551.012020][T29847] exit_to_user_mode_loop+0x77/0x110 [ 551.017401][T29847] do_syscall_64+0x1d6/0x200 [ 551.021998][T29847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.027898][T29847] [ 551.030229][T29847] read to 0xffffffff868099c0 of 8 bytes by task 29847 on cpu 1: [ 551.037949][T29847] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 551.044228][T29847] count_shadow_nodes+0x6a/0x230 [ 551.049257][T29847] do_shrink_slab+0x63/0x680 [ 551.053880][T29847] shrink_slab+0x448/0x760 [ 551.058326][T29847] shrink_node+0x6c3/0x2120 [ 551.062847][T29847] do_try_to_free_pages+0x3f6/0xcd0 [ 551.068056][T29847] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 551.073959][T29847] try_charge_memcg+0x383/0xa10 [ 551.078816][T29847] charge_memcg+0x51/0xc0 [ 551.083155][T29847] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 551.089148][T29847] __read_swap_cache_async+0x17b/0x2d0 [ 551.094612][T29847] swap_cluster_readahead+0x262/0x3c0 [ 551.099988][T29847] swapin_readahead+0xde/0x6f0 [ 551.104753][T29847] do_swap_page+0x2ae/0x2370 [ 551.109357][T29847] handle_mm_fault+0x9a5/0x2be0 [ 551.114217][T29847] do_user_addr_fault+0x630/0x1080 [ 551.119339][T29847] exc_page_fault+0x62/0xa0 [ 551.123947][T29847] asm_exc_page_fault+0x26/0x30 [ 551.128830][T29847] [ 551.131162][T29847] value changed: 0x0000000100006997 -> 0x0000000100006998 [ 551.138268][T29847] [ 551.140678][T29847] Reported by Kernel Concurrency Sanitizer on: [ 551.146832][T29847] CPU: 1 UID: 0 PID: 29847 Comm: syz.4.8781 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 551.158731][T29847] Tainted: [W]=WARN [ 551.162531][T29847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.172696][T29847] ================================================================== [ 551.190516][T29847] syz.4.8781 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 551.202114][T29847] CPU: 1 UID: 0 PID: 29847 Comm: syz.4.8781 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 551.202148][T29847] Tainted: [W]=WARN [ 551.202155][T29847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.202203][T29847] Call Trace: [ 551.202209][T29847] [ 551.202216][T29847] __dump_stack+0x1d/0x30 [ 551.202240][T29847] dump_stack_lvl+0xe8/0x140 [ 551.202333][T29847] dump_stack+0x15/0x1b [ 551.202351][T29847] dump_header+0x81/0x220 [ 551.202370][T29847] oom_kill_process+0x342/0x400 [ 551.202400][T29847] out_of_memory+0x979/0xb80 [ 551.202432][T29847] try_charge_memcg+0x610/0xa10 [ 551.202512][T29847] charge_memcg+0x51/0xc0 [ 551.202534][T29847] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 551.202566][T29847] __read_swap_cache_async+0x17b/0x2d0 [ 551.202590][T29847] swap_cluster_readahead+0x262/0x3c0 [ 551.202616][T29847] swapin_readahead+0xde/0x6f0 [ 551.202712][T29847] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 551.202743][T29847] ? __rcu_read_unlock+0x34/0x70 [ 551.202767][T29847] ? __rcu_read_unlock+0x4f/0x70 [ 551.202809][T29847] ? swap_cache_get_folio+0x277/0x280 [ 551.202830][T29847] do_swap_page+0x2ae/0x2370 [ 551.202925][T29847] ? css_rstat_updated+0xb7/0x240 [ 551.202958][T29847] ? __pfx_default_wake_function+0x10/0x10 [ 551.203005][T29847] handle_mm_fault+0x9a5/0x2be0 [ 551.203030][T29847] ? vma_start_read+0x141/0x1f0 [ 551.203064][T29847] do_user_addr_fault+0x630/0x1080 [ 551.203114][T29847] exc_page_fault+0x62/0xa0 [ 551.203160][T29847] asm_exc_page_fault+0x26/0x30 [ 551.203180][T29847] RIP: 0033:0x7f2164a77460 [ 551.203251][T29847] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00 [ 551.203270][T29847] RSP: 002b:00007ffe43153e78 EFLAGS: 00010202 [ 551.203287][T29847] RAX: 00000000fffffffa RBX: 00007f2164ca5fa0 RCX: 0000000000000000 [ 551.203300][T29847] RDX: 00007ffe43153ec0 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.203313][T29847] RBP: 00007f2164ca7da0 R08: 0000000034ee6293 R09: 7fffffffffffffff [ 551.203326][T29847] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000008b613 [ 551.203398][T29847] R13: 00007f2164ca6090 R14: ffffffffffffffff R15: 00007ffe43154000 [ 551.203416][T29847] [ 551.203424][T29847] memory: usage 307200kB, limit 307200kB, failcnt 502 [ 551.222659][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 551.222675][ T29] audit: type=1326 audit(579.260:60169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29880 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdbde4df10 code=0x7ffc0000 [ 551.229073][T29847] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 551.229093][T29847] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 551.229109][T29847] Memory cgroup stats for [ 551.233563][ T29] audit: type=1326 audit(579.281:60170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29880 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcdbde4e417 code=0x7ffc0000 [ 551.235429][T29847] /syz4 [ 551.239737][ T29] audit: type=1326 audit(579.281:60171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29880 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdbde4df10 code=0x7ffc0000 [ 551.244362][T29847] : [ 551.260962][ T29] audit: type=1326 audit(579.292:60172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29880 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 551.264496][T29847] cache 0 [ 551.268676][ T29] audit: type=1326 audit(579.302:60173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29880 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 551.273098][T29847] rss 4096 [ 551.278888][ T29] audit: type=1326 audit(579.302:60174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29880 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 551.284532][T29847] shmem 0 [ 551.289817][ T29] audit: type=1326 audit(579.302:60175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29880 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 551.294591][T29847] mapped_file 0 [ 551.294603][T29847] dirty 0 [ 551.360201][ T29] audit: type=1326 audit(579.355:60176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29874 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f6721f85 code=0x7ffc0000 [ 551.360236][ T29] audit: type=1326 audit(579.365:60177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29880 comm="syz.5.8794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdbde4f6c9 code=0x7ffc0000 [ 551.396034][ T29] audit: type=1326 audit(579.449:60178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29874 comm="syz.2.8791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f6721f85 code=0x7ffc0000 [ 551.402036][T29847] writeback 4096 [ 551.520796][T29892] syz.5.8794: attempt to access beyond end of device [ 551.520796][T29892] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 551.534914][T29847] workingset_refault_anon 204 [ 551.538740][T29892] syz.5.8794: attempt to access beyond end of device [ 551.538740][T29892] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 551.560427][T29847] workingset_refault_file 5541 [ 551.560450][T29847] swap 712704 [ 551.560459][T29847] swapcached 8192 [ 551.560466][T29847] pgpgin 964495 [ 551.560473][T29847] pgpgout 964493 [ 551.560480][T29847] pgfault 665938 [ 551.560487][T29847] pgmajfault 148 [ 551.560506][T29847] inactive_anon 8192 [ 551.560513][T29847] active_anon 0 [ 551.560521][T29847] inactive_file 0 [ 551.560528][T29847] active_file 0 [ 551.567588][T29892] syz.5.8794: attempt to access beyond end of device [ 551.567588][T29892] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 551.587120][T29847] unevictable 0 [ 551.593482][T29892] syz.5.8794: attempt to access beyond end of device [ 551.593482][T29892] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 551.613117][T29847] hierarchical_memory_limit 314572800 [ 551.633232][T29892] syz.5.8794: attempt to access beyond end of device [ 551.633232][T29892] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 551.639363][T29847] hierarchical_memsw_limit 9223372036854771712 [ 551.846675][T29847] total_cache 0 [ 551.850204][T29847] total_rss 4096 [ 551.853759][T29847] total_shmem 0 [ 551.857337][T29847] total_mapped_file 0 [ 551.861343][T29847] total_dirty 0 [ 551.864947][T29847] total_writeback 4096 [ 551.869014][T29847] total_workingset_refault_anon 204 [ 551.874348][T29847] total_workingset_refault_file 5541 [ 551.879645][T29847] total_swap 712704 [ 551.883486][T29847] total_swapcached 8192 [ 551.887654][T29847] total_pgpgin 964495 [ 551.891730][T29847] total_pgpgout 964493 [ 551.895858][T29847] total_pgfault 665938 [ 551.899931][T29847] total_pgmajfault 148 [ 551.903985][T29847] total_inactive_anon 8192 [ 551.908397][T29847] total_active_anon 0 [ 551.912394][T29847] total_inactive_file 0 [ 551.916559][T29847] total_active_file 0 [ 551.920672][T29847] total_unevictable 0 [ 551.924660][T29847] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8781,pid=29847,uid=0 [ 551.939495][T29847] Memory cgroup out of memory: Killed process 29847 (syz.4.8781) total-vm:94084kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 552.138081][T29848] syz.4.8781 (29848) used greatest stack depth: 6376 bytes left