last executing test programs: 19.063854432s ago: executing program 1 (id=3249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8e, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x5, 0x80000001, {{0x1b, 0x4, 0x3, 0x4, 0x6c, 0x68, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x16}, {[@end, @timestamp={0x44, 0x2c, 0xde, 0x0, 0xd, [0x80000000, 0x7, 0x9, 0x9765, 0x80000001, 0x248, 0x401, 0x5, 0x7, 0x1]}, @generic={0x83, 0x12, "55a8a3557de320d25b458a47ec6f4e04"}, @ssrr={0x89, 0x17, 0x48, [@private=0xa010101, @rand_addr=0x64010102, @broadcast, @multicast2, @local]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@restrict={0x2, 0x0, 0x0, 0xb, 0x3}, @var={0xf, 0x0, 0x0, 0xe, 0x4, 0xc5c4dcae293da6d6}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x22a}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000280)=""/92, 0x48, 0x5c, 0x1, 0xf, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7f, 0x4, 0x2, 0x24030, r1, 0x7, '\x00', r3, r4, 0x5, 0x3, 0x1, 0x9}, 0x50) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x20, r5, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 18.930504635s ago: executing program 1 (id=3251): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 18.929708645s ago: executing program 1 (id=3253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc7", 0xb8}, {&(0x7f0000000900)="892950e2405ee8629d9384a91c16d170d4b961f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18344a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8b2e2a59c5162e5b9f4cf63f646397a17aa4c7f1d41482ec09229feb64a5d4de5cfe212bf", 0x97}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xfffffffffffffe77}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6933c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36c", 0x96}, {&(0x7f00000003c0)="696c3c6cde68128ebf94c4fae231db26bfdf8a7db8d71d243f249ebcdbd15b6306607dde3383abf1afe3307e54445fea3f7a5e"}], 0x8, 0x0, 0x9}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000400)=@buf={0xee, &(0x7f0000001180)="71417c313ee81b15921717be31b31b728d691f3a7262004a3da8a7706c573bdf1a2e50a96cee0a5033cfdc2538604eeaea28c18de0470b1a744385074e156dc2cc52a3e94a8b7d70c1b9883bd76cf4a02c2a222ff49be28e39e3d1c3f56cd6fe57f70f11ee9e8e567f7df7c118705dc39fe2d6c356499e0a82b9c1456bc085543441e901c7d5e75f2853e730ee6553e43a2c17b4532f47950c26bf811ad7cc34f76e062f00a1857081384f1207d9f17b36607973e3970917c4819ba5e1222e7cf17bf6162eeb3328bc65455ac95b92a9b698bc1ee7dcb294e82945454a7df6c82982591ff22a40b369cedceaef9b"}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x100000, 0x2, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20085e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate\x00\x00,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYBLOB="dbebdec402a7b694b2b22189fe12bccd0da3a5fe7e5a", @ANYBLOB="2c636f64657061673835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c121f8030000000001009dba05feee081e91fc61a0fef55112510000"], 0x1, 0x238, &(0x7f0000000500)="$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") 18.047331993s ago: executing program 1 (id=3262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) connect$pppl2tp(r3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000b40)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES32=r1, @ANYBLOB="3a270c6ecdcd3b565123", @ANYRESHEX=r5, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x80040}, 0x4050) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="69c4c8f96dbf0ddcb6f33915798daa721e77f3d8a66ff2783b84cd19375977affa6f97287930042240bf2ec350e6c8ba8c24e686b0db0a27012ff0cc3120a34fcbfdab65c3a0fb9ef4f2571d24bc4306a3607bdf708eded805d6080f0e09d8330208d58f73ec0c7c71ef00c18722c5e6506f6e5613c31fe0785a008ad742047d8682431b85826409a38d91eab0e5b28294621f14c7006e53cd605adf5eb25345c14174bc31996a5a557ab8cafdfbb2910b200e3eb1adb12ba6dae7"], 0x1, 0x1b0, &(0x7f0000000280)="$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") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/power/reserved_size', 0x9380, 0x9c) openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x101241, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000001812bcbb", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) r10 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCINQ(r11, 0x800448d2, &(0x7f0000000000)) 17.922330125s ago: executing program 1 (id=3265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4a000, 0x40000}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17.63707155s ago: executing program 1 (id=3270): syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x1, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x50, 0x6, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc) mq_unlink(&(0x7f0000000000)='eth0\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 17.574665641s ago: executing program 32 (id=3270): syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x1, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x50, 0x6, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc) mq_unlink(&(0x7f0000000000)='eth0\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 5.73603535s ago: executing program 5 (id=3358): prctl$PR_SET_TSC(0x1a, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x472, &(0x7f00000006c0)="$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") open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001080)=0xffffffffffffffff, 0x4) wait4(0x0, 0x0, 0x8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresuid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 5.076047212s ago: executing program 5 (id=3366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 4.815825458s ago: executing program 5 (id=3369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x0, 0x14, 0x2009, 0x2}, 0x8, 0x7, 0x200, 0x0, 0xce2, 0x0, 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x0, r0, 'id1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x12, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x89}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x6, 0x4, 0x2, 0x7f, 0xfffffffc}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4.608920102s ago: executing program 5 (id=3370): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@loopback, 0x0}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x0, 0x3, 0xfc, 0x6, 0x35, @local, @remote, 0x8000, 0x8, 0x5, 0x80}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001580)=@newtaction={0x4d8, 0x30, 0x216822a75a8bdd29, 0x0, 0x25dfdbff, {}, [{0x4c4, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xa4, 0x14, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7f}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x65, 0x6, "e538f6e7ccec7684b328e7db3af809ae00bd375b193d8a360eb074da07167c2cd40a76f237125b2bde45b40885d276f40eb2960d9fa732d6f7a6f88891f827be83f1f9801e4ca4d45df48ccdd0181c7f89a5a7b8c84c81fd69590ca728db340b94"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xe4, 0x6, 0x0, 0x0, {{0xd}, {0x4}, {0xb2, 0x6, "e588b6a60f75a2fb4d83848a2a3eba72d4d12589999adaf98d5ec9697b11bd43df2b5365a740e85a0df80f711adc5e496ebd27ff6bb396aabed8ac489858f5684cce7b5bff9dddff41ad94b916056c4b921c17930a31d879dad63580cc7920191015d58affc40521ade675c51cb879bf5ec1930c82e1bbe672c56cec6b30de3d54c91074888850e7bae97e97c2c7ed463dfb4148096531727e8ec702cd8c6aea4e1972f64ed4368369b5885d3d64"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x140, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x401, 0x8, 0x7fffffff, 0x7}, 0x9a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x4, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x3, 0x8000, 0x1}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf4e8, 0x4, 0x6, 0x6d50760c, 0xfffffffb}, 0x2}}]}, {0x9f, 0x6, "52c88b2d3e8eb341f594652da1bd84c93eb34bcd8d5024832a40aaabe8cc4af441462a9bc1ebf7559787ca0db3662f3db3db3dd10df867b9f0832585b41117b6eeafffaaec36a122faee69b145189ece40feca7d1392ebd17000df3365e67ff3cc4ce87d50c9efc0a402b8da07467940826cf15b3d4f6b12c1808fd665cb22b86151af6dff1c27af05f9d681752f3a92bac8d8a4ebb5e5f75ea07e"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x198, 0x1b, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x2, 0x5, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x5, 0x3, 0x10001, 0x4}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x1, 0x1, 0x5, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x2, 0x20000000, 0x5, 0x8}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x55, 0x3, 0xffffffffffffffff, 0x0, 0xfff}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2, 0x8, 0x4, 0x4}}}]}, {0xac, 0x6, "b646c65698590fac3feafd5c895f0ad482c6492afa4cb27f9a598fe4fc2ebb74dad197a324b0357e8a9d43eb2c4e41a1e0043a54543250079e029dc0b221707def57f1788e22334de26e9d5442ee8816afdba1989d8351a39d4089d417af386419e778825cfcf5493174304ee1d13240927995c2f22828b26dc50f376e7a85a41fd17e3434e4589b7fce3e9c2b831aa78826f8b8a061500dafa815f7713534994717c079086a89e9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4d8}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x89000e, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xaa8000000000}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x2000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000002c0), &(0x7f0000000340)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r11, 0xfffffffffffffc01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014"], 0x44}}, 0x0) 3.766206358s ago: executing program 5 (id=3382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8b1a, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32], 0x50) io_setup(0xea, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009e24f322b1053afc1a3bee22fd93c0c47418c2a1b4a0755c3bddc197f892a7e157d80a2a6428ed9885f058a05a80931900bdc93eaec5e82acde5b612ce92ec2563ee105a585a81463f51a588"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000004000380140000001100"], 0xc0}}, 0x2404c010) 2.776301687s ago: executing program 4 (id=3384): io_uring_setup(0x4c2e, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_emit_ethernet(0xc6, &(0x7f0000000680)={@broadcast, @remote, @void, {@x25={0x805, {0x0, 0xff, 0xb, "5652905f755d7e6a94f8141a7fb68f5934446c06b01e80813e317a9683bac8439d6c13a1f72da649b86fd6e5429d91b5dad7ac64b8868869f6f1c506ffed94877909ef59b956c07e1bed36ca616b11f507af1f28ce0b5166096c88aaee89b872a46e0877aef4c0ea7e389f2e1e9c0120dca1f4232c599585df54e720a575cf45409b7efabf165ad60e670795e6e938de5bea5f1e4f77ceaee65413ee27f01c8bbc578ec59bf577bd6320689577bd7214e72196affb"}}}}, &(0x7f0000000140)={0x0, 0x2, [0x675, 0x5c5, 0xfe, 0x9a0]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r1, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/mdstat\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r13, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100028bd7000fedbdf250d0000001c00018008000100", @ANYRES32=r9, @ANYBLOB="e5880a010000000000000000", @ANYRES32=r13, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 2.62057618s ago: executing program 5 (id=3385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000400), 0x5, 0xffffffffffffffff, 0x4}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) ustat(0x3, &(0x7f0000000000)) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x62}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) mlockall(0x3) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x5000) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f00000004c0)=ANY=[], 0x3, 0x335, &(0x7f0000000d80)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") 1.633417459s ago: executing program 2 (id=3398): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x201, @private0={0xfc, 0x0, '\x00', 0x1}, 0x102}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb6b"], 0x28}}], 0x1, 0x854) 1.58554897s ago: executing program 3 (id=3399): syz_emit_ethernet(0x22b, &(0x7f0000000740)={@remote, @local, @void, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}, {0x4733, 0x0, 0x1}, {0xd74}, {0x7f}], @ipv4=@igmp={{0x45, 0x4, 0x0, 0x4, 0x20d, 0x66, 0x0, 0xcb, 0x2, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x1c, 0x9c, 0x1, 0x5, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @cipso={0x86, 0x67, 0x0, [{0x7, 0xd, "4c51b116cb74d1b1631289"}, {0x1, 0x9, "37412132bb6ef5"}, {0x1, 0x7, "163a87c365"}, {0x0, 0x6, "e76b5052"}, {0x6, 0x8, "dc01a9e3641d"}, {0x1, 0x10, "eee8c4ae956c7a9162167e1de073"}, {0x7, 0x5, "a71914"}, {0x2, 0x12, "fad6a492655c66c98108c42bf831c61f"}, {0x0, 0xf, "5d6a46c7f4b51bc15f29f6a100"}]}, @end, @end, @generic={0x7, 0xc, "3295a0828ff21d6710ad"}, @timestamp_addr={0x44, 0x1c, 0x4a, 0x1, 0xa, [{@rand_addr=0x64010100, 0x5}, {@remote, 0x101}, {@loopback, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xf9, 0x1, 0x7, [{@multicast2, 0x3}, {@broadcast, 0x6b3}, {@remote, 0x80000000}, {@rand_addr=0x64010102, 0x9}, {@loopback, 0x7}, {@multicast1, 0xffffffff}]}, @lsrr={0x83, 0x1b, 0xf7, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010101, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}, {0x1e, 0xe6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "a0385579079edad520108ca43e979979322f1fd2700407fe9e5375290bb366bebf76987b6af90e5b29dc259c9281d5a06166fcb0e2c6040cb337fd0692567e5f4e689e46e5ae64f4b8d0d1d52e753854d6a20f50124ac41d0aea05bae495cb71a5df0581f6610995d2daa4de4edd43a53b32a48c15b3fdf16738aaf222a601ba0eaf7d27c4f4f2b636859f040972f59705aab0bbe623c0b6edf4a3dd89f6e5e2ad3266b9fc8bf8049208897457cd043cd307430c6d775cbd677364c24b0cb8b7cccda1ee57e5670a9a2df16d4f20cfe03a4e8560c3cd7e9bd6b56e88267b461aa2fc7bdc7f19bd542c3c7f233e2563481a"}}}}}}, &(0x7f0000000040)={0x1, 0x2, [0x876, 0x3f0, 0xb34, 0x6af]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000280)=""/193, 0xfffffffffffffeb0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.538984621s ago: executing program 3 (id=3402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb5699a63aa53941d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffffffffffc4, 0xe0882) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x107, 0x4000000000000ffd, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x1]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) inotify_init1(0x800) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f00000001c0), 0x0}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r11}, 0x10) 1.405809423s ago: executing program 3 (id=3404): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.368659154s ago: executing program 3 (id=3406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x203, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x7, &(0x7f0000000200)=[{0x5d, 0x1, 0x6}, {0xff01, 0x8, 0x2, 0x1}, {0xe, 0x3, 0x7}, {0xa, 0x4, 0x6, 0x9}, {0x2c0, 0x29, 0x0, 0x16000}, {0x8, 0x3, 0xdc, 0x4}, {0xf419, 0x8, 0x8, 0x7}]}) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r3, @ANYRES64=r5, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) 1.313861165s ago: executing program 0 (id=3408): r0 = syz_io_uring_setup(0x2ced, &(0x7f0000000740)={0x0, 0x10001452, 0x800, 0x1, 0x2d4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES16=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0xa, 0x0, 0x1, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x10000, 0x0, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x68, 0x0, 0xcd, 0x29, 0x0, @multicast2, @multicast2, {[@generic={0x0, 0x2}, @end]}}}}}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB="9f0ff791fe4d02557487b12c7cb2d6b4188460c795eb2ce71a634589b234d74fb3ca670997c410b74bc113e605de125a3a8c1c27427e6217023c0a1941b8cee0b785d1fb3c9c0dd16bccad19d2d7695c5de54953357b28bc69a0a23df2c77f3b45e4c7", @ANYRES16=0x0], 0x50) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) remap_file_pages(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x100000c, 0x9, 0x40) syz_clone(0x100e180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.146161249s ago: executing program 4 (id=3409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80cc40, &(0x7f0000000140)=ANY=[], 0x1, 0x34f, &(0x7f00000004c0)="$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") r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000340)={@mcast2, r7}, 0x14) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)={0x28, 0x1e, 0x1, 0x2, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[], 0x0) 890.728154ms ago: executing program 4 (id=3410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x23500d8, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 727.765626ms ago: executing program 4 (id=3411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000280), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f0000000000000000000000050006"], 0x78}}, 0x0) (fail_nth: 1) 678.432717ms ago: executing program 2 (id=3412): syz_emit_ethernet(0xfc5, &(0x7f000001a240)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "13394a", 0xf8f, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[@dstopts={0x88, 0x1d0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x6, 0xe7a, "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"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x8, 0x1]}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x68a0, 0x3, 0x0], "aad2f9bb0148"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0xea], "22e38e4288e52473e28c2c3cf824ba867b99ea1a10fb656177df5fb7cce2ad3cac3c5a0dffffc8bff18e5225e51cfa37de2b92eadaa70abec23fcfabe89c997fd37fa1b69d"}, {0x8, 0x88be, 0x4, {{0xe, 0x1, 0x7, 0x0, 0x0, 0x3}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0xff, 0x3, 0x1, 0x3, 0x6, 0x4}, 0x2, {0x64d, 0xf32f, 0x3, 0x16, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x1, "c19f1647ec322b45097eb872fd4a8019746d8afe33c692c6d18d3f0e9573f08dcaebfb70675afee8f7944649166557055a99b5640cd67b2b4076e84553b46608e6325c517141ce87085d83f6828a30f33e382f9b0ee7ce1924f2cb6894918bd83b781186"}}}}}}}, 0x0) 401.523213ms ago: executing program 0 (id=3413): syz_emit_ethernet(0x22b, &(0x7f0000000740)={@remote, @local, @void, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}, {0x4733, 0x0, 0x1}, {0xd74}, {0x7f}], @ipv4=@igmp={{0x45, 0x4, 0x0, 0x4, 0x20d, 0x66, 0x0, 0xcb, 0x2, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x1c, 0x9c, 0x1, 0x5, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @cipso={0x86, 0x67, 0x0, [{0x7, 0xd, "4c51b116cb74d1b1631289"}, {0x1, 0x9, "37412132bb6ef5"}, {0x1, 0x7, "163a87c365"}, {0x0, 0x6, "e76b5052"}, {0x6, 0x8, "dc01a9e3641d"}, {0x1, 0x10, "eee8c4ae956c7a9162167e1de073"}, {0x7, 0x5, "a71914"}, {0x2, 0x12, "fad6a492655c66c98108c42bf831c61f"}, {0x0, 0xf, "5d6a46c7f4b51bc15f29f6a100"}]}, @end, @end, @generic={0x7, 0xc, "3295a0828ff21d6710ad"}, @timestamp_addr={0x44, 0x1c, 0x4a, 0x1, 0xa, [{@rand_addr=0x64010100, 0x5}, {@remote, 0x101}, {@loopback, 0x7}]}, @timestamp_addr={0x44, 0x34, 0xf9, 0x1, 0x7, [{@multicast2, 0x3}, {@broadcast, 0x6b3}, {@remote, 0x80000000}, {@rand_addr=0x64010102, 0x9}, {@loopback, 0x7}, {@multicast1, 0xffffffff}]}, @lsrr={0x83, 0x1b, 0xf7, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010101, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}, {0x1e, 0xe6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "a0385579079edad520108ca43e979979322f1fd2700407fe9e5375290bb366bebf76987b6af90e5b29dc259c9281d5a06166fcb0e2c6040cb337fd0692567e5f4e689e46e5ae64f4b8d0d1d52e753854d6a20f50124ac41d0aea05bae495cb71a5df0581f6610995d2daa4de4edd43a53b32a48c15b3fdf16738aaf222a601ba0eaf7d27c4f4f2b636859f040972f59705aab0bbe623c0b6edf4a3dd89f6e5e2ad3266b9fc8bf8049208897457cd043cd307430c6d775cbd677364c24b0cb8b7cccda1ee57e5670a9a2df16d4f20cfe03a4e8560c3cd7e9bd6b56e88267b461aa2fc7bdc7f19bd542c3c7f233e2563481a"}}}}}}, &(0x7f0000000040)={0x1, 0x2, [0x876, 0x3f0, 0xb34, 0x6af]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000280)=""/193, 0xfffffffffffffeb0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 395.802103ms ago: executing program 4 (id=3414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x3, {0x0, 0x0, 0x0, r3, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1500000000000000000001000000100002800c00018008000100030000000c00018008000100", @ANYRES32], 0x30}}, 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464654e6bf10030000008008c00feffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) close(0x3) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="0000ecffe300"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sendto(0xffffffffffffffff, &(0x7f0000000500)="590b95d55fbf192a8ae29d4d4a28de89b6298b6139b32e238c63f65b80287bd77ed344d0dd6a04ccd10a98e694cd83f20c7150c8157f67797afadf66ba", 0x3d, 0x45, 0x0, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) 390.452503ms ago: executing program 2 (id=3415): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 348.200074ms ago: executing program 2 (id=3416): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)={[{@acl}, {@nolazytime}, {@orlov}, {@i_version}, {@lazytime}, {@init_itable}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) fchown(r0, 0x0, 0xee01) 337.787954ms ago: executing program 0 (id=3417): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @random="eec1d9093a04", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010103, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 317.074394ms ago: executing program 0 (id=3418): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00'}, 0x18) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xf, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 272.486325ms ago: executing program 0 (id=3419): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x51, 0x10, &(0x7f0000001380)=ANY=[@ANYBLOB="18000051070014000000000000c4b30b967f4216fda080b92f0001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000c40)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) syslog(0x4, &(0x7f0000000000)=""/13, 0xd) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927653f2d7b17b53348b420a9c81f40f05f819e01177d00000000000000000000003b0000080000000000020000000000000000001100", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = syz_open_dev$vcsu(0x0, 0x0, 0x404040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x26, 0x0, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x7c67, 0x800088}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3e4}], 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000000, 0x0) recvmmsg(r5, &(0x7f0000003940)=[{{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000a00)=""/118, 0x76}, {&(0x7f0000000a80)=""/212, 0xd4}], 0x7, &(0x7f0000000c80)=""/162, 0xa2}, 0x6}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/85, 0x55}, {&(0x7f0000000dc0)=""/193, 0xc1}, {&(0x7f0000000ec0)=""/180, 0xb4}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000600)=""/21, 0x15}, {&(0x7f0000000f80)=""/162, 0xa2}, {&(0x7f0000001040)=""/240, 0xf0}], 0x8, &(0x7f00000011c0)=""/180, 0xb4}, 0x4}, {{0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001280)=""/231, 0xe7}, 0x7fffffff}], 0x3, 0x2, 0x0) 128.614388ms ago: executing program 2 (id=3420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xff73, 0x0, 0x41000, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$tun(r4, 0x0, 0x46) 126.914078ms ago: executing program 3 (id=3421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r1) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 123.635738ms ago: executing program 0 (id=3422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000400), 0x5, 0xffffffffffffffff, 0x4}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) ustat(0x3, &(0x7f0000000000)) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x62}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) mlockall(0x3) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x5000) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f00000004c0)=ANY=[], 0x3, 0x335, &(0x7f0000000d80)="$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") 42.28709ms ago: executing program 3 (id=3423): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x251072, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00dc4a16000000000008000000000098e4a1e8d68500fdff4f0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x2f, &(0x7f0000000400)=[{&(0x7f0000000800)=""/208, 0xd0}], 0x1, 0x0, 0xfffffffffffffe8f}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(0x0, &(0x7f00000017c0)='./file0\x00') rmdir(0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000180)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@dev, @in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x3}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r12, @ANYBLOB="080003"], 0x80}}, 0x8000) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x18) 522.57µs ago: executing program 2 (id=3424): r0 = syz_io_uring_setup(0x2ced, &(0x7f0000000740)={0x0, 0x10001452, 0x800, 0x1, 0x2d4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES16=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0xa, 0x0, 0x1, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x10000, 0x0, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x68, 0x0, 0xcd, 0x29, 0x0, @multicast2, @multicast2, {[@generic={0x0, 0x2}, @end]}}}}}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB="9f0ff791fe4d02557487b12c7cb2d6b4188460c795eb2ce71a634589b234d74fb3ca670997c410b74bc113e605de125a3a8c1c27427e6217023c0a1941b8cee0b785d1fb3c9c0dd16bccad19d2d7695c5de54953357b28bc69a0a23df2c77f3b45e4c7", @ANYRES16=0x0], 0x50) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) remap_file_pages(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x100000c, 0x9, 0x40) syz_clone(0x100e180, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3425): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$evdev(r5, &(0x7f0000000380)=[{{0x0, 0x2710}, 0x12, 0x81, 0x200}, {{}, 0x16, 0xb78, 0x76e}, {{r6, r7/1000+60000}, 0x14, 0x18, 0x81}, {{r8, r9/1000+10000}, 0x5, 0x9, 0x8}, {{}, 0x12, 0x7, 0x10001}], 0x78) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') preadv(r11, &(0x7f0000002b40)=[{&(0x7f0000000940)=""/229, 0xe5}, {0x0}], 0x2, 0x4, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) kernel console output (not intermixed with test programs): f133b67eec9 code=0x7ffc0000 [ 232.929320][ T29] audit: type=1326 audit(1758569760.638:20806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11291 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f133b67eec9 code=0x7ffc0000 [ 232.929350][ T29] audit: type=1326 audit(1758569760.638:20807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11291 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133b67eec9 code=0x7ffc0000 [ 232.929455][ T29] audit: type=1326 audit(1758569760.638:20808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11291 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133b67eec9 code=0x7ffc0000 [ 233.406923][ T29] audit: type=1400 audit(1758569761.118:20809): avc: denied { cpu } for pid=11309 comm="syz.1.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 233.413505][T11310] openvswitch: netlink: Message has 6 unknown bytes. [ 233.659339][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 233.659753][T11321] netlink: 'syz.0.2820': attribute type 21 has an invalid length. [ 233.659796][T11321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2820'. [ 233.762459][ C0] I/O error, dev loop4, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.762536][ T7060] FAT-fs (loop4): unable to read inode block for updating (i_pos 1050) [ 233.762673][ C0] I/O error, dev loop4, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.762828][ T7060] FAT-fs (loop4): unable to read inode block for updating (i_pos 1050) [ 233.762861][ T7060] FAT-fs (loop4): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 233.840099][ T7060] syz_tun (unregistering): left allmulticast mode [ 233.840123][ T7060] syz_tun (unregistering): left promiscuous mode [ 233.840225][ T7060] bridge0: port 3(syz_tun) entered disabled state [ 233.869964][T11333] loop6: detected capacity change from 0 to 7 [ 233.870943][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.870976][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.871528][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.871560][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 233.872242][T11333] loop6: unable to read partition table [ 233.872269][T11333] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 233.905864][ T3540] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.955204][ T3540] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.015192][ T3540] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.059950][ T3540] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.274272][ T3540] bridge_slave_1: left allmulticast mode [ 234.274295][ T3540] bridge_slave_1: left promiscuous mode [ 234.274471][ T3540] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.283848][ T3540] bridge_slave_0: left promiscuous mode [ 234.284021][ T3540] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.508594][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.508631][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.508654][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.508754][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.508775][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.508795][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.508892][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.508916][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.509022][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.509043][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 234.509618][ T3410] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 234.580543][ T3540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.589527][ T3540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.598018][ T3540] bond0 (unregistering): Released all slaves [ 234.608753][T11330] lo speed is unknown, defaulting to 1000 [ 234.822712][T11378] FAULT_INJECTION: forcing a failure. [ 234.822712][T11378] name failslab, interval 1, probability 0, space 0, times 0 [ 234.835441][T11378] CPU: 0 UID: 0 PID: 11378 Comm: syz.2.2836 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.835474][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.835487][T11378] Call Trace: [ 234.835495][T11378] [ 234.835516][T11378] __dump_stack+0x1d/0x30 [ 234.835540][T11378] dump_stack_lvl+0xe8/0x140 [ 234.835572][T11378] dump_stack+0x15/0x1b [ 234.835589][T11378] should_fail_ex+0x265/0x280 [ 234.835615][T11378] ? nd_alloc_stack+0x50/0xa0 [ 234.835718][T11378] should_failslab+0x8c/0xb0 [ 234.835743][T11378] __kmalloc_cache_noprof+0x4c/0x320 [ 234.835773][T11378] ? __pfx_shmem_get_link+0x10/0x10 [ 234.835824][T11378] nd_alloc_stack+0x50/0xa0 [ 234.835861][T11378] pick_link+0x78e/0x830 [ 234.835889][T11378] step_into+0x7b6/0x820 [ 234.835913][T11378] ? inode_permission+0x106/0x310 [ 234.835992][T11378] link_path_walk+0x571/0x900 [ 234.836024][T11378] path_openat+0x1de/0x2170 [ 234.836193][T11378] ? mntput+0x4b/0x80 [ 234.836222][T11378] ? __bpf_get_stackid+0x721/0x800 [ 234.836252][T11378] do_filp_open+0x109/0x230 [ 234.836350][T11378] ? __pfx_shmem_put_link+0x10/0x10 [ 234.836434][T11378] ? __pfx_shmem_put_link+0x10/0x10 [ 234.836463][T11378] do_open_execat+0xd8/0x260 [ 234.836485][T11378] alloc_bprm+0x25/0x350 [ 234.836507][T11378] do_execveat_common+0x12e/0x750 [ 234.836606][T11378] __x64_sys_execve+0x5c/0x70 [ 234.836632][T11378] x64_sys_call+0x2716/0x2ff0 [ 234.836658][T11378] do_syscall_64+0xd2/0x200 [ 234.836694][T11378] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 234.836742][T11378] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.836851][T11378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.836944][T11378] RIP: 0033:0x7fb907eceec9 [ 234.836961][T11378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.837045][T11378] RSP: 002b:00007fb906937038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 234.837064][T11378] RAX: ffffffffffffffda RBX: 00007fb908125fa0 RCX: 00007fb907eceec9 [ 234.837111][T11378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000003040 [ 234.837125][T11378] RBP: 00007fb906937090 R08: 0000000000000000 R09: 0000000000000000 [ 234.837138][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.837151][T11378] R13: 00007fb908126038 R14: 00007fb908125fa0 R15: 00007ffebee189c8 [ 234.837170][T11378] [ 235.112793][ T3540] hsr_slave_0: left promiscuous mode [ 235.119102][ T3540] hsr_slave_1: left promiscuous mode [ 235.140284][ T3540] veth0_macvtap: left promiscuous mode [ 235.146029][ T3540] veth1_vlan: left promiscuous mode [ 235.151526][ T3540] veth0_vlan: left promiscuous mode [ 235.164638][T11390] loop6: detected capacity change from 0 to 7 [ 235.206379][T11393] FAULT_INJECTION: forcing a failure. [ 235.206379][T11393] name failslab, interval 1, probability 0, space 0, times 0 [ 235.209737][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.219076][T11393] CPU: 0 UID: 0 PID: 11393 Comm: syz.3.2842 Not tainted syzkaller #0 PREEMPT(voluntary) [ 235.219103][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 235.219196][T11393] Call Trace: [ 235.219203][T11393] [ 235.219287][T11393] __dump_stack+0x1d/0x30 [ 235.219309][T11393] dump_stack_lvl+0xe8/0x140 [ 235.219329][T11393] dump_stack+0x15/0x1b [ 235.219346][T11393] should_fail_ex+0x265/0x280 [ 235.219371][T11393] should_failslab+0x8c/0xb0 [ 235.219396][T11393] __kvmalloc_node_noprof+0x123/0x4e0 [ 235.219507][T11393] ? alloc_fdtable+0x10b/0x1d0 [ 235.219531][T11393] alloc_fdtable+0x10b/0x1d0 [ 235.219553][T11393] dup_fd+0x4c7/0x540 [ 235.219649][T11393] copy_files+0x98/0xf0 [ 235.219674][T11393] copy_process+0xc5b/0x2000 [ 235.219744][T11393] kernel_clone+0x16c/0x5c0 [ 235.219770][T11393] ? vfs_write+0x7e8/0x960 [ 235.219794][T11393] __x64_sys_clone+0xe6/0x120 [ 235.219832][T11393] x64_sys_call+0x119c/0x2ff0 [ 235.219853][T11393] do_syscall_64+0xd2/0x200 [ 235.219884][T11393] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 235.219976][T11393] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 235.220022][T11393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.220043][T11393] RIP: 0033:0x7f976eaeeec9 [ 235.220060][T11393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.220079][T11393] RSP: 002b:00007f976d54efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 235.220130][T11393] RAX: ffffffffffffffda RBX: 00007f976ed45fa0 RCX: 00007f976eaeeec9 [ 235.220143][T11393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a000000 [ 235.220156][T11393] RBP: 00007f976d54f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.220169][T11393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 235.220181][T11393] R13: 00007f976ed46038 R14: 00007f976ed45fa0 R15: 00007ffee69fc578 [ 235.220200][T11393] [ 235.420343][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.428825][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.438135][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 235.448046][T11390] loop6: unable to read partition table [ 235.479860][T11390] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 235.551718][ T3540] team0 (unregistering): Port device team_slave_1 removed [ 235.562421][ T3540] team0 (unregistering): Port device team_slave_0 removed [ 235.657688][T11330] chnl_net:caif_netlink_parms(): no params data found [ 235.729539][T11330] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.736681][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.748140][T11330] bridge_slave_0: entered allmulticast mode [ 235.756296][T11330] bridge_slave_0: entered promiscuous mode [ 235.763532][T11330] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.770731][T11330] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.778188][T11330] bridge_slave_1: entered allmulticast mode [ 235.784883][T11330] bridge_slave_1: entered promiscuous mode [ 235.812999][T11330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.814082][T11330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.841633][ T3540] IPVS: stop unused estimator thread 0... [ 235.875025][T11330] team0: Port device team_slave_0 added [ 235.881570][T11330] team0: Port device team_slave_1 added [ 235.903055][T11429] netlink: 'syz.3.2846': attribute type 1 has an invalid length. [ 235.912185][T11330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.919233][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.945335][T11330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.978697][T11330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.985734][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.011729][T11330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.079721][T11330] hsr_slave_0: entered promiscuous mode [ 236.085921][T11330] hsr_slave_1: entered promiscuous mode [ 236.091932][T11330] debugfs: 'hsr0' already exists in 'hsr' [ 236.098136][T11330] Cannot create hsr debugfs directory [ 236.178527][T11443] loop9: detected capacity change from 0 to 7 [ 236.186383][T11443] Buffer I/O error on dev loop9, logical block 0, async page read [ 236.194655][T11443] Buffer I/O error on dev loop9, logical block 0, async page read [ 236.202543][T11443] loop9: unable to read partition table [ 236.208738][T11443] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 236.208738][T11443] ) failed (rc=-5) [ 236.242346][T11449] sctp: [Deprecated]: syz.2.2860 (pid 11449) Use of int in maxseg socket option. [ 236.242346][T11449] Use struct sctp_assoc_value instead [ 236.404267][T11330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.413452][T11330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.425006][T11330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.439958][T11330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.477190][T11330] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.484456][T11330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.491847][T11330] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.498921][T11330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.531106][T11330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.539316][T11466] __nla_validate_parse: 2 callbacks suppressed [ 236.539335][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2862'. [ 236.542908][T11330] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.563138][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.570718][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.583510][T11466] netlink: 'syz.2.2862': attribute type 21 has an invalid length. [ 236.585699][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.598414][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.612703][T11466] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2862'. [ 236.626653][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.633820][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.696132][T11479] netlink: 'syz.2.2864': attribute type 3 has an invalid length. [ 236.704021][T11479] netlink: 'syz.2.2864': attribute type 3 has an invalid length. [ 236.739687][T11330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.779273][T11491] syzkaller0: entered allmulticast mode [ 236.786588][T11491] syzkaller0: entered promiscuous mode [ 236.800280][T11489] syzkaller0: left promiscuous mode [ 236.805637][T11489] syzkaller0: left allmulticast mode [ 236.884841][T11505] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 236.916796][T11330] veth0_vlan: entered promiscuous mode [ 236.920635][T11511] loop9: detected capacity change from 0 to 7 [ 236.924904][T11330] veth1_vlan: entered promiscuous mode [ 236.932177][T11511] Buffer I/O error on dev loop9, logical block 0, async page read [ 236.942256][T11511] Buffer I/O error on dev loop9, logical block 0, async page read [ 236.945962][T11330] veth0_macvtap: entered promiscuous mode [ 236.950120][T11511] loop9: unable to read partition table [ 236.958290][T11330] veth1_macvtap: entered promiscuous mode [ 236.962048][T11511] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 236.962048][T11511] ) failed (rc=-5) [ 236.974822][T11330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.992207][T11330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.005815][ T3532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.015255][ T3532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.026002][ T3532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.049272][ T3532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.113501][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'. [ 237.154959][T11524] netlink: 'syz.2.2871': attribute type 21 has an invalid length. [ 237.168952][T11524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2871'. [ 237.286164][T11535] FAULT_INJECTION: forcing a failure. [ 237.286164][T11535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.299302][T11535] CPU: 1 UID: 0 PID: 11535 Comm: syz.1.2875 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.299403][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.299416][T11535] Call Trace: [ 237.299424][T11535] [ 237.299432][T11535] __dump_stack+0x1d/0x30 [ 237.299456][T11535] dump_stack_lvl+0xe8/0x140 [ 237.299538][T11535] dump_stack+0x15/0x1b [ 237.299553][T11535] should_fail_ex+0x265/0x280 [ 237.299613][T11535] should_fail+0xb/0x20 [ 237.299636][T11535] should_fail_usercopy+0x1a/0x20 [ 237.299664][T11535] _copy_from_iter+0xd2/0xe80 [ 237.299720][T11535] ? __build_skb_around+0x1a0/0x200 [ 237.299745][T11535] ? __alloc_skb+0x223/0x320 [ 237.299770][T11535] netlink_sendmsg+0x471/0x6b0 [ 237.299801][T11535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.299881][T11535] __sock_sendmsg+0x142/0x180 [ 237.299915][T11535] ____sys_sendmsg+0x31e/0x4e0 [ 237.299945][T11535] ___sys_sendmsg+0x17b/0x1d0 [ 237.300019][T11535] __x64_sys_sendmsg+0xd4/0x160 [ 237.300050][T11535] x64_sys_call+0x191e/0x2ff0 [ 237.300131][T11535] do_syscall_64+0xd2/0x200 [ 237.300160][T11535] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 237.300185][T11535] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.300234][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.300257][T11535] RIP: 0033:0x7f133b67eec9 [ 237.300274][T11535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.300294][T11535] RSP: 002b:00007f133a0e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.300317][T11535] RAX: ffffffffffffffda RBX: 00007f133b8d5fa0 RCX: 00007f133b67eec9 [ 237.300331][T11535] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 237.300369][T11535] RBP: 00007f133a0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 237.300383][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.300397][T11535] R13: 00007f133b8d6038 R14: 00007f133b8d5fa0 R15: 00007ffc47170478 [ 237.300416][T11535] [ 237.556104][T11537] lo speed is unknown, defaulting to 1000 [ 237.779065][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2878'. [ 237.842106][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 237.851873][T11544] netlink: 'syz.3.2879': attribute type 21 has an invalid length. [ 237.863571][T11552] loop9: detected capacity change from 0 to 7 [ 237.880453][T11544] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2879'. [ 237.889069][T11552] Buffer I/O error on dev loop9, logical block 0, async page read [ 237.909265][T11552] Buffer I/O error on dev loop9, logical block 0, async page read [ 237.917234][T11552] loop9: unable to read partition table [ 237.939807][T11552] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 237.939807][T11552] ) failed (rc=-5) [ 237.959166][T11531] IPv6: syztnl0: Disabled Multicast RS [ 238.016481][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 238.016497][ T29] audit: type=1400 audit(1758569765.649:21053): avc: denied { read } for pid=11554 comm="syz.2.2881" dev="nsfs" ino=4026532835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 238.044354][ T29] audit: type=1400 audit(1758569765.649:21054): avc: denied { open } for pid=11554 comm="syz.2.2881" path="net:[4026532835]" dev="nsfs" ino=4026532835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 238.073388][ T29] audit: type=1400 audit(1758569765.697:21055): avc: denied { create } for pid=11554 comm="syz.2.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 238.093477][ T29] audit: type=1400 audit(1758569765.726:21056): avc: denied { write } for pid=11554 comm="syz.2.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 238.135668][ T29] audit: type=1400 audit(1758569765.756:21057): avc: denied { allowed } for pid=11570 comm="syz.3.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 238.189188][ T29] audit: type=1400 audit(1758569765.765:21058): avc: denied { create } for pid=11570 comm="syz.3.2885" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.210741][ T29] audit: type=1400 audit(1758569765.765:21059): avc: denied { map } for pid=11570 comm="syz.3.2885" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.210774][ T29] audit: type=1400 audit(1758569765.765:21060): avc: denied { read write } for pid=11570 comm="syz.3.2885" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.260300][ T29] audit: type=1400 audit(1758569765.765:21061): avc: denied { open } for pid=11570 comm="syz.3.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 238.279831][ T29] audit: type=1400 audit(1758569765.765:21062): avc: denied { kernel } for pid=11570 comm="syz.3.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 238.433251][ T3397] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 239.443571][T11594] program syz.0.2892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.494106][T11597] loop9: detected capacity change from 0 to 7 [ 239.500324][T11597] Buffer I/O error on dev loop9, logical block 0, async page read [ 239.517274][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 239.532040][T11597] Buffer I/O error on dev loop9, logical block 0, async page read [ 239.539993][T11597] loop9: unable to read partition table [ 239.546022][T11591] netlink: 'syz.1.2891': attribute type 21 has an invalid length. [ 239.553617][T11597] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 239.553617][T11597] ) failed (rc=-5) [ 239.554852][T11591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2891'. [ 239.677786][T11621] 9pnet_fd: Insufficient options for proto=fd [ 240.497024][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2911'. [ 240.512600][T11647] netlink: 'syz.2.2911': attribute type 21 has an invalid length. [ 240.747745][T11661] sch_fq: defrate 0 ignored. [ 240.833335][T11670] lo speed is unknown, defaulting to 1000 [ 243.785803][T11707] FAULT_INJECTION: forcing a failure. [ 243.785803][T11707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.798958][T11707] CPU: 0 UID: 0 PID: 11707 Comm: syz.2.2930 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.798991][T11707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.799005][T11707] Call Trace: [ 243.799012][T11707] [ 243.799021][T11707] __dump_stack+0x1d/0x30 [ 243.799047][T11707] dump_stack_lvl+0xe8/0x140 [ 243.799151][T11707] dump_stack+0x15/0x1b [ 243.799172][T11707] should_fail_ex+0x265/0x280 [ 243.799217][T11707] should_fail+0xb/0x20 [ 243.799236][T11707] should_fail_usercopy+0x1a/0x20 [ 243.799265][T11707] _copy_to_user+0x20/0xa0 [ 243.799340][T11707] simple_read_from_buffer+0xb5/0x130 [ 243.799361][T11707] proc_fail_nth_read+0x10e/0x150 [ 243.799389][T11707] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.799494][T11707] vfs_read+0x1a5/0x770 [ 243.799517][T11707] ? __rcu_read_unlock+0x4f/0x70 [ 243.799608][T11707] ? __fget_files+0x184/0x1c0 [ 243.799638][T11707] ksys_read+0xda/0x1a0 [ 243.799664][T11707] __x64_sys_read+0x40/0x50 [ 243.799689][T11707] x64_sys_call+0x27bc/0x2ff0 [ 243.799786][T11707] do_syscall_64+0xd2/0x200 [ 243.799816][T11707] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 243.799839][T11707] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 243.799921][T11707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.800042][T11707] RIP: 0033:0x7fb907ecd8dc [ 243.800060][T11707] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.800077][T11707] RSP: 002b:00007fb906937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.800096][T11707] RAX: ffffffffffffffda RBX: 00007fb908125fa0 RCX: 00007fb907ecd8dc [ 243.800110][T11707] RDX: 000000000000000f RSI: 00007fb9069370a0 RDI: 0000000000000005 [ 243.800156][T11707] RBP: 00007fb906937090 R08: 0000000000000000 R09: 0000000000000000 [ 243.800170][T11707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.800184][T11707] R13: 00007fb908126038 R14: 00007fb908125fa0 R15: 00007ffebee189c8 [ 243.800202][T11707] [ 244.044588][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 244.044620][ T29] audit: type=1326 audit(1758569771.532:21161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 244.086790][T11718] __nla_validate_parse: 4 callbacks suppressed [ 244.086810][T11718] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2929'. [ 244.090169][T11704] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2929'. [ 244.094089][ T29] audit: type=1326 audit(1758569771.542:21162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 244.139895][ T29] audit: type=1326 audit(1758569771.542:21163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 244.163558][ T29] audit: type=1326 audit(1758569771.542:21164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 244.187187][ T29] audit: type=1326 audit(1758569771.542:21165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 244.210817][ T29] audit: type=1326 audit(1758569771.542:21166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 244.234411][ T29] audit: type=1326 audit(1758569771.542:21167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb907ecd710 code=0x7ffc0000 [ 244.258017][ T29] audit: type=1326 audit(1758569771.542:21168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 244.281725][ T29] audit: type=1326 audit(1758569771.542:21169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 244.305352][ T29] audit: type=1326 audit(1758569771.542:21170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11716 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 244.334722][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2938'. [ 244.347678][T11726] bridge0: port 3(syz_tun) entered blocking state [ 244.354207][T11726] bridge0: port 3(syz_tun) entered disabled state [ 244.371208][T11726] syz_tun: entered allmulticast mode [ 244.381525][T11726] syz_tun: entered promiscuous mode [ 244.389978][T11726] bridge0: port 3(syz_tun) entered blocking state [ 244.396549][T11726] bridge0: port 3(syz_tun) entered forwarding state [ 244.444318][T11738] netlink: 'syz.4.2941': attribute type 21 has an invalid length. [ 244.469982][T11738] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2941'. [ 244.562383][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'. [ 244.588041][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'. [ 244.747577][T11751] lo speed is unknown, defaulting to 1000 [ 247.061897][T11771] netlink: 'syz.4.2953': attribute type 21 has an invalid length. [ 247.069791][T11771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2953'. [ 247.165032][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2952'. [ 247.174975][T11770] netlink: 'syz.1.2952': attribute type 21 has an invalid length. [ 247.184997][T11770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2952'. [ 247.254650][ T3397] hid (null): unknown global tag 0xe [ 247.265400][ T3397] hid (null): unknown global tag 0xc [ 247.274336][ T3397] hid (null): unknown global tag 0xe [ 247.279750][ T3397] hid (null): unknown global tag 0xe [ 247.285102][ T3397] hid (null): unknown global tag 0xd [ 247.290635][ T3397] hid (null): unknown global tag 0xc [ 247.296147][ T3397] hid (null): unknown global tag 0xc [ 247.301612][ T3397] hid (null): unknown global tag 0xe [ 247.307195][ T3397] hid (null): unknown global tag 0xc [ 247.312558][ T3397] hid (null): unknown global tag 0xc [ 247.317956][ T3397] hid (null): unknown global tag 0xd [ 247.323267][ T3397] hid (null): unknown global tag 0xd [ 247.333031][ T3397] hid (null): unknown global tag 0xe [ 247.338406][ T3397] hid (null): unknown global tag 0xc [ 247.343719][ T3397] hid (null): report_id 19018 is invalid [ 247.349404][ T3397] hid (null): report_id 0 is invalid [ 247.354782][ T3397] hid (null): unknown global tag 0xd [ 247.360184][ T3397] hid (null): unknown global tag 0xe [ 247.360221][ T3397] hid (null): unknown global tag 0xc [ 247.360236][ T3397] hid (null): nested delimiters [ 247.360248][ T3397] hid (null): unknown global tag 0x9b [ 247.360287][ T3397] hid (null): report_id 0 is invalid [ 247.360324][ T3397] hid (null): report_id 0 is invalid [ 247.360349][ T3397] hid (null): unknown global tag 0xe [ 247.360362][ T3397] hid (null): unknown global tag 0xc [ 247.360420][ T3397] hid (null): report_id 3847094645 is invalid [ 247.360445][ T3397] hid (null): unknown global tag 0xcb [ 247.360474][ T3397] hid (null): unknown global tag 0xe [ 247.362205][ T3397] hid (null): unknown global tag 0xd [ 247.362225][ T3397] hid (null): report_id 16796 is invalid [ 247.362254][ T3397] hid (null): unknown global tag 0xe [ 247.366543][ T3397] hid (null): unknown global tag 0xd [ 247.366609][ T3397] hid (null): invalid report_size 63360 [ 247.366635][ T3397] hid (null): invalid report_count 99512854 [ 247.366660][ T3397] hid (null): global environment stack overflow [ 247.366724][ T3397] hid (null): unknown global tag 0xd [ 247.366762][ T3397] hid (null): unknown global tag 0xc [ 247.366794][ T3397] hid (null): unknown global tag 0xc [ 247.366858][ T3397] hid (null): unknown global tag 0xd [ 247.366898][ T3397] hid (null): unknown global tag 0xd [ 247.366910][ T3397] hid (null): unknown global tag 0xd [ 247.366952][ T3397] hid (null): unknown global tag 0xc [ 247.366968][ T3397] hid (null): invalid report_size 48769 [ 247.366992][ T3397] hid (null): invalid report_size 53507 [ 247.397420][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2957'. [ 247.401007][ T3397] hid-generic 0491:000D:0000.0005: unknown global tag 0xe [ 247.531468][ T3397] hid-generic 0491:000D:0000.0005: item 0 2 1 14 parsing failed [ 247.531802][ T3397] hid-generic 0491:000D:0000.0005: probe with driver hid-generic failed with error -22 [ 247.672438][T11813] loop9: detected capacity change from 0 to 7 [ 247.672668][T11813] Buffer I/O error on dev loop9, logical block 0, async page read [ 247.692072][T11813] Buffer I/O error on dev loop9, logical block 0, async page read [ 247.692097][T11813] loop9: unable to read partition table [ 247.692116][T11813] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 247.692116][T11813] ) failed (rc=-5) [ 247.739421][T11815] netlink: 'syz.0.2967': attribute type 21 has an invalid length. [ 247.933612][T11827] ALSA: seq fatal error: cannot create timer (-22) [ 248.075060][T11840] syzkaller0: entered promiscuous mode [ 248.075081][T11840] syzkaller0: entered allmulticast mode [ 248.097851][T11840] netlink: 'syz.2.2976': attribute type 4 has an invalid length. [ 248.141025][T11840] .`: renamed from bond0 (while UP) [ 248.172223][T11839] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 248.182674][T11839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.201607][T11839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.219928][T11846] loop1: detected capacity change from 0 to 2048 [ 248.268537][T11846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.354122][T11854] netlink: 'syz.2.2979': attribute type 21 has an invalid length. [ 248.515502][T11880] loop6: detected capacity change from 0 to 7 [ 248.522321][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.531491][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.539591][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.548765][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.557173][T11880] loop6: unable to read partition table [ 248.573706][T11880] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 248.648543][T11883] loop4: detected capacity change from 0 to 128 [ 248.655536][T11883] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.668466][T11883] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 248.700745][T11883] lo speed is unknown, defaulting to 1000 [ 248.707460][T11883] lo speed is unknown, defaulting to 1000 [ 248.713558][T11883] lo speed is unknown, defaulting to 1000 [ 248.774114][T11883] infiniband sz1: set active [ 248.778852][T11883] infiniband sz1: added lo [ 248.786774][ T3397] lo speed is unknown, defaulting to 1000 [ 248.860162][T11883] RDS/IB: sz1: added [ 248.864281][T11883] smc: adding ib device sz1 with port count 1 [ 248.870588][T11883] smc: ib device sz1 port 1 has pnetid [ 248.877291][T11883] lo speed is unknown, defaulting to 1000 [ 248.942122][T11883] lo speed is unknown, defaulting to 1000 [ 249.007551][T11883] lo speed is unknown, defaulting to 1000 [ 249.063461][T11883] lo speed is unknown, defaulting to 1000 [ 249.069526][ T2185] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.104803][T11883] lo speed is unknown, defaulting to 1000 [ 249.120888][T10042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.140169][T11883] lo speed is unknown, defaulting to 1000 [ 249.147377][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 249.147391][ T29] audit: type=1400 audit(1758569776.551:21622): avc: denied { tracepoint } for pid=11891 comm="syz.0.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 249.181315][ T3397] lo speed is unknown, defaulting to 1000 [ 249.206721][T11892] __nla_validate_parse: 5 callbacks suppressed [ 249.206732][T11892] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2990'. [ 249.220553][ T29] audit: type=1400 audit(1758569776.610:21623): avc: denied { ioctl } for pid=11891 comm="syz.0.2990" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=33584 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 249.275459][ T29] audit: type=1400 audit(1758569776.679:21624): avc: denied { create } for pid=11897 comm="syz.3.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 249.411674][ T29] audit: type=1400 audit(1758569776.768:21625): avc: denied { unmount } for pid=11330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 249.431850][ T29] audit: type=1400 audit(1758569776.807:21626): avc: denied { connect } for pid=11897 comm="syz.3.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 249.451627][ T29] audit: type=1400 audit(1758569776.807:21627): avc: denied { write } for pid=11897 comm="syz.3.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 249.471283][ T29] audit: type=1326 audit(1758569776.817:21628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 249.494958][ T29] audit: type=1326 audit(1758569776.817:21629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 249.518586][ T29] audit: type=1326 audit(1758569776.817:21630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 249.542262][ T29] audit: type=1326 audit(1758569776.817:21631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb907eceec9 code=0x7ffc0000 [ 249.569836][T11914] loop1: detected capacity change from 0 to 128 [ 249.588788][T11914] vfat: Unknown parameter '' [ 249.595177][T11906] netlink: 'syz.0.2993': attribute type 21 has an invalid length. [ 249.605724][T11906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2993'. [ 249.671805][T11916] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 249.684411][T11916] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 249.738278][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3001'. [ 249.901940][T11950] netlink: 'syz.0.3009': attribute type 21 has an invalid length. [ 249.910379][T11950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3009'. [ 249.970051][T11963] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 249.978806][T11963] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 250.454020][T11980] FAULT_INJECTION: forcing a failure. [ 250.454020][T11980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.467144][T11980] CPU: 1 UID: 0 PID: 11980 Comm: syz.0.3019 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.467175][T11980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.467188][T11980] Call Trace: [ 250.467274][T11980] [ 250.467281][T11980] __dump_stack+0x1d/0x30 [ 250.467340][T11980] dump_stack_lvl+0xe8/0x140 [ 250.467360][T11980] dump_stack+0x15/0x1b [ 250.467371][T11980] should_fail_ex+0x265/0x280 [ 250.467387][T11980] should_fail+0xb/0x20 [ 250.467400][T11980] should_fail_usercopy+0x1a/0x20 [ 250.467499][T11980] _copy_from_iter+0xd2/0xe80 [ 250.467531][T11980] ? __build_skb_around+0x1a0/0x200 [ 250.467550][T11980] ? __alloc_skb+0x223/0x320 [ 250.467576][T11980] netlink_sendmsg+0x471/0x6b0 [ 250.467613][T11980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.467630][T11980] __sock_sendmsg+0x142/0x180 [ 250.467650][T11980] ____sys_sendmsg+0x31e/0x4e0 [ 250.467695][T11980] ___sys_sendmsg+0x17b/0x1d0 [ 250.467721][T11980] __x64_sys_sendmsg+0xd4/0x160 [ 250.467797][T11980] x64_sys_call+0x191e/0x2ff0 [ 250.467811][T11980] do_syscall_64+0xd2/0x200 [ 250.467885][T11980] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 250.467938][T11980] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 250.467959][T11980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.467973][T11980] RIP: 0033:0x7f84c511eec9 [ 250.467984][T11980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.468029][T11980] RSP: 002b:00007f84c3b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.468108][T11980] RAX: ffffffffffffffda RBX: 00007f84c5375fa0 RCX: 00007f84c511eec9 [ 250.468117][T11980] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006 [ 250.468125][T11980] RBP: 00007f84c3b87090 R08: 0000000000000000 R09: 0000000000000000 [ 250.468133][T11980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.468141][T11980] R13: 00007f84c5376038 R14: 00007f84c5375fa0 R15: 00007fff09b880c8 [ 250.468182][T11980] [ 250.718253][T11982] loop1: detected capacity change from 0 to 1024 [ 250.733723][T11982] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 250.743155][T11992] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 250.754837][T11982] syzkaller1: entered promiscuous mode [ 250.760335][T11982] syzkaller1: entered allmulticast mode [ 250.771862][T11992] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 250.806513][T11997] netlink: 'syz.2.3022': attribute type 21 has an invalid length. [ 250.875052][T12006] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 253.182549][T12037] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 253.205634][T12037] @0: renamed from bond_slave_1 [ 253.689529][T12030] netlink: 'syz.1.3037': attribute type 21 has an invalid length. [ 253.878075][T12057] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 253.892394][T12046] netlink: 'syz.0.3040': attribute type 21 has an invalid length. [ 254.021369][T12069] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 254.028900][T12069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.047594][T12069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.061378][T12077] netlink: 'syz.4.3053': attribute type 21 has an invalid length. [ 254.100567][T12079] loop4: detected capacity change from 0 to 512 [ 254.107300][T12079] EXT4-fs: Ignoring removed bh option [ 254.118564][T12079] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.3054: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 254.136973][T12079] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.3054: Bad quota inode: 4, type: 1 [ 254.149188][T12079] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 254.164228][T12079] EXT4-fs (loop4): mount failed [ 254.594661][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 254.594679][ T29] audit: type=1400 audit(1758569781.949:21834): avc: denied { ioctl } for pid=12090 comm="syz.0.3057" path="socket:[34002]" dev="sockfs" ino=34002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.741582][T12100] __nla_validate_parse: 9 callbacks suppressed [ 254.741678][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 254.773304][T12100] netlink: 'syz.0.3060': attribute type 21 has an invalid length. [ 254.781506][T12100] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3060'. [ 254.952750][T12120] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 255.007170][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 255.016479][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 255.068235][ T29] audit: type=1326 audit(1758569782.414:21835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbb8beec9 code=0x7ffc0000 [ 255.076326][T12132] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 255.092486][T12134] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 255.115571][ T29] audit: type=1326 audit(1758569782.454:21836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbb8beec9 code=0x7ffc0000 [ 255.147499][T12130] loop9: detected capacity change from 0 to 7 [ 255.154011][T12130] Buffer I/O error on dev loop9, logical block 0, async page read [ 255.163550][T12130] Buffer I/O error on dev loop9, logical block 0, async page read [ 255.171454][T12130] loop9: unable to read partition table [ 255.180944][T12130] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 255.180944][T12130] ) failed (rc=-5) [ 255.212743][ T29] audit: type=1326 audit(1758569782.484:21837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fadbb8beec9 code=0x7ffc0000 [ 255.236399][ T29] audit: type=1326 audit(1758569782.484:21838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbb8beec9 code=0x7ffc0000 [ 255.236571][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3076'. [ 255.260000][ T29] audit: type=1326 audit(1758569782.484:21839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbb8beec9 code=0x7ffc0000 [ 255.260033][ T29] audit: type=1326 audit(1758569782.484:21840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fadbb8beec9 code=0x7ffc0000 [ 255.260102][ T29] audit: type=1326 audit(1758569782.484:21841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbb8beec9 code=0x7ffc0000 [ 255.340041][ T29] audit: type=1326 audit(1758569782.484:21842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadbb8beec9 code=0x7ffc0000 [ 255.363627][ T29] audit: type=1326 audit(1758569782.484:21843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadbb8beec9 code=0x7ffc0000 [ 255.467613][T12138] netlink: 'syz.1.3076': attribute type 21 has an invalid length. [ 255.495041][T12138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3076'. [ 255.510361][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3080'. [ 255.521220][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3080'. [ 255.554965][T12155] hub 8-0:1.0: USB hub found [ 255.559722][T12155] hub 8-0:1.0: 8 ports detected [ 255.644813][T12159] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3084'. [ 255.886123][T12171] loop6: detected capacity change from 0 to 7 [ 255.886357][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.886389][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.886543][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.886583][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 255.887613][T12171] loop6: unable to read partition table [ 255.887635][T12171] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 256.054744][T12178] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 256.055686][T12178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.055732][T12178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.126799][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'. [ 256.181373][T12188] netlink: 'syz.4.3092': attribute type 21 has an invalid length. [ 256.225355][T12193] netlink: 'syz.3.3093': attribute type 10 has an invalid length. [ 256.225446][T12193] bridge0: port 3(syz_tun) entered disabled state [ 256.225684][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.232854][T12193] bridge0: port 3(syz_tun) entered blocking state [ 256.232934][T12193] bridge0: port 3(syz_tun) entered forwarding state [ 256.233065][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.233103][T12193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.235473][T12193] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 256.307719][T12203] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 256.371702][T12204] loop4: detected capacity change from 0 to 4096 [ 256.378469][T12204] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 256.381294][T12204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.799466][T12233] netlink: 'syz.1.3105': attribute type 21 has an invalid length. [ 256.912638][T12231] SELinux: failed to load policy [ 256.962124][T12250] 9pnet: Could not find request transport: fd0x0000000000000007 [ 257.249536][T12285] 9pnet_fd: Insufficient options for proto=fd [ 257.407912][T12297] futex_wake_op: syz.2.3129 tries to shift op by -1; fix this program [ 257.488989][T12201] syz.4.3095 (12201) used greatest stack depth: 6200 bytes left [ 257.497827][T11330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.527778][T12310] 9pnet_fd: Insufficient options for proto=fd [ 257.609533][T12322] FAULT_INJECTION: forcing a failure. [ 257.609533][T12322] name failslab, interval 1, probability 0, space 0, times 0 [ 257.622335][T12322] CPU: 0 UID: 0 PID: 12322 Comm: syz.2.3140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 257.622361][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.622372][T12322] Call Trace: [ 257.622379][T12322] [ 257.622387][T12322] __dump_stack+0x1d/0x30 [ 257.622436][T12322] dump_stack_lvl+0xe8/0x140 [ 257.622456][T12322] dump_stack+0x15/0x1b [ 257.622472][T12322] should_fail_ex+0x265/0x280 [ 257.622525][T12322] should_failslab+0x8c/0xb0 [ 257.622554][T12322] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 257.622584][T12322] ? __d_alloc+0x3d/0x340 [ 257.622610][T12322] __d_alloc+0x3d/0x340 [ 257.622679][T12322] d_alloc_parallel+0x53/0xc60 [ 257.622706][T12322] ? __d_lookup+0x316/0x340 [ 257.622734][T12322] ? lookup_noperm_common+0x1be/0x2a0 [ 257.622831][T12322] ? d_lookup+0xb2/0xd0 [ 257.622859][T12322] proc_fill_cache+0x158/0x240 [ 257.622880][T12322] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 257.622933][T12322] proc_map_files_readdir+0x4fa/0x690 [ 257.622974][T12322] iterate_dir+0x111/0x330 [ 257.622996][T12322] ? mutex_lock+0xd/0x30 [ 257.623089][T12322] __se_sys_getdents+0x88/0x1b0 [ 257.623110][T12322] ? __pfx_filldir+0x10/0x10 [ 257.623135][T12322] __x64_sys_getdents+0x43/0x50 [ 257.623154][T12322] x64_sys_call+0xee7/0x2ff0 [ 257.623236][T12322] do_syscall_64+0xd2/0x200 [ 257.623323][T12322] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 257.623347][T12322] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 257.623381][T12322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.623406][T12322] RIP: 0033:0x7fb907eceec9 [ 257.623501][T12322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.623522][T12322] RSP: 002b:00007fb906937038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 257.623543][T12322] RAX: ffffffffffffffda RBX: 00007fb908125fa0 RCX: 00007fb907eceec9 [ 257.623555][T12322] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000004 [ 257.623568][T12322] RBP: 00007fb906937090 R08: 0000000000000000 R09: 0000000000000000 [ 257.623652][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.623666][T12322] R13: 00007fb908126038 R14: 00007fb908125fa0 R15: 00007ffebee189c8 [ 257.623682][T12322] [ 257.874604][T12326] loop1: detected capacity change from 0 to 512 [ 257.890100][T12326] EXT4-fs: Ignoring removed nobh option [ 257.918951][T12326] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 258.030174][T12342] 9pnet_fd: Insufficient options for proto=fd [ 258.113826][T12350] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 258.113826][T12350] program syz.2.3153 not setting count and/or reply_len properly [ 258.163577][T12353] FAULT_INJECTION: forcing a failure. [ 258.163577][T12353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.176728][T12353] CPU: 1 UID: 0 PID: 12353 Comm: syz.3.3154 Not tainted syzkaller #0 PREEMPT(voluntary) [ 258.176759][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.176773][T12353] Call Trace: [ 258.176780][T12353] [ 258.176788][T12353] __dump_stack+0x1d/0x30 [ 258.176872][T12353] dump_stack_lvl+0xe8/0x140 [ 258.176894][T12353] dump_stack+0x15/0x1b [ 258.176912][T12353] should_fail_ex+0x265/0x280 [ 258.176955][T12353] should_fail+0xb/0x20 [ 258.176974][T12353] should_fail_usercopy+0x1a/0x20 [ 258.177138][T12353] _copy_from_user+0x1c/0xb0 [ 258.177172][T12353] sg_write+0x1ed/0x750 [ 258.177279][T12353] vfs_writev+0x406/0x8b0 [ 258.177309][T12353] ? __pfx_sg_write+0x10/0x10 [ 258.177336][T12353] do_writev+0xe7/0x210 [ 258.177383][T12353] __x64_sys_writev+0x45/0x50 [ 258.177406][T12353] x64_sys_call+0x1e9a/0x2ff0 [ 258.177499][T12353] do_syscall_64+0xd2/0x200 [ 258.177534][T12353] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 258.177586][T12353] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 258.177664][T12353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.177684][T12353] RIP: 0033:0x7f976eaeeec9 [ 258.177701][T12353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.177744][T12353] RSP: 002b:00007f976d54f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 258.177763][T12353] RAX: ffffffffffffffda RBX: 00007f976ed45fa0 RCX: 00007f976eaeeec9 [ 258.177776][T12353] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 258.177790][T12353] RBP: 00007f976d54f090 R08: 0000000000000000 R09: 0000000000000000 [ 258.177803][T12353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.177816][T12353] R13: 00007f976ed46038 R14: 00007f976ed45fa0 R15: 00007ffee69fc578 [ 258.177833][T12353] [ 258.402824][T12358] wireguard0: entered promiscuous mode [ 258.408454][T12358] wireguard0: entered allmulticast mode [ 258.626988][T12374] netlink: 'syz.3.3156': attribute type 21 has an invalid length. [ 258.881986][ C1] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.891916][ T4636] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 258.928986][ C0] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.938952][ T4636] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 258.947430][ T4636] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 259.003899][T12395] vlan2: entered allmulticast mode [ 259.017816][ T4636] bridge0: port 1(syz_tun) entered disabled state [ 259.026145][T12397] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 259.048144][ T4636] syz_tun (unregistering): left allmulticast mode [ 259.055006][ T4636] syz_tun (unregistering): left promiscuous mode [ 259.061404][ T4636] bridge0: port 1(syz_tun) entered disabled state [ 259.083483][T12402] FAULT_INJECTION: forcing a failure. [ 259.083483][T12402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.096634][T12402] CPU: 1 UID: 0 PID: 12402 Comm: syz.0.3170 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.096667][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.096681][T12402] Call Trace: [ 259.096688][T12402] [ 259.096696][T12402] __dump_stack+0x1d/0x30 [ 259.096796][T12402] dump_stack_lvl+0xe8/0x140 [ 259.096891][T12402] dump_stack+0x15/0x1b [ 259.096910][T12402] should_fail_ex+0x265/0x280 [ 259.096938][T12402] should_fail+0xb/0x20 [ 259.097032][T12402] should_fail_usercopy+0x1a/0x20 [ 259.097112][T12402] _copy_from_iter+0xd2/0xe80 [ 259.097209][T12402] ? __build_skb_around+0x1a0/0x200 [ 259.097235][T12402] ? __alloc_skb+0x223/0x320 [ 259.097287][T12402] netlink_sendmsg+0x471/0x6b0 [ 259.097319][T12402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.097426][T12402] __sock_sendmsg+0x142/0x180 [ 259.097460][T12402] ____sys_sendmsg+0x31e/0x4e0 [ 259.097520][T12402] ___sys_sendmsg+0x17b/0x1d0 [ 259.097678][T12402] __x64_sys_sendmsg+0xd4/0x160 [ 259.097712][T12402] x64_sys_call+0x191e/0x2ff0 [ 259.097736][T12402] do_syscall_64+0xd2/0x200 [ 259.097792][T12402] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.097838][T12402] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 259.097937][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.097958][T12402] RIP: 0033:0x7f84c511eec9 [ 259.098043][T12402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.098143][T12402] RSP: 002b:00007f84c3b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.098240][T12402] RAX: ffffffffffffffda RBX: 00007f84c5375fa0 RCX: 00007f84c511eec9 [ 259.098266][T12402] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 259.098280][T12402] RBP: 00007f84c3b87090 R08: 0000000000000000 R09: 0000000000000000 [ 259.098294][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.098348][T12402] R13: 00007f84c5376038 R14: 00007f84c5375fa0 R15: 00007fff09b880c8 [ 259.098366][T12402] [ 259.302013][T12405] syz!: rxe_newlink: already configured on team_slave_0 [ 259.332758][T12391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.341809][T12391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.406910][ T3577] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.435980][T12385] lo speed is unknown, defaulting to 1000 [ 259.476824][ T3577] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.500679][T12385] lo speed is unknown, defaulting to 1000 [ 259.535681][T12430] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 259.536664][ T3577] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.579111][T12433] loop1: detected capacity change from 0 to 128 [ 259.617962][ T3577] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.655935][T10042] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 259.663949][T10042] FAT-fs (loop1): Filesystem has been set read-only [ 259.687469][T12385] chnl_net:caif_netlink_parms(): no params data found [ 259.731679][T12446] team0: No ports can be present during mode change [ 259.749231][T12446] team_slave_0: left promiscuous mode [ 259.756729][T12446] team0 (unregistering): Port device team_slave_0 removed [ 259.764616][T12446] team_slave_1: left promiscuous mode [ 259.772538][T12446] team0 (unregistering): Port device team_slave_1 removed [ 259.791647][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 259.791664][ T29] audit: type=1326 audit(1758569787.097:22358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c511eec9 code=0x7ffc0000 [ 259.799284][T12453] FAULT_INJECTION: forcing a failure. [ 259.799284][T12453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.823011][ T29] audit: type=1326 audit(1758569787.097:22359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c511eec9 code=0x7ffc0000 [ 259.835068][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz.1.3185 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.835100][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.835124][T12453] Call Trace: [ 259.835130][T12453] [ 259.835137][T12453] __dump_stack+0x1d/0x30 [ 259.835157][T12453] dump_stack_lvl+0xe8/0x140 [ 259.835175][T12453] dump_stack+0x15/0x1b [ 259.835198][T12453] should_fail_ex+0x265/0x280 [ 259.835223][T12453] should_fail+0xb/0x20 [ 259.835277][T12453] should_fail_usercopy+0x1a/0x20 [ 259.835302][T12453] _copy_from_iter+0xd2/0xe80 [ 259.835329][T12453] ? __build_skb_around+0x1a0/0x200 [ 259.835376][T12453] ? __alloc_skb+0x223/0x320 [ 259.835399][T12453] netlink_sendmsg+0x471/0x6b0 [ 259.835427][T12453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.835482][T12453] __sock_sendmsg+0x142/0x180 [ 259.835533][T12453] ____sys_sendmsg+0x31e/0x4e0 [ 259.835561][T12453] ___sys_sendmsg+0x17b/0x1d0 [ 259.835599][T12453] __x64_sys_sendmsg+0xd4/0x160 [ 259.835629][T12453] x64_sys_call+0x191e/0x2ff0 [ 259.835659][T12453] do_syscall_64+0xd2/0x200 [ 259.835705][T12453] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.835729][T12453] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 259.835811][T12453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.835833][T12453] RIP: 0033:0x7f133b67eec9 [ 259.835849][T12453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.835895][T12453] RSP: 002b:00007f133a0c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.835917][T12453] RAX: ffffffffffffffda RBX: 00007f133b8d6090 RCX: 00007f133b67eec9 [ 259.835930][T12453] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 259.835942][T12453] RBP: 00007f133a0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.835955][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.835968][T12453] R13: 00007f133b8d6128 R14: 00007f133b8d6090 R15: 00007ffc47170478 [ 259.835987][T12453] [ 260.058970][ T29] audit: type=1326 audit(1758569787.097:22360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f84c511eec9 code=0x7ffc0000 [ 260.082536][ T29] audit: type=1326 audit(1758569787.097:22361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c511eec9 code=0x7ffc0000 [ 260.106325][ T29] audit: type=1326 audit(1758569787.097:22362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84c511eec9 code=0x7ffc0000 [ 260.129910][ T29] audit: type=1326 audit(1758569787.097:22363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c511eec9 code=0x7ffc0000 [ 260.153484][ T29] audit: type=1326 audit(1758569787.097:22364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84c511eec9 code=0x7ffc0000 [ 260.177106][ T29] audit: type=1326 audit(1758569787.097:22365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c511eec9 code=0x7ffc0000 [ 260.201248][ T29] audit: type=1326 audit(1758569787.097:22366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84c511eec9 code=0x7ffc0000 [ 260.247476][T12451] bridge0: entered promiscuous mode [ 260.252975][T12451] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 260.260919][T12451] macvtap1: entered allmulticast mode [ 260.266362][T12451] bridge0: entered allmulticast mode [ 260.305852][T12464] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 260.353988][ T29] audit: type=1400 audit(1758569787.653:22367): avc: denied { mount } for pid=12467 comm="syz.3.3192" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 260.403798][T12477] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.445815][T12479] __nla_validate_parse: 16 callbacks suppressed [ 260.445827][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3188'. [ 260.464074][ T3577] .` (unregistering): Released all slaves [ 260.474803][ T3577] bond1 (unregistering): Released all slaves [ 260.484461][ T3577] bond2 (unregistering): Released all slaves [ 260.491066][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3191'. [ 260.511244][T12385] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.518400][T12385] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.549242][T12385] bridge_slave_0: entered allmulticast mode [ 260.556069][T12385] bridge_slave_0: entered promiscuous mode [ 260.602409][T12479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.628629][T12479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.659118][T12385] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.666252][T12385] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.702925][T12487] netlink: 178020 bytes leftover after parsing attributes in process `syz.0.3195'. [ 260.720786][T12385] bridge_slave_1: entered allmulticast mode [ 260.727381][T12487] netlink: zone id is out of range [ 260.734499][T12385] bridge_slave_1: entered promiscuous mode [ 260.752931][T12487] netlink: zone id is out of range [ 260.758072][T12487] netlink: zone id is out of range [ 260.777437][T12492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12492 comm=syz.1.3196 [ 260.831217][T12487] netlink: zone id is out of range [ 260.836880][T12487] netlink: zone id is out of range [ 260.846542][T12385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.930714][T12385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.942562][ T3577] hsr_slave_0: left promiscuous mode [ 260.957819][ T3577] hsr_slave_1: left promiscuous mode [ 260.969852][ T3577] veth0_macvtap: left promiscuous mode [ 260.977671][ T3577] veth1_vlan: left promiscuous mode [ 261.006056][ T3577] veth0_vlan: left promiscuous mode [ 261.012622][T12503] loop4: detected capacity change from 0 to 512 [ 261.040873][T12503] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 261.248996][T12503] EXT4-fs (loop4): mount failed [ 261.531800][T12498] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3198'. [ 261.564767][T12385] team0: Port device team_slave_0 added [ 261.577818][T12385] team0: Port device team_slave_1 added [ 261.664107][T12385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.671238][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.697308][T12385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.731544][T12385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.738632][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.764602][T12385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.902477][T12385] hsr_slave_0: entered promiscuous mode [ 261.918096][T12385] hsr_slave_1: entered promiscuous mode [ 261.924155][T12385] debugfs: 'hsr0' already exists in 'hsr' [ 261.930054][T12385] Cannot create hsr debugfs directory [ 261.938326][T12524] FAULT_INJECTION: forcing a failure. [ 261.938326][T12524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.951825][T12524] CPU: 0 UID: 0 PID: 12524 Comm: syz.1.3206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.951854][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.951869][T12524] Call Trace: [ 261.951876][T12524] [ 261.951884][T12524] __dump_stack+0x1d/0x30 [ 261.951983][T12524] dump_stack_lvl+0xe8/0x140 [ 261.952006][T12524] dump_stack+0x15/0x1b [ 261.952023][T12524] should_fail_ex+0x265/0x280 [ 261.952104][T12524] should_fail+0xb/0x20 [ 261.952128][T12524] should_fail_usercopy+0x1a/0x20 [ 261.952222][T12524] fpu__restore_sig+0x12d/0xaa0 [ 261.952259][T12524] ? should_fail_ex+0xdb/0x280 [ 261.952295][T12524] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 261.952327][T12524] x64_sys_call+0x2d3c/0x2ff0 [ 261.952352][T12524] do_syscall_64+0xd2/0x200 [ 261.952382][T12524] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 261.952473][T12524] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 261.952502][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.952535][T12524] RIP: 0033:0x7f133b67eec7 [ 261.952571][T12524] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 261.952592][T12524] RSP: 002b:00007f133a0e7038 EFLAGS: 00000246 [ 261.952610][T12524] RAX: 0000000000000010 RBX: 00007f133b8d5fa0 RCX: 00007f133b67eec9 [ 261.952623][T12524] RDX: 0200000000000000 RSI: 000000000000545c RDI: 0000000000000003 [ 261.952636][T12524] RBP: 00007f133a0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.952648][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.952690][T12524] R13: 00007f133b8d6038 R14: 00007f133b8d5fa0 R15: 00007ffc47170478 [ 261.952707][T12524] [ 262.161214][ T3577] IPVS: stop unused estimator thread 0... [ 262.268174][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3211'. [ 262.391428][T12559] netlink: 'syz.4.3216': attribute type 4 has an invalid length. [ 262.405071][ T3397] lo speed is unknown, defaulting to 1000 [ 262.411018][ T3397] sz1: Port: 1 Link DOWN [ 262.494145][ T36] lo speed is unknown, defaulting to 1000 [ 262.510215][T12559] netlink: 'syz.4.3216': attribute type 4 has an invalid length. [ 262.538249][ T10] lo speed is unknown, defaulting to 1000 [ 262.544109][ T10] sz1: Port: 1 Link ACTIVE [ 262.769711][ T9] lo speed is unknown, defaulting to 1000 [ 262.815581][T12385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.830046][T12385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.948002][T12385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.114150][T12385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.470134][T12558] net_ratelimit: 106 callbacks suppressed [ 263.470155][T12558] Set syz1 is full, maxelem 65536 reached [ 263.488882][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3213'. [ 263.626161][T12385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.639511][T12385] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.669968][ T2185] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.677049][ T2185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.795450][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.802607][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.851232][T12583] netlink: 'syz.0.3223': attribute type 2 has an invalid length. [ 263.859444][T12583] netlink: 5356 bytes leftover after parsing attributes in process `syz.0.3223'. [ 263.965771][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3225'. [ 263.980201][T12385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.989493][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'. [ 264.000116][T12597] netlink: 'syz.0.3228': attribute type 21 has an invalid length. [ 264.008097][T12597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3228'. [ 264.100652][T12385] veth0_vlan: entered promiscuous mode [ 264.109245][T12385] veth1_vlan: entered promiscuous mode [ 264.128345][T12385] veth0_macvtap: entered promiscuous mode [ 264.136639][T12385] veth1_macvtap: entered promiscuous mode [ 264.142808][T12622] FAULT_INJECTION: forcing a failure. [ 264.142808][T12622] name failslab, interval 1, probability 0, space 0, times 0 [ 264.155549][T12622] CPU: 1 UID: 0 PID: 12622 Comm: syz.3.3233 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.155582][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.155590][T12622] Call Trace: [ 264.155594][T12622] [ 264.155649][T12622] __dump_stack+0x1d/0x30 [ 264.155674][T12622] dump_stack_lvl+0xe8/0x140 [ 264.155694][T12622] dump_stack+0x15/0x1b [ 264.155833][T12622] should_fail_ex+0x265/0x280 [ 264.155850][T12622] should_failslab+0x8c/0xb0 [ 264.155932][T12622] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 264.155951][T12622] ? cond_bools_copy+0x30/0x80 [ 264.155969][T12622] ? __pfx_cond_bools_destroy+0x10/0x10 [ 264.156058][T12622] kmemdup_noprof+0x2b/0x70 [ 264.156207][T12622] ? __pfx_cond_bools_destroy+0x10/0x10 [ 264.156232][T12622] cond_bools_copy+0x30/0x80 [ 264.156249][T12622] ? __pfx_cond_bools_destroy+0x10/0x10 [ 264.156265][T12622] hashtab_duplicate+0x11e/0x360 [ 264.156352][T12622] ? __pfx_cond_bools_copy+0x10/0x10 [ 264.156370][T12622] cond_policydb_dup+0xd2/0x4e0 [ 264.156389][T12622] security_set_bools+0xa0/0x340 [ 264.156407][T12622] sel_commit_bools_write+0x1ea/0x270 [ 264.156511][T12622] vfs_writev+0x406/0x8b0 [ 264.156529][T12622] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 264.156579][T12622] ? mutex_lock+0xd/0x30 [ 264.156629][T12622] do_writev+0xe7/0x210 [ 264.156648][T12622] __x64_sys_writev+0x45/0x50 [ 264.156664][T12622] x64_sys_call+0x1e9a/0x2ff0 [ 264.156685][T12622] do_syscall_64+0xd2/0x200 [ 264.156721][T12622] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 264.156743][T12622] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 264.156770][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.156850][T12622] RIP: 0033:0x7f976eaeeec9 [ 264.156861][T12622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.156874][T12622] RSP: 002b:00007f976d54f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 264.156888][T12622] RAX: ffffffffffffffda RBX: 00007f976ed45fa0 RCX: 00007f976eaeeec9 [ 264.156897][T12622] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000003 [ 264.156905][T12622] RBP: 00007f976d54f090 R08: 0000000000000000 R09: 0000000000000000 [ 264.156913][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.156944][T12622] R13: 00007f976ed46038 R14: 00007f976ed45fa0 R15: 00007ffee69fc578 [ 264.156964][T12622] [ 264.399117][T12385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.419130][T12385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.432208][ T2185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.442049][ T2185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.450994][ T2185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.479109][ T2185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.497859][T12624] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.574534][T12629] 9pnet_fd: Insufficient options for proto=fd [ 264.609371][T12633] loop2: detected capacity change from 0 to 2048 [ 264.653265][T12637] batadv_slave_1: entered promiscuous mode [ 264.660824][T12633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.689634][T12633] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3237: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 264.722966][T12633] EXT4-fs (loop2): Remounting filesystem read-only [ 264.751242][T12643] netlink: 'syz.3.3235': attribute type 10 has an invalid length. [ 264.773256][T12643] team0: Device dummy0 is up. Set it down before adding it as a team port [ 264.776322][T12385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.829548][T12652] loop4: detected capacity change from 0 to 164 [ 264.838604][T12652] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 264.856030][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 264.856048][ T29] audit: type=1400 audit(1758569792.137:22434): avc: denied { mount } for pid=12645 comm="+}[@" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 264.888551][T12636] batadv_slave_1: left promiscuous mode [ 264.895296][T12646] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 264.907853][T12646] Symlink component flag not implemented [ 264.913519][T12646] Symlink component flag not implemented [ 264.944036][T12646] Symlink component flag not implemented (7) [ 264.950092][T12646] Symlink component flag not implemented (116) [ 265.031402][ T29] audit: type=1400 audit(1758569792.307:22435): avc: denied { unmount } for pid=11330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 265.069164][T12663] FAULT_INJECTION: forcing a failure. [ 265.069164][T12663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.082514][T12663] CPU: 0 UID: 0 PID: 12663 Comm: syz.4.3244 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.082548][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.082562][T12663] Call Trace: [ 265.082634][T12663] [ 265.082643][T12663] __dump_stack+0x1d/0x30 [ 265.082668][T12663] dump_stack_lvl+0xe8/0x140 [ 265.082691][T12663] dump_stack+0x15/0x1b [ 265.082718][T12663] should_fail_ex+0x265/0x280 [ 265.082745][T12663] should_fail+0xb/0x20 [ 265.082768][T12663] should_fail_usercopy+0x1a/0x20 [ 265.082797][T12663] _copy_from_iter+0xd2/0xe80 [ 265.082828][T12663] ? __build_skb_around+0x1a0/0x200 [ 265.082868][T12663] ? __alloc_skb+0x223/0x320 [ 265.082894][T12663] netlink_sendmsg+0x471/0x6b0 [ 265.082928][T12663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.083084][T12663] __sock_sendmsg+0x142/0x180 [ 265.083124][T12663] ____sys_sendmsg+0x31e/0x4e0 [ 265.083156][T12663] ___sys_sendmsg+0x17b/0x1d0 [ 265.083299][T12663] __x64_sys_sendmsg+0xd4/0x160 [ 265.083333][T12663] x64_sys_call+0x191e/0x2ff0 [ 265.083358][T12663] do_syscall_64+0xd2/0x200 [ 265.083422][T12663] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 265.083449][T12663] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.083481][T12663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.083501][T12663] RIP: 0033:0x7fadbb8beec9 [ 265.083517][T12663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.083534][T12663] RSP: 002b:00007fadba327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.083556][T12663] RAX: ffffffffffffffda RBX: 00007fadbbb15fa0 RCX: 00007fadbb8beec9 [ 265.083606][T12663] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000008 [ 265.083621][T12663] RBP: 00007fadba327090 R08: 0000000000000000 R09: 0000000000000000 [ 265.083635][T12663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.083649][T12663] R13: 00007fadbbb16038 R14: 00007fadbbb15fa0 R15: 00007ffff61059f8 [ 265.083745][T12663] [ 265.115301][T12660] netlink: 'syz.1.3243': attribute type 21 has an invalid length. [ 265.268526][ T29] audit: type=1326 audit(1758569792.545:22436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12668 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976eaeeec9 code=0x7ffc0000 [ 265.337678][ T29] audit: type=1326 audit(1758569792.595:22437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12668 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f976eaeeec9 code=0x7ffc0000 [ 265.361506][ T29] audit: type=1326 audit(1758569792.595:22438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12668 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976eaeeec9 code=0x7ffc0000 [ 265.385283][ T29] audit: type=1326 audit(1758569792.595:22439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12668 comm="syz.3.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976eaeeec9 code=0x7ffc0000 [ 265.443340][T12674] 9pnet_fd: Insufficient options for proto=fd [ 265.478787][ T29] audit: type=1326 audit(1758569792.744:22440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12675 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976eaeeec9 code=0x7ffc0000 [ 265.502697][ T29] audit: type=1326 audit(1758569792.744:22441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12675 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976eaeeec9 code=0x7ffc0000 [ 265.526471][ T29] audit: type=1326 audit(1758569792.744:22442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12675 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f976eaeeec9 code=0x7ffc0000 [ 265.550414][ T29] audit: type=1326 audit(1758569792.744:22443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12675 comm="syz.3.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976eaeeec9 code=0x7ffc0000 [ 265.751109][T12688] loop1: detected capacity change from 0 to 512 [ 265.770666][T12688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.785729][T12688] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.168861][T12700] 9pnet_fd: Insufficient options for proto=fd [ 266.176645][ C0] I/O error, dev loop0, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.186008][ T3304] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 266.202157][ C0] I/O error, dev loop0, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.211609][ T3304] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 266.219997][ T3304] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 266.245953][ T3304] bridge0: port 3(syz_tun) entered disabled state [ 266.256591][ T3304] syz_tun (unregistering): left allmulticast mode [ 266.263703][ T3304] syz_tun (unregistering): left promiscuous mode [ 266.270296][ T3304] bridge0: port 3(syz_tun) entered disabled state [ 266.281686][T12711] bridge: RTM_NEWNEIGH with invalid ether address [ 266.316072][T12701] lo speed is unknown, defaulting to 1000 [ 266.356814][T12714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12714 comm=syz.4.3260 [ 266.373000][T12714] __nla_validate_parse: 4 callbacks suppressed [ 266.373017][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3260'. [ 266.413516][T12701] chnl_net:caif_netlink_parms(): no params data found [ 266.450185][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.457366][T12701] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.476267][T12701] bridge_slave_0: entered allmulticast mode [ 266.483350][T12701] bridge_slave_0: entered promiscuous mode [ 266.490587][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.497725][T12701] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.505638][T12701] bridge_slave_1: entered allmulticast mode [ 266.512189][T12701] bridge_slave_1: entered promiscuous mode [ 266.512629][T12722] loop9: detected capacity change from 0 to 7 [ 266.524643][T12722] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.532576][T12722] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.540472][T12722] loop9: unable to read partition table [ 266.546379][T12722] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 266.546379][T12722] ) failed (rc=-5) [ 266.560205][T10042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.575363][ T3547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.599670][T12726] loop1: detected capacity change from 0 to 164 [ 266.609528][T12726] syz.1.3262: attempt to access beyond end of device [ 266.609528][T12726] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 266.626090][T12726] syz.1.3262: attempt to access beyond end of device [ 266.626090][T12726] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 266.628064][T12701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.656884][ T3547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.669656][T10042] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 266.679291][T10042] ISOFS: unable to read i-node block [ 266.679392][T12701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.685923][T10042] ISOFS: unable to read i-node block [ 266.723081][ T3547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.737365][T12728] bridge0: port 3(syz_tun) entered disabled state [ 266.768231][T12728] syz_tun (unregistering): left allmulticast mode [ 266.774768][T12728] syz_tun (unregistering): left promiscuous mode [ 266.781134][T12728] bridge0: port 3(syz_tun) entered disabled state [ 266.904343][T12701] team0: Port device team_slave_0 added [ 266.910375][ T1034] IPVS: starting estimator thread 0... [ 266.911823][T12701] team0: Port device team_slave_1 added [ 266.926197][ T3547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.968238][T12701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.975350][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.001326][T12701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.015827][T12701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.022805][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.048831][T12701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.061781][T12737] IPVS: using max 2832 ests per chain, 141600 per kthread [ 267.155781][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'. [ 267.169404][T12701] hsr_slave_0: entered promiscuous mode [ 267.176981][T12701] hsr_slave_1: entered promiscuous mode [ 267.183052][T12701] debugfs: 'hsr0' already exists in 'hsr' [ 267.188985][T12701] Cannot create hsr debugfs directory [ 267.196246][ T3547] bridge_slave_1: left allmulticast mode [ 267.201909][ T3547] bridge_slave_1: left promiscuous mode [ 267.207747][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.215496][T12739] netlink: 'syz.3.3269': attribute type 21 has an invalid length. [ 267.226161][ T3547] bridge_slave_0: left allmulticast mode [ 267.231947][ T3547] bridge_slave_0: left promiscuous mode [ 267.237995][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.348223][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.358915][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.369354][ T3547] bond0 (unregistering): Released all slaves [ 267.378815][T12739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3269'. [ 267.437966][T12756] loop9: detected capacity change from 0 to 7 [ 267.451011][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 267.459698][T12756] Buffer I/O error on dev loop9, logical block 0, async page read [ 267.467640][T12756] loop9: unable to read partition table [ 267.473539][T12756] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 267.473539][T12756] ) failed (rc=-5) [ 267.736673][ T3547] hsr_slave_0: left promiscuous mode [ 267.827514][ T3547] hsr_slave_1: left promiscuous mode [ 267.835735][ T3547] veth1_macvtap: left promiscuous mode [ 267.842774][ T3547] veth0_macvtap: left promiscuous mode [ 267.960979][ T3547] pimreg (unregistering): left allmulticast mode [ 268.008626][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'. [ 268.394759][T12742] lo speed is unknown, defaulting to 1000 [ 268.539571][T12731] loop2: detected capacity change from 0 to 128 [ 268.548454][T12731] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 268.591401][T12742] chnl_net:caif_netlink_parms(): no params data found [ 268.649929][ T3547] IPVS: stop unused estimator thread 0... [ 268.968958][T12742] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.976369][T12742] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.985659][T12742] bridge_slave_0: entered allmulticast mode [ 268.994646][T12742] bridge_slave_0: entered promiscuous mode [ 269.020490][T12742] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.027837][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.053497][T12742] bridge_slave_1: entered allmulticast mode [ 269.065521][T12742] bridge_slave_1: entered promiscuous mode [ 269.165124][T12742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.174610][T12701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.300866][T12742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.311004][T12701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.380830][ T3575] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.408448][T12701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.421886][T12701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.442735][T12742] team0: Port device team_slave_0 added [ 269.451098][ T3575] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.477359][T12742] team0: Port device team_slave_1 added [ 269.520933][ T3575] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.536959][T12824] loop4: detected capacity change from 0 to 128 [ 269.548418][T12742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.555466][T12742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.581392][T12742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.594424][T12742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.601459][T12742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.627627][T12742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.649342][ T3575] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.691321][T12742] hsr_slave_0: entered promiscuous mode [ 269.707477][T12742] hsr_slave_1: entered promiscuous mode [ 269.713667][T12742] debugfs: 'hsr0' already exists in 'hsr' [ 269.719562][T12742] Cannot create hsr debugfs directory [ 269.743746][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3295'. [ 269.787419][ T3575] bridge_slave_1: left allmulticast mode [ 269.793098][ T3575] bridge_slave_1: left promiscuous mode [ 269.798910][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.806873][ T3575] bridge_slave_0: left allmulticast mode [ 269.812513][ T3575] bridge_slave_0: left promiscuous mode [ 269.818310][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.973906][ T3575] bridge0 (unregistering): left allmulticast mode [ 270.127689][ T3575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.170935][ T3575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.185498][ T3575] bond0 (unregistering): Released all slaves [ 270.214134][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3298'. [ 270.310319][T12701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.391589][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3302'. [ 270.614197][T12701] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.624496][T12865] loop2: detected capacity change from 0 to 128 [ 270.631128][ T3575] veth1_macvtap: left promiscuous mode [ 270.636724][ T3575] veth0_macvtap: left promiscuous mode [ 270.650871][T12865] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3307'. [ 270.651735][ T3575] veth1_vlan: left promiscuous mode [ 270.665691][ T3575] veth0_vlan: left promiscuous mode [ 270.796633][ T3575] team0 (unregistering): Port device team_slave_1 removed [ 270.807296][ T3575] team0 (unregistering): Port device team_slave_0 removed [ 270.823267][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3309'. [ 270.854581][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 270.854598][ T29] audit: type=1400 audit(1758569798.103:22643): avc: denied { read } for pid=12870 comm="syz.2.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 270.867658][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.888222][ T29] audit: type=1400 audit(1758569798.133:22644): avc: denied { create } for pid=12870 comm="syz.2.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.888784][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.908563][ T29] audit: type=1400 audit(1758569798.133:22645): avc: denied { write } for pid=12870 comm="syz.2.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 270.944159][T12871] bridge0: port 3(syz_tun) entered blocking state [ 270.951030][T12871] bridge0: port 3(syz_tun) entered disabled state [ 270.957929][T12871] syz_tun: entered allmulticast mode [ 270.965666][T12871] syz_tun: entered promiscuous mode [ 270.971925][T12871] bridge0: port 3(syz_tun) entered blocking state [ 270.978423][T12871] bridge0: port 3(syz_tun) entered forwarding state [ 270.995774][T12742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.010214][ T29] audit: type=1400 audit(1758569798.242:22646): avc: denied { create } for pid=12742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.031153][ T29] audit: type=1400 audit(1758569798.242:22647): avc: denied { write } for pid=12742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.067907][T12742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.081148][ T29] audit: type=1400 audit(1758569798.332:22648): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.105513][ T29] audit: type=1400 audit(1758569798.332:22649): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.160475][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.167613][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.184166][T12742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.214443][ T29] audit: type=1400 audit(1758569798.462:22650): avc: denied { ioctl } for pid=12385 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.221741][T12701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.250866][T12701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.283207][T12742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.306989][ T29] audit: type=1400 audit(1758569798.551:22651): avc: denied { allowed } for pid=12886 comm="syz.3.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 271.327833][ T29] audit: type=1400 audit(1758569798.551:22652): avc: denied { create } for pid=12886 comm="syz.3.3313" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 272.408000][T12742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.393346][T12742] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.395485][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.402668][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.412434][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.419578][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.462343][T12908] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3317'. [ 274.508722][T12906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.516185][T12906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.539996][T12906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.547431][T12906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.563443][T12701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.614657][T12742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.874038][T12947] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 274.893486][T12947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.921578][T12947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.969507][T12742] veth0_vlan: entered promiscuous mode [ 274.979724][T12742] veth1_vlan: entered promiscuous mode [ 275.006655][T12742] veth0_macvtap: entered promiscuous mode [ 275.015381][T12742] veth1_macvtap: entered promiscuous mode [ 275.034186][T12742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.048963][T12742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.066461][ T3575] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.081822][ T3575] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.129179][ T3575] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.196541][ T3575] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.233017][T12701] veth0_vlan: entered promiscuous mode [ 275.298459][T12701] veth1_vlan: entered promiscuous mode [ 275.416314][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3271'. [ 275.441877][T12701] veth0_macvtap: entered promiscuous mode [ 275.456798][T12952] bridge0: port 3(syz_tun) entered blocking state [ 275.464298][T12952] bridge0: port 3(syz_tun) entered disabled state [ 275.523996][T12952] syz_tun: entered allmulticast mode [ 275.530106][T12952] syz_tun: entered promiscuous mode [ 275.535630][T12952] bridge0: port 3(syz_tun) entered blocking state [ 275.542229][T12952] bridge0: port 3(syz_tun) entered forwarding state [ 275.554490][T12701] veth1_macvtap: entered promiscuous mode [ 275.570672][T12701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.607723][T12701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.724159][ T3571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.810797][ T2185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.866151][ T2185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.886494][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 275.886510][ T29] audit: type=1400 audit(1758569803.128:22757): avc: denied { create } for pid=12969 comm="syz.3.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.891930][ T2185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.949539][T12972] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3330'. [ 275.980558][ T29] audit: type=1400 audit(1758569803.218:22758): avc: denied { connect } for pid=12969 comm="syz.3.3331" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.004210][T12972] hsr_slave_0: left promiscuous mode [ 276.010879][T12972] hsr_slave_1: left promiscuous mode [ 276.041427][ T29] audit: type=1400 audit(1758569803.218:22759): avc: denied { write } for pid=12969 comm="syz.3.3331" path="socket:[38882]" dev="sockfs" ino=38882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.239342][ T29] audit: type=1400 audit(1758569803.458:22760): avc: denied { execmem } for pid=12982 comm="syz.2.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 276.311392][ T29] audit: type=1400 audit(1758569803.537:22761): avc: denied { mount } for pid=12984 comm="syz.0.3336" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 276.333952][ T29] audit: type=1400 audit(1758569803.537:22762): avc: denied { read } for pid=12984 comm="syz.0.3336" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.357394][ T29] audit: type=1400 audit(1758569803.537:22763): avc: denied { open } for pid=12984 comm="syz.0.3336" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.381250][ T29] audit: type=1400 audit(1758569803.537:22764): avc: denied { ioctl } for pid=12984 comm="syz.0.3336" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 276.442447][T12993] loop0: detected capacity change from 0 to 512 [ 276.485951][T12290] bridge0: port 3(syz_tun) entered disabled state [ 276.500195][T12290] syz_tun (unregistering): left allmulticast mode [ 276.501124][ T29] audit: type=1400 audit(1758569803.607:22765): avc: denied { unmount } for pid=12701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 276.506787][T12290] syz_tun (unregistering): left promiscuous mode [ 276.506813][T12290] bridge0: port 3(syz_tun) entered disabled state [ 276.526945][ T29] audit: type=1400 audit(1758569803.667:22766): avc: denied { read } for pid=12988 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 276.564694][T12993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.583390][T12993] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.654420][T12981] IPv6: syztnl0: Disabled Multicast RS [ 276.681861][T12983] IPv6: syztnl0: Disabled Multicast RS [ 276.805076][ T3575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.819458][T12701] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.881032][T12988] lo speed is unknown, defaulting to 1000 [ 276.966225][ T3575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.037128][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'. [ 277.101252][T13019] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 277.251589][T13019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.260610][T13019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.312257][T12988] chnl_net:caif_netlink_parms(): no params data found [ 277.468444][T12988] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.475569][T12988] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.511769][T12988] bridge_slave_0: entered allmulticast mode [ 277.519438][T13034] loop4: detected capacity change from 0 to 128 [ 277.527001][T12988] bridge_slave_0: entered promiscuous mode [ 277.543025][T13034] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3347'. [ 277.554718][T12988] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.561938][T12988] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.591610][T12988] bridge_slave_1: entered allmulticast mode [ 277.619724][T12988] bridge_slave_1: entered promiscuous mode [ 277.738451][T13039] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3348'. [ 277.770374][ T3575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.809531][T12988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.830566][T13040] loop4: detected capacity change from 0 to 2048 [ 277.850187][ T3575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.874717][T12988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.886877][T13040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.909580][T13039] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.3348: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 277.934107][T13039] EXT4-fs (loop4): Remounting filesystem read-only [ 277.949640][T12988] team0: Port device team_slave_0 added [ 277.961193][T12988] team0: Port device team_slave_1 added [ 278.013816][T11330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.166883][T12988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.173931][T12988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.200117][T12988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.229661][T12988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.236794][T12988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.262761][T12988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.395680][T12988] hsr_slave_0: entered promiscuous mode [ 278.410324][T12988] hsr_slave_1: entered promiscuous mode [ 278.454887][T12988] debugfs: 'hsr0' already exists in 'hsr' [ 278.460903][T12988] Cannot create hsr debugfs directory [ 278.511434][ T3575] bridge_slave_0: left allmulticast mode [ 278.517159][ T3575] bridge_slave_0: left promiscuous mode [ 278.522936][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.547131][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3355'. [ 278.672474][T13066] loop6: detected capacity change from 0 to 7 [ 278.753639][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.762840][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.797515][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.806733][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.817928][T13066] loop6: unable to read partition table [ 278.857574][T13066] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 278.883611][ T3575] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 278.945821][ T3575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.965987][ T3575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.977558][T13069] loop5: detected capacity change from 0 to 8192 [ 279.013269][ T3575] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 279.023560][ T3575] bond0 (unregistering): Released all slaves [ 279.041214][ T3575] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 279.054242][ T3575] wireguard0: left promiscuous mode [ 279.061026][ T3575] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 279.077883][ T3575] bond1 (unregistering): Released all slaves [ 279.087810][ T3575] bond2 (unregistering): Released all slaves [ 279.566106][T13096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3366'. [ 279.698681][T13097] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 279.775414][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.873195][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.884774][T13100] loop2: detected capacity change from 0 to 1024 [ 279.893614][T13104] SELinux: failed to load policy [ 279.910466][ T3575] veth1_macvtap: left promiscuous mode [ 279.949848][ T3575] veth0_macvtap: left promiscuous mode [ 279.963989][T13107] loop5: detected capacity change from 0 to 512 [ 279.970396][ T3575] veth1_vlan: left promiscuous mode [ 279.985495][ T3575] veth0_vlan: left promiscuous mode [ 280.082657][ T3575] team0 (unregistering): Port device team_slave_1 removed [ 280.093030][ T3575] team0 (unregistering): Port device team_slave_0 removed [ 280.100565][ T3538] smc: removing ib device syz! [ 280.156509][T13107] lo speed is unknown, defaulting to 1000 [ 280.260155][T13115] loop6: detected capacity change from 0 to 7 [ 280.266585][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.275742][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.287820][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.296994][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.307489][T13115] loop6: unable to read partition table [ 280.318461][T13115] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 280.407697][T13113] IPv6: syztnl0: Disabled Multicast RS [ 280.474223][T12988] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.536671][T13124] loop2: detected capacity change from 0 to 128 [ 280.547646][T13124] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3375'. [ 280.562569][T12988] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.615565][T12988] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.684707][T12988] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.712760][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3378'. [ 280.761957][T12988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.779609][ T3575] IPVS: stop unused estimator thread 0... [ 280.795280][T12988] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.806317][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.813471][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.849692][T13144] loop2: detected capacity change from 0 to 764 [ 280.874461][T13144] rock: directory entry would overflow storage [ 280.880733][T13144] rock: sig=0x5245, size=8, remaining=5 [ 280.902936][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 280.902961][ T29] audit: type=1400 audit(1758569808.128:23066): avc: denied { mount } for pid=13143 comm="syz.2.3381" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 280.949540][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.956682][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.023703][T12988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.034315][T12988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.124314][ T29] audit: type=1400 audit(1758569808.338:23067): avc: denied { module_request } for pid=12988 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 281.172111][T13150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3380'. [ 281.212476][ T29] audit: type=1326 audit(1758569808.398:23068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4962cfeec9 code=0x7ffc0000 [ 281.236200][ T29] audit: type=1326 audit(1758569808.398:23069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4962cfeec9 code=0x7ffc0000 [ 281.259862][ T29] audit: type=1326 audit(1758569808.398:23070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4962cfeec9 code=0x7ffc0000 [ 281.283353][ T29] audit: type=1326 audit(1758569808.398:23071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4962cfeec9 code=0x7ffc0000 [ 281.306998][ T29] audit: type=1326 audit(1758569808.398:23072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4962cfeec9 code=0x7ffc0000 [ 281.330769][ T29] audit: type=1326 audit(1758569808.398:23073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4962cfeec9 code=0x7ffc0000 [ 281.354305][ T29] audit: type=1326 audit(1758569808.398:23074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4962cfeec9 code=0x7ffc0000 [ 281.377914][ T29] audit: type=1326 audit(1758569808.398:23075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4962cfeec9 code=0x7ffc0000 [ 281.958871][T13160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.022225][T13160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.050046][T12988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.085421][T13156] infiniband syz!: set active [ 282.090196][T13156] infiniband syz!: added team_slave_0 [ 282.091853][T11521] IPVS: starting estimator thread 0... [ 282.103467][T13162] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 282.184970][T13167] IPVS: using max 2832 ests per chain, 141600 per kthread [ 282.197442][T13156] RDS/IB: syz!: added [ 282.201454][T13156] smc: adding ib device syz! with port count 1 [ 282.270255][T13156] smc: ib device syz! port 1 has pnetid [ 282.502071][T12988] veth0_vlan: entered promiscuous mode [ 282.540891][T12988] veth1_vlan: entered promiscuous mode [ 282.565212][T13179] loop2: detected capacity change from 0 to 128 [ 282.583992][T12988] veth0_macvtap: entered promiscuous mode [ 282.594933][T13179] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3387'. [ 282.608016][T12988] veth1_macvtap: entered promiscuous mode [ 282.644386][T12988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.668597][T12988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.697276][ T3538] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.717642][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 282.729292][ T3538] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.754945][ T3538] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.784038][ T3538] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.928782][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'. [ 282.941981][T13203] loop3: detected capacity change from 0 to 128 [ 282.962097][T13203] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3397'. [ 282.977594][T13206] netlink: 'syz.0.3394': attribute type 21 has an invalid length. [ 282.990290][T13206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3394'. [ 283.073647][T13215] loop6: detected capacity change from 0 to 7 [ 283.081810][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.091029][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.092318][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.092363][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.092398][T13215] loop6: unable to read partition table [ 283.092506][T13215] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 283.246192][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 283.496498][T13236] loop4: detected capacity change from 0 to 128 [ 283.936951][T13243] FAULT_INJECTION: forcing a failure. [ 283.936951][T13243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.950092][T13243] CPU: 1 UID: 0 PID: 13243 Comm: syz.4.3411 Not tainted syzkaller #0 PREEMPT(voluntary) [ 283.950119][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.950129][T13243] Call Trace: [ 283.950135][T13243] [ 283.950142][T13243] __dump_stack+0x1d/0x30 [ 283.950163][T13243] dump_stack_lvl+0xe8/0x140 [ 283.950244][T13243] dump_stack+0x15/0x1b [ 283.950263][T13243] should_fail_ex+0x265/0x280 [ 283.950370][T13243] should_fail+0xb/0x20 [ 283.950393][T13243] should_fail_usercopy+0x1a/0x20 [ 283.950474][T13243] _copy_from_user+0x1c/0xb0 [ 283.950507][T13243] ___sys_sendmsg+0xc1/0x1d0 [ 283.950551][T13243] __x64_sys_sendmsg+0xd4/0x160 [ 283.950584][T13243] x64_sys_call+0x191e/0x2ff0 [ 283.950620][T13243] do_syscall_64+0xd2/0x200 [ 283.950719][T13243] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 283.950747][T13243] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 283.950778][T13243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.950800][T13243] RIP: 0033:0x7fadbb8beec9 [ 283.950817][T13243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.950860][T13243] RSP: 002b:00007fadba327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.950882][T13243] RAX: ffffffffffffffda RBX: 00007fadbbb15fa0 RCX: 00007fadbb8beec9 [ 283.950897][T13243] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 283.950927][T13243] RBP: 00007fadba327090 R08: 0000000000000000 R09: 0000000000000000 [ 283.950940][T13243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.950953][T13243] R13: 00007fadbbb16038 R14: 00007fadbbb15fa0 R15: 00007ffff61059f8 [ 283.950974][T13243] [ 284.261168][T13253] loop2: detected capacity change from 0 to 512 [ 284.267964][T13253] EXT4-fs: Ignoring removed orlov option [ 284.274028][T13253] EXT4-fs: Ignoring removed i_version option [ 284.298829][T13253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.345568][T13253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.351216][T13259] loop9: detected capacity change from 0 to 7 [ 284.376386][T13253] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.378435][T13259] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.406450][T13259] Buffer I/O error on dev loop9, logical block 0, async page read [ 284.414357][T13259] loop9: unable to read partition table [ 284.421937][T12385] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.431396][T13259] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 284.431396][T13259] ) failed (rc=-5) [ 284.535973][T13195] loop5: detected capacity change from 0 to 128 [ 284.552836][T13195] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 284.607391][T13269] ================================================================== [ 284.615523][T13269] BUG: KCSAN: data-race in ip_vs_add_service / ip_vs_out_hook [ 284.623012][T13269] [ 284.625352][T13269] write to 0xffff8881199a9004 of 4 bytes by task 13277 on cpu 1: [ 284.633081][T13269] ip_vs_add_service+0xa18/0xa70 [ 284.636620][ T3390] IPVS: starting estimator thread 0... [ 284.638049][T13269] do_ip_vs_set_ctl+0x6ec/0x8c0 [ 284.648369][T13269] nf_setsockopt+0x199/0x1b0 [ 284.652984][T13269] ip_setsockopt+0x102/0x110 [ 284.657597][T13269] udp_setsockopt+0x99/0xb0 [ 284.662113][T13269] sock_common_setsockopt+0x69/0x80 [ 284.667346][T13269] __sys_setsockopt+0x181/0x200 [ 284.672223][T13269] __x64_sys_setsockopt+0x64/0x80 [ 284.677275][T13269] x64_sys_call+0x20ec/0x2ff0 [ 284.681979][T13269] do_syscall_64+0xd2/0x200 [ 284.686513][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.692422][T13269] [ 284.694759][T13269] read to 0xffff8881199a9004 of 4 bytes by task 13269 on cpu 0: [ 284.702401][T13269] ip_vs_out_hook+0x1c1/0x920 [ 284.707100][T13269] nf_hook_slow+0x78/0x180 [ 284.711532][T13269] __ip_local_out+0x2cb/0x2f0 [ 284.716223][T13269] ip_send_skb+0x34/0x160 [ 284.720564][T13269] udp_send_skb+0x6e3/0xa40 [ 284.725077][T13269] udp_sendmsg+0x1050/0x13c0 [ 284.729673][T13269] inet_sendmsg+0xac/0xd0 [ 284.734008][T13269] __sock_sendmsg+0x102/0x180 [ 284.738695][T13269] ____sys_sendmsg+0x345/0x4e0 [ 284.743464][T13269] ___sys_sendmsg+0x17b/0x1d0 [ 284.748147][T13269] __sys_sendmmsg+0x178/0x300 [ 284.752833][T13269] __x64_sys_sendmmsg+0x57/0x70 [ 284.757688][T13269] x64_sys_call+0x1c4a/0x2ff0 [ 284.762365][T13269] do_syscall_64+0xd2/0x200 [ 284.766877][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.772771][T13269] [ 284.775094][T13269] value changed: 0x00000000 -> 0x00000001 [ 284.780808][T13269] [ 284.783130][T13269] Reported by Kernel Concurrency Sanitizer on: [ 284.789277][T13269] CPU: 0 UID: 0 PID: 13269 Comm: syz.0.3422 Not tainted syzkaller #0 PREEMPT(voluntary) [ 284.799081][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 284.809137][T13269] ================================================================== [ 284.817618][T13269] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 284.874744][T13278] IPVS: using max 2832 ests per chain, 141600 per kthread [ 284.999275][T13285] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 285.177167][T13276] ALSA: seq fatal error: cannot create timer (-19) [ 286.108594][T13281] loop0: detected capacity change from 0 to 128 [ 286.115555][T13281] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)