last executing test programs: 2.043909639s ago: executing program 4 (id=1902): io_setup(0x9, &(0x7f0000000b80)) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f00000000c0)={0x8, 0x800000000248}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000252000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf55b7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x3}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0xcc2a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r10 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007", @ANYRESDEC=r10], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.687117227s ago: executing program 0 (id=1909): fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="05072bbd7000ffdbdf2501000000800002807c0001800800010000000000080001000300000008000100030000003c00018008000100050000000800010080000000b8ff01000400000008000100070000000800010005000000080001000600000000000000000000002400018008000100030000ee0700010001000000080001000100000008000100020000000400030018000180140002006c6f"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) timer_create(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 1.556660008s ago: executing program 0 (id=1911): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000"], 0x5c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="5801000010001b000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x158}}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000280)=@llc={0x1a, 0x322, 0x30, 0x66, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="8189735e4e702632eb231efe675616aa8020e9c12b4036ac806b0824ae42a363c6cf5c8d9a48d1dcd0839a306b7cc9eca84780112e996dca23163c71e26ed1e947f1c7ea649f7b971828450c", 0x4c}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000380)="c3225e5e89978462397ae108b6e53ee3a89b8d9aa072d38e0e92028782b507037ebd79b710267e37b578497d57f07f0be9cab2184b7a6ced81f45ce9c7d5dd5200acea0e2cd824184926d5a64741479ccb2aac6ff310e9dead87d869d7a42da807c57011f11b282f33b33243ac5200e85f961a16a8490254f9df7468664983b3e77d", 0x82}, {&(0x7f0000000080)="e6e98ff1ed963ce5ba61135ddacc51b6845e02822b8af7", 0x17}], 0x4, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1368}, 0x20000040) r4 = syz_open_dev$vcsa(&(0x7f0000000740), 0x1ff, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r4, 0x58, &(0x7f0000000780)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r7}, 0x10) r8 = socket(0x10, 0x80003, 0x1) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000040)=0x1, 0x4) 1.372870872s ago: executing program 0 (id=1916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x80, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0x5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x5, 0xa411, 0x8, 0x2, 0x3554, 0x80001, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x20007ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x0, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x8, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x20f1, 0xcd16, 0x4, 0x1, 0x7b5000, 0x3, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x7ffffffc, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x4, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x103, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0xa91, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0xa04, 0xfffffff9, 0x1, 0x3, 0x584, 0x1e0, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x8, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x1, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x5, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x79d, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x83, 0x5, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x0, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/34, 0x22}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 1.346433864s ago: executing program 1 (id=1917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x118) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) perf_event_open(&(0x7f00000006c0)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.209072545s ago: executing program 1 (id=1919): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.189085206s ago: executing program 0 (id=1920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.14639962s ago: executing program 0 (id=1923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000060000000580012800800", @ANYRES32=r1], 0x78}}, 0x20000800) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x7f0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x7dc, 0x0, @gue={{0x1, 0x0, 0x3, 0xe4, 0x0, @void}, "238e0c5f2dc26dd30ea88dfaac3df5fccdca524421ba58859cc962952d81ec59917086c22f91c0061dca507ba1eba2eaf327a76823fd739c93079345a53e4fcd0bba31e3ee971bfaba5af3b76fcb2a1794cd7b671057fbd9b5f14c16233e5d101136308390a795b152104f85fc6ed9d1a5f507f31ac86bc2c1995fb03944f9431b19921b95ea2260ca91a4d02293af6157eae53afb975c5e869287b14f2abcf639ca7715594476beefe9884bc8a97121ad042c4ee25cda533104deae2ef4f15f26fc53f7b8f3bbf7a0b3854353866ece11af0b4099ec68d1df8c33d0db7d42d7b01177ea617ab38745c979e19d1ce2de4b05325aaf74ffad910257509b37d5f74da1bd1971307ca05668df17c62bc62cd057082582d463c83232260c082345328a0d363d2a67517d8b6450a534c3de7bfd0ae4140be99e4e41bcf1069097b9f28f25d2d76984f14021637b8c381fd3dd778d8da5d6f738c8292fa27704237521f3fe90f4298110b57c1f5a988b6ef9ed8f3e3bab480ea6487814ca9716e8846f4edcdd5d5ab09963c3971f0c34d89f5bad07f3f2eb0b7c04fabd1f81c1de1edae9a413e3db95263893e4cd97838a28998bfe0ec9f5d76a699499c95c4df549b4363179dae2cb13d3b12afb97c362e4608cb0548d6b7f000a2a4bf47cee391c433336bac450d68295f9f650ac684493c9271d47d1c5543e554a56c9238fc04810249daca969d15ead416c35f3ebb995763a886821400907b36f62626cffbf3d4d2a7c85b585148f122eead2fd2319954733118600214d828fa0a6b253d34d16279422af9862243dd76d406c6e13d1982fbfcb88435b2c7b83d9b748dedfed1df76c84edbb6743ca4670b6294eb5f92043ec4642b1af8206ad7fdeb4881a78c78a5e15006b3c0914c312c9906b83b9d27897f544005ace4c2d6a57ddc54b83a5ab15deebe28a0705375fed748f4cebf5b2a7640b233bd76fdc2ae0fbf0d6e09a3acfbc819e708b88bd7ae31ec5cb27c6efa93d2594a34e8dd56d11da34dcbca5007a1ecbea778ddfcb9cce1c160f9e9a732e1870b55bad34082780a7a0d7243bcd939e33a1153c132e3fd3a292cc01e1f51551ec8e0643258fb1201b63e8dd19bc738e7f2014fc00a766f5a6b6f36d8e4efc35bc1ea2eee66e9f61bbad7b66f04658abfbe77ad4d4c85819884f70b52b622dc77d5e0c62d1cedac59107a5e9c8e6d07de4fa73d7ccd2ecb9ce0e09a61aee4f74a96f90cb0bfd7896c23172fa2bab5123836c1800ff9111cf83e84bf9f4c595422a0b54db58567f03d020023dab629e69ccae854c0e6e90e6e416e51f611d38a383c1d9c2cf2e67026578b2c20de9b0375834a44c8debfb8579865fd0ce2a780b67c9ad16d300d1447b34ad509614cb879b80453db1516c8d1d0f0c7b1752086d11b7f5f492d988bb4fddf42d78841741fc4c4a81e5c8ecf4182b2b00bdc6cba26729787fa5a7c7082fef8716b618278e2ccf5a1a17d7b9acb7dec5cd3ea56cc71ceaa015062af35b7195ef0fb1c284b6f90df52483e064f00e23f20e2f1864a07cc13cb82a1f1f223d170fb9c65000da71e6306b0f123b0fb97dc03a60036e399e25037a8a3b344f25cdcd47f3446ad42a2f841fdd3ae74a93e54b08425fbcd723a5ba9b8fa038c4235636622189e744da8d3091b3c696eb71e4f29b6c6b2d27ac27da00d0e825d8c4c3030216cda1265eeb04a4083fe490511b72d306fa2ff3e907b6abf90dc9af0d94fe275b2c407976a4d3c2d9e6ca61b0feee80c82e091088f64e926a1ca94a536992b2262c30f3509bbefb2cf1c7fd4a9cc9eae01fe823653724ba5d10a9e7e5ee0cc63a8d834c41d7b4003c1f8be5cefa174e055f564d23cf1de8ef85e894e1939b6aceb8c438b194787fe0a3f90f7180338a83dfdbf56c55ba2a2daa610c90e5482ddbc3b6974292fd4fe769f2c1b40919f1afdba2ec69772955fac1335672a25adaf6d392ee5ab3220422f131db05193b5b95f07926f3cd1d6a8e7d9ca2f70e4c3c4e9b0ab8bf9d798e63e8bac013930b62c44e5065a2e7ef01608d8b28f316cdbb813de912211fffa6d3bda1f3e7ce6a1ef065424b95eeb610a180d6a7c2c3169e7f571db3600108b63c0bdc4c98588df3edf06e6a85cb7f2b1959e99a82b23b99e26797d6be0d435d00fb038d603888f4d05fd0b4b52a5e8d2a93f32d75fd5fd6d4905741570a83b2a55995226e44bedaf0b399ea16efee88010e64061a7c4aad62d1e7f1cd680ccf395c1205a3ee0fb2bcd626d5efa7890a59685e49ed66aeab0e9b21d742b7d7a0f2199e7937bce606f4a7651ec0ba11a3f6ae7122b13c20cf09d66acebbc391412cb46eea35376f987f639aaed8fac8292f154ca270f529ec1d19a77334e8f1a04af26daac6e91d7b54b23b8779fb56a4ae830bf7d8234dd1b2c429c24bd252fe149b9d44a5b4512dbeef768838259989e2080cc7c1b4155e625b3a6d7a190e944a89cb6a8d0dcb58fd3c2f40591a9d975674cfffa2cebaae7cd53549f7b55d33f1b0455b7e744ea805108e43fd980e134526d3c751643b9fc271852e9fb9ce66cd0e244448e8d165d1038440490db57dbf6e09a2b66d6c1906302c108feab1c86ecc70140508fc13dc6ce170e81cfb76ece2a6666f36a035dfedc97671ada2b6fc2165a9e5b7508ecbf7be860f677135b19c0183674382209477f3a7f675bb4ec282943f1dc88a252f5f248d9ed9ab80c614494f7dd0a23e51439b4c42517aa9cc2825be23a380acccf80f13c9ef131f4aabfffe900e17f93f0a4a7e19774b3d0da144c001f115fcad54"}}}}, 0x7fe) 1.14594777s ago: executing program 1 (id=1924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x10001}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2a0}], 0x1f, 0x0) 1.058654377s ago: executing program 1 (id=1925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18ea1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 1.058012457s ago: executing program 3 (id=1926): syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2e) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x1003}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000200000000000000000000000850000007500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback={0xffffffffffffff8d}, 0xffffffff}, 0x1c) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 1.01381498s ago: executing program 0 (id=1927): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 951.164085ms ago: executing program 1 (id=1928): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000340)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000900)={'\x00', 0x6, 0x3, 0x100000, 0x8001, 0x0, 0x0}) perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x3, 0x9, 0x7, 0x80, 0x0, 0x8, 0x1100, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x39c, 0x4, @perf_bp={&(0x7f0000000680), 0x1}, 0x100, 0x1, 0x10001, 0x0, 0x2, 0x4, 0xfff, 0x0, 0xa0400, 0x0, 0x8}, r4, 0x6, r2, 0x2) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x77359400}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f00000003c0)=0xc) r6 = getpgid(0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwritev(r8, &(0x7f00000006c0)=[{&(0x7f0000000740)='6\x00', 0x2}], 0x1, 0xffffffff, 0x4) process_mrelease(r8, 0x0) syz_clone3(&(0x7f00000005c0)={0x20000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280), {0x2a}, &(0x7f00000002c0)=""/81, 0x51, &(0x7f00000004c0)=""/191, &(0x7f0000000400)=[r5, r6, 0x0], 0x3, {r7}}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14fff507fa1f9f68f9a4af1dabb609007956b602545aa250198a9e7ebc429c55a37e7de864b8ab6ec54abc8d019a58547a0df76ca75ebf1f53865a64eabb8a2ccc30ebe1096d197d63a1b51f97c46aeaadc084adbf55d750b267d049519d777933c4e71cad113eafc705efdca0030a486cfec151b6ea4faa234a0040000009b1466393ef45c253640e7514105c7694127d53b1a69543f58ff39be715a5d4d7a2ac65b464f80b1dbb4d74000000000000000000", @ANYRES16=r10, @ANYBLOB="21032cbd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r9) 938.886026ms ago: executing program 2 (id=1929): gettid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1800000042000106"], 0x18}], 0x1, 0x0, 0x0, 0x40001}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, 0x0, &(0x7f0000000840)=r3}, 0x20) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") bpf$MAP_CREATE(0x0, 0x0, 0x50) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 874.382501ms ago: executing program 3 (id=1930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x118) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) perf_event_open(&(0x7f00000006c0)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 736.792632ms ago: executing program 2 (id=1931): timer_create(0x0, 0x0, &(0x7f0000000300)) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0x5, 0x5, 0x2) 670.827637ms ago: executing program 3 (id=1932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 536.001888ms ago: executing program 4 (id=1933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 535.361038ms ago: executing program 2 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 534.668518ms ago: executing program 4 (id=1935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x10001}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x2a0}], 0x1f, 0x0) 498.683051ms ago: executing program 3 (id=1936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) recvmsg$qrtr(r0, 0x0, 0x0, 0x40000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') pread64(r3, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000440)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) clock_gettime(0x1, &(0x7f0000000000)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r8, 0x0, 0xffff}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x1, &(0x7f0000001840)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x28) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r12, r13}, 0xc) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRESDEC=r6], 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 485.549122ms ago: executing program 4 (id=1937): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r0, 0x0, 0x0) 446.452425ms ago: executing program 2 (id=1938): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000060008100", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 243.892391ms ago: executing program 3 (id=1939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18ea1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 243.456931ms ago: executing program 4 (id=1940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000007020000f8ffffffb7030000080000040000000000008500000003000000ad00"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = dup(r0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200040000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf09000000000000550901000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x4}, 0x18) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x118) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0x20) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r9, 0x0) perf_event_open(&(0x7f00000006c0)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 174.181587ms ago: executing program 3 (id=1941): gettid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1800000042000106"], 0x18}], 0x1, 0x0, 0x0, 0x40001}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, 0x0, &(0x7f0000000840)=r3}, 0x20) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 157.124058ms ago: executing program 2 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x29, 0xd0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xfffffeff7ffffffb, 0x160862) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) (async, rerun: 64) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) (rerun: 64) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) (async) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="4e11f4292922c904e664e411cdbabcd6ba6be9561ad1a7489e010e355671e020691f2bd2b71a8936ae2b27129db4219a2654cee490d63784e561be0c7b11f819451db0c5a5c0e6d921eab8fb774367daabd875977d1555d7023f0524283a265eeb12a909da8a161f946397e9f6c7e0efe3900b38cf03166296a0895fae22408895352eb0af0c276f40765bf30a853732495b3e3725c0cbb435ff849cde394f6b78fa765a4309cc550b20ed41697722cd1dca59baff7a76a10b", 0xb9) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2010000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="200100000000000000400000000000000000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000400020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000060"], 0x150}}, 0x804) (async, rerun: 64) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r9, 0x5607, 0x2c) unshare(0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socket$nl_audit(0x10, 0x3, 0x9) socket$rds(0x15, 0x5, 0x0) 15.674419ms ago: executing program 1 (id=1943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032d3a60cb515c716279137666c9d15a76cd74d474ec58bf7134fabb53fcb84e364315b6acb8f4e671c93b0cffaef824e8f16af52bd68c55b7cefb81864d55de1a06aff88c83394eae16a267f8c98f4bbad3150079625afbf440e5ac195eab6672e330bec872676b941b0b3c0751d75cffd4a06e019f2df273a037b1d907869e20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x4, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x4, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x4, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x10000, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0xa, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0xffffffff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x8, 0x6, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x10000000, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0xff, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1100, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r7, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.69027ms ago: executing program 4 (id=1944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000005c0)=0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000004c0)={@private2}, &(0x7f0000000500)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032d3a60cb515c716279137666c9d15a76cd74d474ec58bf7134fabb53fcb84e364315b6acb8f4e671c93b0cffaef824e8f16af52bd68c55b7cefb81864d55de1a06aff88c83394eae16a267f8c98f4bbad3150079625afbf440e5ac195eab6672e330bec872676b941b0b3c0751d75cffd4a06e019f2df273a037b1d907869e20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {}, [{}]}, 0x2c, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000180)='\x03') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000980)={&(0x7f0000000580)={0xa, 0x4e24, 0x6, @empty, 0x400}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000600)="7ceacda87b0508f7363da3085db27be0b437e133f1ee8faeac759160f441b99b29d738bab084cfcb0738e3131f1da3d9cf959e63407e832b3b17dc3dbf9003b8a03db90e87390b6ccf0b44901f75dd6cf9b65b608b45c661795e0b2eb855260eead019a1740f79c91415a8c91d87fc17be766c4d35d87e66", 0x78}, {&(0x7f0000000c00)="2de81bfa1109cf0e7768bbde5b835f6f855bd69471dfa0e294b80cbf335c50e98f2c2434bdfeaf49a1a3441bcbbd81e187df36777654c91ca735f244de06d98718cde4f7d03c5064a14493bdc78fc8105ce9bfcbef9b67703729e90c3fb092d157", 0x61}, {&(0x7f0000000700)="d216c740e303dd94192ea5cc1417f58a565fbc7993ee1003f7a0e5848996528b4b04fac549b035f24a61d28ed76c836052ea01450cc99ff761398519e97e11d02067c283f45a5794a55e2ad8ff9fb50bc4d285a39558a11646dd3a0d77fb2a0cb96b5478945bf140bd571cde1aff039543f0b440b3342fc326c62986457816ef5147cb73aa25523a55d481f72bda1a366d5b12c51e8fd859eb11f5fd94136348ed0e7142b7ba700b222d75b2cd04c1b9e154ead1eaf5d970a45228c58fa4904e9760ae029fc8b100f4903e904c9183d37bc5c70d3301f7a529eaa1", 0xfffffffffffffff2}, {&(0x7f0000000880)="abba946de51e9d6122053215688cd37de0ba4be83014e12bd7e8d121d0aa80e5741c35643392a6d83d37d9d99d5313f0911fb8c78d8b466b9bce3380e1efbaaca61c66a0be69aeea035f7ba8b8d5143d0d066e507bbd3749de6bd84635874cc630eccd68f1a5d37bedd199e86779d9219e007cbe09a820cbc23be78d19ee2e5ab8844c886320cdfb2f15a7ba132a0bec22de3586728610c80e8dbf09f4adc0bebb7b112ebd5dbbb83c27fa636a31e4f7f4f6a38828ff6499b500e6cb65e1ec6d94b65f4494cc75a25ea36023f4091cb1b73c1883add582363e9c473a0ab3715d077a5a1f0df959", 0xe7}, {&(0x7f0000000a00)="40b096b9e50582fc484dbc0e8ee58e127a529c6d48a1b792bd4cde6981437bc1ba3f936a16d5e3c2780bda335376e088100c779574ef78f2c31bf6a87d9d0a326b3191560557", 0x46}, {&(0x7f0000000a80)="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", 0xfb}], 0x6, &(0x7f0000000800)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x1, 0x2, '\x00', [@hao={0xc9, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}], 0x30}, 0x24004041) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000040900010073797a3100000000200004801c009730a9c42d1e1c717368000000000c00028008000140000000130900020073797a3200000000140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x4, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x4, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x4, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x10000, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0xa, 0x8, 0x53, 0x6, 0x4, 0x400, 0x28000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0xffffffff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x8, 0x6, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x10000000, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x8, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0xff, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x3, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1100, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 2 (id=1945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000500000018110000c3b4500aecfe24d00ce26ad7cc9b979458f96976ed8e4bb9a1f27389ae18210c062002e4f429ca46fe95458d7c6539f3c6b7f4b42828c0103a35e55efb4a9f949aca5beb6179cbb71284764f0e8d49c6788d803c", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10240, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) sigaltstack(&(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) kexec_load(0x4, 0x2, &(0x7f0000000200)=[{&(0x7f0000000400)="52068084beec25203d61465de12a84a449072702bebfb1c90d4ade2eace5e3057ef6398db5559e2cff9991edaa7e07e45dd9439009abe9372831f2a76099b46b3efe626ffc720ad8b378e0cf9b09a031ed4669b2d1fddaa89157947ea8274226c5e3f302e6e774dc16d12878fadd306a79b810c1344b2320cad2da79d341bbd7a3bbc2521d422a2e9c0ef3617592c184b40b73b85c46c9afef3446a19da10f541b3a70bd3f1adba29c77c676cbad7b98b802fc5d4744a058257311740fd5", 0xbe, 0xaf1a}, {&(0x7f0000000800)="3d570ecb8765b795d52efbe089258fe0a35defdd79c88c6e303b91ef617dc5ad1a3c8467de90a7997e84885b368b2d412c175ba54ba63ab3c04fbfabc84493a24fc70737d7e78231d7fffeab004b35262c02d6587d00a7129f67dc995c913ccd16e5e942a25eae3c55c671da762d8eb08e3711e140d75816a4b69ddab69d8fc6dc4d5a1e6e830b8ddceb5021fb4b503afc70a0bba3eb8168c9c075107d76713fda931b63e7e55fec39", 0xa9, 0x7fff, 0xfffffffffffffffd}], 0x2) tgkill(0x0, 0x0, 0x27) r9 = socket$inet6(0xa, 0x2, 0x0) close(r9) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, @in6={0xa, 0x4e20, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}]}, &(0x7f00000000c0)=0x10) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) kernel console output (not intermixed with test programs): [ 64.598481][ T6039] loop3: detected capacity change from 0 to 512 [ 64.619478][ T6039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.631972][ T6039] EXT4-fs (loop3): 1 truncate cleaned up [ 64.646966][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.708969][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.723028][ T6048] tipc: Enabled bearer , priority 0 [ 64.750667][ T6048] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 64.771876][ T6048] tipc: Resetting bearer [ 64.782402][ T6047] tipc: Disabling bearer [ 64.785095][ T6052] netlink: 124 bytes leftover after parsing attributes in process `syz.2.957'. [ 64.797404][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.957'. [ 64.827676][ T6054] loop3: detected capacity change from 0 to 512 [ 64.835599][ T6054] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.854599][ T6054] EXT4-fs (loop3): 1 truncate cleaned up [ 64.876391][ T6054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.930321][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.065336][ T6076] loop0: detected capacity change from 0 to 512 [ 65.073514][ T6076] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.089657][ T6076] EXT4-fs (loop0): 1 truncate cleaned up [ 65.096014][ T6076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.101558][ T6081] syzkaller0: entered promiscuous mode [ 65.113832][ T6081] syzkaller0: entered allmulticast mode [ 65.131139][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.308373][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 65.308389][ T29] audit: type=1326 audit(1765566389.482:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 65.460866][ T6093] blktrace: Concurrent blktraces are not allowed on loop8 [ 65.476909][ T6094] loop1: detected capacity change from 0 to 512 [ 65.545002][ T6094] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.673831][ T29] audit: type=1326 audit(1765566389.512:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 65.697365][ T29] audit: type=1326 audit(1765566389.522:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 65.720729][ T29] audit: type=1326 audit(1765566389.532:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 65.744096][ T29] audit: type=1326 audit(1765566389.542:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 65.768154][ T29] audit: type=1326 audit(1765566389.552:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 65.791495][ T29] audit: type=1326 audit(1765566389.562:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 65.814978][ T29] audit: type=1326 audit(1765566389.572:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 65.838427][ T29] audit: type=1326 audit(1765566389.582:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 65.862456][ T29] audit: type=1326 audit(1765566389.592:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6045 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 66.099647][ T6104] syzkaller0: entered promiscuous mode [ 66.105263][ T6104] syzkaller0: entered allmulticast mode [ 66.111967][ T6094] EXT4-fs (loop1): 1 truncate cleaned up [ 66.137590][ T6094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.160081][ T6108] netlink: 'syz.4.978': attribute type 13 has an invalid length. [ 66.291386][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.537323][ T6115] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 66.566455][ T6119] syzkaller0: entered promiscuous mode [ 66.571962][ T6119] syzkaller0: entered allmulticast mode [ 66.664114][ T6125] syzkaller0: entered promiscuous mode [ 66.669638][ T6125] syzkaller0: entered allmulticast mode [ 66.790544][ T6127] syzkaller0: entered promiscuous mode [ 66.796211][ T6127] syzkaller0: entered allmulticast mode [ 66.914473][ T6141] netlink: 124 bytes leftover after parsing attributes in process `syz.3.987'. [ 66.923507][ T6141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.987'. [ 66.961221][ T6145] syzkaller0: entered promiscuous mode [ 66.966756][ T6145] syzkaller0: entered allmulticast mode [ 67.194548][ T6159] syzkaller0: entered promiscuous mode [ 67.200146][ T6159] syzkaller0: entered allmulticast mode [ 67.714969][ T6180] loop3: detected capacity change from 0 to 512 [ 67.723287][ T6180] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.735515][ T6180] EXT4-fs (loop3): 1 truncate cleaned up [ 67.742669][ T6180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.777189][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.890917][ T6194] syzkaller0: entered promiscuous mode [ 67.896700][ T6194] syzkaller0: entered allmulticast mode [ 67.915927][ T6194] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 67.945795][ T6200] syzkaller0: entered promiscuous mode [ 67.951320][ T6200] syzkaller0: entered allmulticast mode [ 68.039554][ T6208] loop2: detected capacity change from 0 to 512 [ 68.046526][ T6208] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.057556][ T6208] EXT4-fs (loop2): 1 truncate cleaned up [ 68.064292][ T6208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.125403][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.170522][ T6220] syzkaller0: entered promiscuous mode [ 68.176257][ T6220] syzkaller0: entered allmulticast mode [ 68.196560][ T6222] netlink: 'syz.2.1019': attribute type 39 has an invalid length. [ 68.282418][ T6223] 9p: Could not find request transport: r [ 68.294456][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 68.406706][ T6234] syzkaller0: entered promiscuous mode [ 68.412219][ T6234] syzkaller0: entered allmulticast mode [ 68.441476][ T6236] syzkaller0: entered promiscuous mode [ 68.447041][ T6236] syzkaller0: entered allmulticast mode [ 68.496718][ T6238] syzkaller0: entered promiscuous mode [ 68.502225][ T6238] syzkaller0: entered allmulticast mode [ 68.614772][ T6244] syzkaller0: entered promiscuous mode [ 68.620295][ T6244] syzkaller0: entered allmulticast mode [ 68.629505][ T6244] tipc: Enabling of bearer rejected, failed to enable media [ 68.713035][ T6247] syzkaller0: entered promiscuous mode [ 68.718865][ T6247] syzkaller0: entered allmulticast mode [ 68.825564][ T6254] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1033'. [ 68.864257][ T6258] syzkaller0: entered promiscuous mode [ 68.869772][ T6258] syzkaller0: entered allmulticast mode [ 68.878255][ T6258] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 68.991924][ T6263] syzkaller0: entered promiscuous mode [ 68.997471][ T6263] syzkaller0: entered allmulticast mode [ 69.163891][ T6228] syz.0.1021 (6228) used greatest stack depth: 10464 bytes left [ 69.223688][ T6279] syzkaller0: entered promiscuous mode [ 69.229197][ T6279] syzkaller0: entered allmulticast mode [ 69.396238][ T6290] netlink: 'syz.4.1049': attribute type 13 has an invalid length. [ 69.441427][ T6292] 9p: Could not find request transport: r [ 69.486639][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 69.562486][ T6295] syzkaller0: entered promiscuous mode [ 69.568087][ T6295] syzkaller0: entered allmulticast mode [ 69.699872][ T6299] loop1: detected capacity change from 0 to 512 [ 69.707852][ T6299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.739993][ T6299] EXT4-fs (loop1): 1 truncate cleaned up [ 69.752495][ T6299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.785704][ T6306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1055'. [ 69.813150][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.890695][ T6318] syzkaller0: entered promiscuous mode [ 69.896322][ T6318] syzkaller0: entered allmulticast mode [ 69.935447][ T6321] syzkaller0: entered promiscuous mode [ 69.940977][ T6321] syzkaller0: entered allmulticast mode [ 69.970185][ T6327] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1059'. [ 69.979349][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1059'. [ 70.013927][ T6333] netlink: 'syz.4.1066': attribute type 39 has an invalid length. [ 70.081956][ T6338] loop2: detected capacity change from 0 to 512 [ 70.089640][ T6338] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.100832][ T6338] EXT4-fs (loop2): 1 truncate cleaned up [ 70.107298][ T6338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.146275][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.258941][ T6347] syzkaller0: entered promiscuous mode [ 70.264527][ T6347] syzkaller0: entered allmulticast mode [ 70.272153][ T6348] syzkaller0: entered promiscuous mode [ 70.277797][ T6348] syzkaller0: entered allmulticast mode [ 70.287745][ T6348] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 70.315795][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 70.315883][ T29] audit: type=1326 audit(1765566394.492:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.345773][ T29] audit: type=1326 audit(1765566394.522:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.369706][ T29] audit: type=1326 audit(1765566394.542:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.393539][ T29] audit: type=1326 audit(1765566394.552:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.417203][ T29] audit: type=1326 audit(1765566394.552:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.440665][ T29] audit: type=1326 audit(1765566394.572:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.464359][ T29] audit: type=1326 audit(1765566394.572:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.488055][ T29] audit: type=1326 audit(1765566394.592:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.511491][ T29] audit: type=1326 audit(1765566394.592:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.535437][ T29] audit: type=1326 audit(1765566394.592:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 70.831717][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1074'. [ 70.882177][ T6360] syzkaller0: entered promiscuous mode [ 70.887817][ T6360] syzkaller0: entered allmulticast mode [ 70.941495][ T6362] bridge1: entered promiscuous mode [ 70.946997][ T6362] bridge1: entered allmulticast mode [ 70.965528][ T6362] team0: Port device bridge1 added [ 71.004597][ T6374] syzkaller0: entered promiscuous mode [ 71.010112][ T6374] syzkaller0: entered allmulticast mode [ 71.110529][ T6373] bridge0: port 3(team0) entered blocking state [ 71.117001][ T6373] bridge0: port 3(team0) entered disabled state [ 71.127124][ T6373] team0: entered allmulticast mode [ 71.132367][ T6373] team_slave_0: entered allmulticast mode [ 71.138155][ T6373] team_slave_1: entered allmulticast mode [ 71.151374][ T6373] team0: entered promiscuous mode [ 71.156587][ T6373] team_slave_0: entered promiscuous mode [ 71.162450][ T6373] team_slave_1: entered promiscuous mode [ 71.169185][ T6373] bridge0: port 3(team0) entered blocking state [ 71.175590][ T6373] bridge0: port 3(team0) entered forwarding state [ 71.198805][ T6385] syzkaller0: entered promiscuous mode [ 71.204327][ T6385] syzkaller0: entered allmulticast mode [ 71.221362][ T6387] syzkaller0: entered promiscuous mode [ 71.226938][ T6387] syzkaller0: entered allmulticast mode [ 71.235375][ T6387] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 71.280034][ T6391] tipc: Enabled bearer , priority 0 [ 71.287464][ T6391] syzkaller0: entered promiscuous mode [ 71.293038][ T6391] syzkaller0: entered allmulticast mode [ 71.311131][ T6391] tipc: Resetting bearer [ 71.336648][ T6390] tipc: Resetting bearer [ 71.350459][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 71.361289][ T6390] tipc: Disabling bearer [ 71.380362][ T6397] syzkaller0: entered promiscuous mode [ 71.385910][ T6397] syzkaller0: entered allmulticast mode [ 71.560944][ T6416] syzkaller0: entered promiscuous mode [ 71.566541][ T6416] syzkaller0: entered allmulticast mode [ 71.690966][ T6421] syzkaller0: entered promiscuous mode [ 71.696583][ T6421] syzkaller0: entered allmulticast mode [ 71.780718][ T6425] syzkaller0: entered promiscuous mode [ 71.786380][ T6425] syzkaller0: entered allmulticast mode [ 71.809165][ T6429] tipc: Enabled bearer , priority 0 [ 71.816224][ T6429] syzkaller0: entered promiscuous mode [ 71.821774][ T6429] syzkaller0: entered allmulticast mode [ 71.831303][ T6429] tipc: Resetting bearer [ 71.838231][ T6428] tipc: Resetting bearer [ 71.845843][ T6428] tipc: Disabling bearer [ 71.917839][ T6433] syzkaller0: entered promiscuous mode [ 71.923524][ T6433] syzkaller0: entered allmulticast mode [ 71.930588][ T6434] syzkaller0: entered promiscuous mode [ 71.936126][ T6434] syzkaller0: entered allmulticast mode [ 72.100150][ T6441] syzkaller0: entered promiscuous mode [ 72.105799][ T6441] syzkaller0: entered allmulticast mode [ 72.197744][ T6445] syzkaller0: entered promiscuous mode [ 72.203304][ T6445] syzkaller0: entered allmulticast mode [ 72.356688][ T6465] syzkaller0: entered promiscuous mode [ 72.362223][ T6465] syzkaller0: entered allmulticast mode [ 72.388424][ T6467] syzkaller0: entered promiscuous mode [ 72.394070][ T6467] syzkaller0: entered allmulticast mode [ 72.495615][ T6477] loop0: detected capacity change from 0 to 512 [ 72.510733][ T6477] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.526622][ T6477] EXT4-fs (loop0): 1 truncate cleaned up [ 72.540579][ T6477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.576316][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.678885][ T6492] syzkaller0: entered promiscuous mode [ 72.684485][ T6492] syzkaller0: entered allmulticast mode [ 72.874025][ T6494] syzkaller0: entered promiscuous mode [ 72.879568][ T6494] syzkaller0: entered allmulticast mode [ 73.153454][ T6514] syzkaller0: entered promiscuous mode [ 73.159060][ T6514] syzkaller0: entered allmulticast mode [ 73.363089][ T6525] tipc: Enabled bearer , priority 0 [ 73.406433][ T6525] syzkaller0: entered promiscuous mode [ 73.411979][ T6525] syzkaller0: entered allmulticast mode [ 73.501274][ T6524] tipc: Resetting bearer [ 73.551365][ T6524] tipc: Disabling bearer [ 73.690388][ T6537] netlink: 'syz.4.1140': attribute type 39 has an invalid length. [ 73.922585][ T6551] syzkaller0: entered promiscuous mode [ 73.928148][ T6551] syzkaller0: entered allmulticast mode [ 74.107741][ T6564] tipc: Enabled bearer , priority 0 [ 74.119475][ T6565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 74.139180][ T6564] syzkaller0: entered promiscuous mode [ 74.147383][ T6564] syzkaller0: entered allmulticast mode [ 74.179185][ T6565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 74.195239][ T6568] syzkaller0: entered promiscuous mode [ 74.200778][ T6568] syzkaller0: entered allmulticast mode [ 74.216893][ T6563] tipc: Resetting bearer [ 74.235530][ T6563] tipc: Disabling bearer [ 74.332915][ T6575] loop3: detected capacity change from 0 to 512 [ 74.349594][ T6577] syzkaller0: entered promiscuous mode [ 74.355277][ T6577] syzkaller0: entered allmulticast mode [ 74.364001][ T6575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.398300][ T6575] EXT4-fs (loop3): 1 truncate cleaned up [ 74.418998][ T6575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.514303][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.536206][ T6586] syzkaller0: entered promiscuous mode [ 74.541727][ T6586] syzkaller0: entered allmulticast mode [ 74.564250][ T6586] tipc: Enabling of bearer rejected, failed to enable media [ 74.597919][ T6587] 9p: Could not find request transport: r [ 74.608786][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 74.697123][ T6592] loop2: detected capacity change from 0 to 512 [ 74.706767][ T6592] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.726982][ T6592] EXT4-fs (loop2): 1 truncate cleaned up [ 74.735015][ T6592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.788287][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.788353][ T6599] netlink: 'syz.0.1163': attribute type 39 has an invalid length. [ 74.854828][ T6605] syzkaller0: entered promiscuous mode [ 74.860448][ T6605] syzkaller0: entered allmulticast mode [ 74.952365][ T6618] netlink: 'syz.3.1172': attribute type 39 has an invalid length. [ 74.990842][ T6621] syzkaller0: entered promiscuous mode [ 74.996531][ T6621] syzkaller0: entered allmulticast mode [ 75.026567][ T6624] loop1: detected capacity change from 0 to 512 [ 75.033971][ T6624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.045614][ T6624] EXT4-fs (loop1): 1 truncate cleaned up [ 75.051661][ T6624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.081670][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.143770][ T6630] bridge3: entered promiscuous mode [ 75.149044][ T6630] bridge3: entered allmulticast mode [ 75.161080][ T6630] team0: Port device bridge3 added [ 75.169965][ T6635] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1180'. [ 75.174628][ T6634] syzkaller0: entered promiscuous mode [ 75.184687][ T6634] syzkaller0: entered allmulticast mode [ 75.319686][ T6644] syzkaller0: entered promiscuous mode [ 75.325375][ T6644] syzkaller0: entered allmulticast mode [ 75.341699][ T6648] syzkaller0: entered promiscuous mode [ 75.347453][ T6648] syzkaller0: entered allmulticast mode [ 75.371060][ T6650] syzkaller0: entered promiscuous mode [ 75.376707][ T6650] syzkaller0: entered allmulticast mode [ 75.384729][ T6650] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 75.597481][ T6671] syzkaller0: entered promiscuous mode [ 75.603050][ T6671] syzkaller0: entered allmulticast mode [ 75.614806][ T6671] tipc: Enabled bearer , priority 0 [ 75.629532][ T6669] tipc: Resetting bearer [ 75.648544][ T6669] tipc: Disabling bearer [ 75.668396][ T6679] syzkaller0: entered promiscuous mode [ 75.673943][ T6679] syzkaller0: entered allmulticast mode [ 75.693516][ T6681] syzkaller0: entered promiscuous mode [ 75.699074][ T6681] syzkaller0: entered allmulticast mode [ 75.715051][ T6683] loop0: detected capacity change from 0 to 512 [ 75.723079][ T6683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.736481][ T6683] EXT4-fs (loop0): 1 truncate cleaned up [ 75.744801][ T6683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.794697][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.820547][ T6691] loop2: detected capacity change from 0 to 512 [ 75.831552][ T6691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.843100][ T6691] EXT4-fs (loop2): 1 truncate cleaned up [ 75.849400][ T6691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.881518][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.890807][ T6694] syzkaller0: entered promiscuous mode [ 75.896330][ T6694] syzkaller0: entered allmulticast mode [ 76.033871][ T6712] syzkaller0: entered promiscuous mode [ 76.039370][ T6712] syzkaller0: entered allmulticast mode [ 76.163849][ T6722] syzkaller0: entered promiscuous mode [ 76.169404][ T6722] syzkaller0: entered allmulticast mode [ 76.189955][ T6724] syzkaller0: entered promiscuous mode [ 76.195484][ T6724] syzkaller0: entered allmulticast mode [ 76.254603][ T6726] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 76.301818][ T6728] syzkaller0: entered promiscuous mode [ 76.307415][ T6728] syzkaller0: entered allmulticast mode [ 76.319432][ T6728] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 76.475247][ T6749] syzkaller0: entered promiscuous mode [ 76.480769][ T6749] syzkaller0: entered allmulticast mode [ 76.542903][ T6751] syzkaller0: entered promiscuous mode [ 76.548564][ T6751] syzkaller0: entered allmulticast mode [ 76.613224][ T6753] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 76.678926][ T6755] netlink: 'syz.4.1233': attribute type 39 has an invalid length. [ 76.778375][ T6769] syzkaller0: entered promiscuous mode [ 76.783969][ T6769] syzkaller0: entered allmulticast mode [ 76.964887][ T6779] syzkaller0: entered promiscuous mode [ 76.970443][ T6779] syzkaller0: entered allmulticast mode [ 76.980682][ T6778] syzkaller0: entered promiscuous mode [ 76.986300][ T6778] syzkaller0: entered allmulticast mode [ 77.013247][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881049d4a00: rx timeout, send abort [ 77.021569][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881049d4a00: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 77.109725][ T6799] syzkaller0: entered promiscuous mode [ 77.115319][ T6799] syzkaller0: entered allmulticast mode [ 77.166139][ T6807] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1253'. [ 77.177381][ T6807] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1253'. [ 77.186145][ T6809] syzkaller0: entered promiscuous mode [ 77.191914][ T6809] syzkaller0: entered allmulticast mode [ 77.357378][ T6826] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1257'. [ 77.386469][ T6825] tipc: Enabling of bearer rejected, failed to enable media [ 77.395436][ T6823] syzkaller0: entered promiscuous mode [ 77.400988][ T6823] syzkaller0: entered allmulticast mode [ 77.408922][ T6825] syzkaller0: entered promiscuous mode [ 77.414529][ T6825] syzkaller0: entered allmulticast mode [ 77.452611][ T6825] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 77.463385][ T6830] syzkaller0: entered promiscuous mode [ 77.468948][ T6830] syzkaller0: entered allmulticast mode [ 77.493384][ T6830] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 77.517183][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 77.592774][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 77.601979][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 77.649577][ T6852] loop1: detected capacity change from 0 to 512 [ 77.658642][ T6852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.672806][ T6852] EXT4-fs (loop1): 1 truncate cleaned up [ 77.679155][ T6852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.713917][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 77.713958][ T29] audit: type=1326 audit(1765566401.892:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.744051][ T29] audit: type=1326 audit(1765566401.892:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.745741][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.767763][ T29] audit: type=1326 audit(1765566401.892:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.767795][ T29] audit: type=1326 audit(1765566401.892:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.823654][ T29] audit: type=1326 audit(1765566401.892:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.847082][ T29] audit: type=1326 audit(1765566401.892:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.870534][ T29] audit: type=1326 audit(1765566401.892:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.894074][ T29] audit: type=1326 audit(1765566401.892:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.917810][ T29] audit: type=1326 audit(1765566401.892:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.941340][ T29] audit: type=1326 audit(1765566401.892:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0212e6f749 code=0x7ffc0000 [ 77.999646][ T6858] syzkaller0: entered promiscuous mode [ 78.002225][ T6860] loop4: detected capacity change from 0 to 512 [ 78.005249][ T6858] syzkaller0: entered allmulticast mode [ 78.022183][ T6860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.041407][ T6860] EXT4-fs (loop4): 1 truncate cleaned up [ 78.047800][ T6860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.195267][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.237969][ T6866] syzkaller0: entered promiscuous mode [ 78.243501][ T6866] syzkaller0: entered allmulticast mode [ 78.287342][ T6868] syzkaller0: entered promiscuous mode [ 78.292973][ T6868] syzkaller0: entered allmulticast mode [ 78.342828][ T6872] bridge5: entered promiscuous mode [ 78.348129][ T6872] bridge5: entered allmulticast mode [ 78.355281][ T6872] team0: Port device bridge5 added [ 78.502535][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ac2b000: rx timeout, send abort [ 78.511121][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ac2b000: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 78.525039][ T6885] syzkaller0: entered promiscuous mode [ 78.530975][ T6885] syzkaller0: entered allmulticast mode [ 78.545787][ T6878] 9p: Could not find request transport: r [ 78.729870][ T6898] syzkaller0: entered promiscuous mode [ 78.735450][ T6898] syzkaller0: entered allmulticast mode [ 79.451081][ T6924] syzkaller0: entered promiscuous mode [ 79.456661][ T6924] syzkaller0: entered allmulticast mode [ 79.486202][ T6928] loop4: detected capacity change from 0 to 512 [ 79.493596][ T6928] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.505302][ T6928] EXT4-fs (loop4): 1 truncate cleaned up [ 79.511401][ T6928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.544678][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.593127][ T6935] syzkaller0: entered promiscuous mode [ 79.598822][ T6935] syzkaller0: entered allmulticast mode [ 79.728051][ T6948] syzkaller0: entered promiscuous mode [ 79.733751][ T6948] syzkaller0: entered allmulticast mode [ 79.801027][ T6950] __nla_validate_parse: 3 callbacks suppressed [ 79.801047][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 79.873820][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1310'. [ 79.882832][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1310'. [ 79.908659][ T6959] loop1: detected capacity change from 0 to 512 [ 79.917824][ T6959] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.932970][ T6959] EXT4-fs (loop1): 1 truncate cleaned up [ 79.939440][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.941172][ T6955] syzkaller0: entered promiscuous mode [ 79.957283][ T6955] syzkaller0: entered allmulticast mode [ 79.975601][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.167344][ T6985] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1322'. [ 80.186925][ T6985] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1322'. [ 80.265219][ T6990] syzkaller0: entered promiscuous mode [ 80.270752][ T6990] syzkaller0: entered allmulticast mode [ 80.397439][ T7003] loop2: detected capacity change from 0 to 512 [ 80.406671][ T7003] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.432718][ T7003] EXT4-fs (loop2): 1 truncate cleaned up [ 80.441113][ T7003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.483464][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.495601][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a091a00: rx timeout, send abort [ 80.503900][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a091a00: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 80.535178][ T7013] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1334'. [ 80.544422][ T7013] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1334'. [ 80.600466][ T7022] loop3: detected capacity change from 0 to 512 [ 80.607923][ T7022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.619877][ T7022] EXT4-fs (loop3): 1 truncate cleaned up [ 80.628422][ T7022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.662032][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.683140][ T7026] syzkaller0: entered promiscuous mode [ 80.688714][ T7026] syzkaller0: entered allmulticast mode [ 80.696912][ T7026] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 80.717372][ T7029] syzkaller1: entered promiscuous mode [ 80.722875][ T7029] syzkaller1: entered allmulticast mode [ 80.737723][ T7030] syzkaller0: entered promiscuous mode [ 80.743297][ T7030] syzkaller0: entered allmulticast mode [ 80.858144][ T7038] syzkaller0: entered promiscuous mode [ 80.863716][ T7038] syzkaller0: entered allmulticast mode [ 80.982704][ T7044] loop4: detected capacity change from 0 to 512 [ 81.000904][ T7044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.019982][ T7048] syzkaller0: entered promiscuous mode [ 81.025650][ T7048] syzkaller0: entered allmulticast mode [ 81.025668][ T7044] EXT4-fs (loop4): 1 truncate cleaned up [ 81.035805][ T7048] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 81.038193][ T7044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.085588][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.124370][ T7053] syzkaller0: entered promiscuous mode [ 81.129997][ T7053] syzkaller0: entered allmulticast mode [ 81.138841][ T7053] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 81.162901][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 81.172009][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 81.231830][ T7058] loop0: detected capacity change from 0 to 512 [ 81.238959][ T7058] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.252932][ T7058] EXT4-fs (loop0): 1 truncate cleaned up [ 81.258929][ T7058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.290952][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.460923][ T7073] syzkaller0: entered promiscuous mode [ 81.466543][ T7073] syzkaller0: entered allmulticast mode [ 81.482838][ T7077] syzkaller0: entered promiscuous mode [ 81.488478][ T7077] syzkaller0: entered allmulticast mode [ 81.598775][ T7082] syzkaller1: entered promiscuous mode [ 81.604590][ T7082] syzkaller1: entered allmulticast mode [ 81.613422][ T7079] syzkaller0: entered promiscuous mode [ 81.616497][ T7085] netlink: 'syz.2.1367': attribute type 7 has an invalid length. [ 81.618931][ T7079] syzkaller0: entered allmulticast mode [ 81.626692][ T7085] netlink: 'syz.2.1367': attribute type 27 has an invalid length. [ 81.627815][ T7085] netlink: 'syz.2.1367': attribute type 7 has an invalid length. [ 81.647934][ T7085] netlink: 'syz.2.1367': attribute type 27 has an invalid length. [ 81.679590][ T7087] loop2: detected capacity change from 0 to 512 [ 81.686650][ T7087] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.701473][ T7087] EXT4-fs (loop2): 1 truncate cleaned up [ 81.708049][ T7087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.765764][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.826310][ T7100] syzkaller0: entered promiscuous mode [ 81.831836][ T7100] syzkaller0: entered allmulticast mode [ 81.880600][ T7106] syzkaller0: entered promiscuous mode [ 81.886212][ T7106] syzkaller0: entered allmulticast mode [ 81.910357][ T7108] netlink: 'syz.2.1378': attribute type 39 has an invalid length. [ 81.976376][ T7112] syzkaller1: entered promiscuous mode [ 81.982024][ T7112] syzkaller1: entered allmulticast mode [ 82.018942][ T7115] syzkaller0: entered promiscuous mode [ 82.024533][ T7115] syzkaller0: entered allmulticast mode [ 82.047646][ T7119] syzkaller0: entered promiscuous mode [ 82.053360][ T7119] syzkaller0: entered allmulticast mode [ 82.061871][ T7121] syzkaller0: entered promiscuous mode [ 82.067430][ T7121] syzkaller0: entered allmulticast mode [ 82.073008][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104cf7000: rx timeout, send abort [ 82.081258][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888104cf7000: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 82.199116][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 82.378275][ T7153] bridge2: entered promiscuous mode [ 82.383661][ T7153] bridge2: entered allmulticast mode [ 82.395445][ T7153] team0: Port device bridge2 added [ 82.402112][ T7155] loop2: detected capacity change from 0 to 512 [ 82.409555][ T7155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.430659][ T7155] EXT4-fs (loop2): 1 truncate cleaned up [ 82.441619][ T7155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.469954][ T7162] syzkaller0: entered promiscuous mode [ 82.475595][ T7162] syzkaller0: entered allmulticast mode [ 82.492327][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.594779][ T7170] syzkaller0: entered promiscuous mode [ 82.600298][ T7170] syzkaller0: entered allmulticast mode [ 82.651252][ T7172] netlink: 'syz.2.1407': attribute type 39 has an invalid length. [ 82.727559][ T7178] loop2: detected capacity change from 0 to 512 [ 82.741070][ T7178] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.754335][ T7178] EXT4-fs (loop2): 1 truncate cleaned up [ 82.760955][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.799952][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.809269][ T7181] syzkaller0: entered promiscuous mode [ 82.814868][ T7181] syzkaller0: entered allmulticast mode [ 82.852194][ T7185] loop2: detected capacity change from 0 to 512 [ 82.860234][ T7185] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.871683][ T7185] EXT4-fs (loop2): 1 truncate cleaned up [ 82.877886][ T7185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.912448][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.938267][ T7188] syzkaller1: entered promiscuous mode [ 82.944021][ T7188] syzkaller1: entered allmulticast mode [ 82.961624][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 82.961639][ T29] audit: type=1326 audit(1765566407.132:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 82.992188][ T29] audit: type=1326 audit(1765566407.132:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 83.015759][ T29] audit: type=1326 audit(1765566407.132:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 83.039714][ T29] audit: type=1326 audit(1765566407.132:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 83.063204][ T29] audit: type=1326 audit(1765566407.132:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 83.086845][ T29] audit: type=1326 audit(1765566407.132:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.2.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 83.110460][ T29] audit: type=1326 audit(1765566407.132:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 83.133411][ T29] audit: type=1326 audit(1765566407.132:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 83.156285][ T29] audit: type=1326 audit(1765566407.132:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 83.179107][ T29] audit: type=1326 audit(1765566407.132:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 83.240646][ T7198] syzkaller0: entered promiscuous mode [ 83.246412][ T7198] syzkaller0: entered allmulticast mode [ 83.331912][ T7204] syzkaller0: entered promiscuous mode [ 83.337508][ T7204] syzkaller0: entered allmulticast mode [ 83.364369][ T7208] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 83.385110][ T7210] syzkaller0: entered promiscuous mode [ 83.390633][ T7210] syzkaller0: entered allmulticast mode [ 83.421099][ T7212] syzkaller0: entered promiscuous mode [ 83.426804][ T7212] syzkaller0: entered allmulticast mode [ 83.434487][ T7214] tipc: Enabling of bearer rejected, failed to enable media [ 83.532684][ T7229] loop2: detected capacity change from 0 to 512 [ 83.552257][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ada0600: rx timeout, send abort [ 83.560581][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ada0600: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 83.561053][ T7229] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.612156][ T7229] EXT4-fs (loop2): 1 truncate cleaned up [ 83.631839][ T7229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.671918][ T7241] syzkaller0: entered promiscuous mode [ 83.677555][ T7241] syzkaller0: entered allmulticast mode [ 83.690228][ T7243] bridge3: entered promiscuous mode [ 83.695522][ T7243] bridge3: entered allmulticast mode [ 83.715572][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.726445][ T7243] team0: Port device bridge3 added [ 83.753844][ T7252] syzkaller0: entered promiscuous mode [ 83.759369][ T7252] syzkaller0: entered allmulticast mode [ 83.820658][ T7255] tipc: Enabling of bearer rejected, failed to enable media [ 83.903946][ T7267] loop3: detected capacity change from 0 to 512 [ 83.916758][ T7267] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.929513][ T7267] EXT4-fs (loop3): 1 truncate cleaned up [ 83.935823][ T7267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.972260][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.124565][ T7276] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 84.319047][ T7288] tipc: Enabling of bearer rejected, failed to enable media [ 84.393357][ T7296] syzkaller0: entered promiscuous mode [ 84.398978][ T7296] syzkaller0: entered allmulticast mode [ 84.551877][ T7305] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 84.565381][ T7303] 9p: Could not find request transport: r [ 84.597562][ T7308] tipc: Enabling of bearer rejected, failed to enable media [ 84.606514][ T7308] syzkaller0: entered promiscuous mode [ 84.612020][ T7308] syzkaller0: entered allmulticast mode [ 84.620977][ T7308] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 84.690865][ T7310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.705626][ T7310] EXT4-fs (loop4): 1 truncate cleaned up [ 84.722961][ T7310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.737481][ T7314] syzkaller0: entered promiscuous mode [ 84.743025][ T7314] syzkaller0: entered allmulticast mode [ 84.912557][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.079315][ T7333] syzkaller0: entered promiscuous mode [ 85.084865][ T7333] syzkaller0: entered allmulticast mode [ 85.095148][ T7333] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 85.128309][ T7337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.140001][ T7337] EXT4-fs (loop2): 1 truncate cleaned up [ 85.146813][ T7337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.178594][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.204236][ T7341] syzkaller0: entered promiscuous mode [ 85.209776][ T7341] syzkaller0: entered allmulticast mode [ 85.253379][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ac3c800: rx timeout, send abort [ 85.261679][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ac3c800: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 85.291304][ T7352] FAULT_INJECTION: forcing a failure. [ 85.291304][ T7352] name failslab, interval 1, probability 0, space 0, times 1 [ 85.304058][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.4.1479 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.304133][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.304148][ T7352] Call Trace: [ 85.304160][ T7352] [ 85.304170][ T7352] __dump_stack+0x1d/0x30 [ 85.304201][ T7352] dump_stack_lvl+0xe8/0x140 [ 85.304229][ T7352] dump_stack+0x15/0x1b [ 85.304339][ T7352] should_fail_ex+0x265/0x280 [ 85.304368][ T7352] should_failslab+0x8c/0xb0 [ 85.304397][ T7352] __kmalloc_noprof+0xb9/0x5a0 [ 85.304425][ T7352] ? security_bpf_prog_load+0x60/0x140 [ 85.304525][ T7352] ? should_fail_usercopy+0x1a/0x20 [ 85.304556][ T7352] ? strncpy_from_user+0x13a/0x260 [ 85.304611][ T7352] security_bpf_prog_load+0x60/0x140 [ 85.304719][ T7352] bpf_prog_load+0xef8/0x1140 [ 85.304756][ T7352] ? security_bpf+0x2b/0x90 [ 85.304791][ T7352] __sys_bpf+0x469/0x7c0 [ 85.304824][ T7352] __x64_sys_bpf+0x41/0x50 [ 85.304870][ T7352] x64_sys_call+0x28e1/0x3000 [ 85.304894][ T7352] do_syscall_64+0xd8/0x2a0 [ 85.304936][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.305031][ T7352] RIP: 0033:0x7f0212e6f749 [ 85.305055][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.305077][ T7352] RSP: 002b:00007f02118cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.305104][ T7352] RAX: ffffffffffffffda RBX: 00007f02130c5fa0 RCX: 00007f0212e6f749 [ 85.305134][ T7352] RDX: 0000000000000094 RSI: 0000200000000a40 RDI: 0000000000000005 [ 85.305184][ T7352] RBP: 00007f02118cf090 R08: 0000000000000000 R09: 0000000000000000 [ 85.305199][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.305214][ T7352] R13: 00007f02130c6038 R14: 00007f02130c5fa0 R15: 00007fff82d0a8c8 [ 85.305237][ T7352] [ 85.576373][ T7366] set_capacity_and_notify: 2 callbacks suppressed [ 85.576394][ T7366] loop0: detected capacity change from 0 to 512 [ 85.601746][ T7368] syzkaller0: entered promiscuous mode [ 85.607352][ T7368] syzkaller0: entered allmulticast mode [ 85.620648][ T7366] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.652180][ T7372] __nla_validate_parse: 7 callbacks suppressed [ 85.652200][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 85.672929][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 85.718270][ T7366] EXT4-fs (loop0): 1 truncate cleaned up [ 85.733844][ T7366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.803844][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.821590][ T7388] syzkaller0: entered promiscuous mode [ 85.827185][ T7388] syzkaller0: entered allmulticast mode [ 85.882147][ T7404] loop3: detected capacity change from 0 to 512 [ 85.906381][ T7404] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.908238][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 85.930992][ T7404] EXT4-fs (loop3): 1 truncate cleaned up [ 85.937417][ T7404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.967890][ T7411] syzkaller0: entered promiscuous mode [ 85.973459][ T7411] syzkaller0: entered allmulticast mode [ 86.005294][ T7414] loop4: detected capacity change from 0 to 512 [ 86.012104][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.014365][ T7414] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.076691][ T7414] EXT4-fs (loop4): 1 truncate cleaned up [ 86.086793][ T7414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.096343][ T7424] loop3: detected capacity change from 0 to 512 [ 86.116676][ T7424] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.132818][ T7424] EXT4-fs (loop3): 1 truncate cleaned up [ 86.148900][ T7424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.176814][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.201340][ T7432] syzkaller0: entered promiscuous mode [ 86.207054][ T7432] syzkaller0: entered allmulticast mode [ 86.247445][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.381117][ T7453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.399204][ T7456] syzkaller0: entered promiscuous mode [ 86.404888][ T7456] syzkaller0: entered allmulticast mode [ 86.426730][ T7453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.500339][ T7453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.517966][ T7473] loop0: detected capacity change from 0 to 128 [ 86.518184][ T7477] loop1: detected capacity change from 0 to 1024 [ 86.541843][ T7473] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.554718][ T7473] ext4 filesystem being mounted at /269/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.565004][ T7453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.568161][ T7477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.590199][ T7477] FAULT_INJECTION: forcing a failure. [ 86.590199][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 86.590232][ T7477] CPU: 1 UID: 0 PID: 7477 Comm: syz.1.1526 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.590325][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.590337][ T7477] Call Trace: [ 86.590344][ T7477] [ 86.590352][ T7477] __dump_stack+0x1d/0x30 [ 86.590454][ T7477] dump_stack_lvl+0xe8/0x140 [ 86.590482][ T7477] dump_stack+0x15/0x1b [ 86.590506][ T7477] should_fail_ex+0x265/0x280 [ 86.590539][ T7477] should_failslab+0x8c/0xb0 [ 86.590596][ T7477] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 86.590619][ T7477] ? __d_alloc+0x37/0x340 [ 86.590690][ T7477] __d_alloc+0x37/0x340 [ 86.590848][ T7477] d_alloc_parallel+0x54/0xcd0 [ 86.590889][ T7477] ? handle_dots+0x55/0x8a0 [ 86.590923][ T7477] ? lockref_get_not_dead+0x120/0x1c0 [ 86.590962][ T7477] ? __rcu_read_unlock+0x4f/0x70 [ 86.590995][ T7477] __lookup_slow+0x8c/0x250 [ 86.591028][ T7477] lookup_slow+0x3c/0x60 [ 86.591140][ T7477] path_lookupat+0x2f7/0x500 [ 86.591173][ T7477] filename_lookup+0x147/0x340 [ 86.591282][ T7477] user_path_at+0x3e/0x130 [ 86.591320][ T7477] __se_sys_inotify_add_watch+0x102/0x7b0 [ 86.591363][ T7477] __x64_sys_inotify_add_watch+0x43/0x50 [ 86.591438][ T7477] x64_sys_call+0xa6d/0x3000 [ 86.591465][ T7477] do_syscall_64+0xd8/0x2a0 [ 86.591508][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.591572][ T7477] RIP: 0033:0x7fa9c561f749 [ 86.591592][ T7477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.591690][ T7477] RSP: 002b:00007fa9c4087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 86.591713][ T7477] RAX: ffffffffffffffda RBX: 00007fa9c5875fa0 RCX: 00007fa9c561f749 [ 86.591727][ T7477] RDX: 00000000400008bf RSI: 0000200000000200 RDI: 0000000000000006 [ 86.591742][ T7477] RBP: 00007fa9c4087090 R08: 0000000000000000 R09: 0000000000000000 [ 86.591838][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.591872][ T7477] R13: 00007fa9c5876038 R14: 00007fa9c5875fa0 R15: 00007ffc95ba8188 [ 86.591891][ T7477] [ 86.646551][ T2471] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.837835][ T2471] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.837938][ T2471] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.837999][ T2471] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.839682][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.327302][ T7489] syzkaller0: entered promiscuous mode [ 87.327326][ T7489] syzkaller0: entered allmulticast mode [ 87.360256][ T7497] syzkaller0: entered promiscuous mode [ 87.365847][ T7497] syzkaller0: entered allmulticast mode [ 87.373668][ T3322] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.415173][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'. [ 87.525524][ T7515] tipc: Enabled bearer , priority 0 [ 87.532364][ T7514] syzkaller0: entered promiscuous mode [ 87.538042][ T7514] syzkaller0: entered allmulticast mode [ 87.570546][ T7515] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 87.608655][ T7515] tipc: Resetting bearer [ 87.615991][ T7513] tipc: Disabling bearer [ 87.701389][ T7536] netlink: 'syz.4.1544': attribute type 39 has an invalid length. [ 87.740633][ T7540] loop0: detected capacity change from 0 to 512 [ 87.748331][ T7542] syzkaller0: entered promiscuous mode [ 87.753958][ T7542] syzkaller0: entered allmulticast mode [ 87.766272][ T7540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.777451][ T7540] EXT4-fs (loop0): 1 truncate cleaned up [ 87.783644][ T7540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.828462][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.855144][ T7548] loop0: detected capacity change from 0 to 1024 [ 87.861921][ T7548] ======================================================= [ 87.861921][ T7548] WARNING: The mand mount option has been deprecated and [ 87.861921][ T7548] and is ignored by this kernel. Remove the mand [ 87.861921][ T7548] option from the mount to silence this warning. [ 87.861921][ T7548] ======================================================= [ 87.899408][ T7548] EXT4-fs: Ignoring removed oldalloc option [ 87.905538][ T7548] EXT4-fs: Ignoring removed bh option [ 87.921528][ T7548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.940783][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 87.955018][ T7548] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.963359][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 87.963371][ T29] audit: type=1326 audit(1765566412.132:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 87.993603][ T29] audit: type=1326 audit(1765566412.142:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 88.017106][ T29] audit: type=1326 audit(1765566412.142:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 88.040570][ T29] audit: type=1326 audit(1765566412.142:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 88.064324][ T29] audit: type=1400 audit(1765566412.142:2131): avc: denied { setattr } for pid=7547 comm="syz.0.1549" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.086709][ T29] audit: type=1326 audit(1765566412.142:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 88.110234][ T29] audit: type=1326 audit(1765566412.142:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 88.134202][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.186793][ T29] audit: type=1326 audit(1765566412.362:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 88.211622][ T29] audit: type=1326 audit(1765566412.362:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 88.227850][ T7567] syzkaller0: entered promiscuous mode [ 88.235183][ T29] audit: type=1326 audit(1765566412.362:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 88.240652][ T7567] syzkaller0: entered allmulticast mode [ 88.455397][ T7572] syzkaller0: entered promiscuous mode [ 88.460934][ T7572] syzkaller0: entered allmulticast mode [ 88.505204][ T7578] syzkaller0: entered promiscuous mode [ 88.510728][ T7578] syzkaller0: entered allmulticast mode [ 88.514725][ T7579] netlink: 'syz.0.1557': attribute type 39 has an invalid length. [ 88.524383][ T7577] syzkaller0: entered promiscuous mode [ 88.529891][ T7577] syzkaller0: entered allmulticast mode [ 88.588831][ T7577] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 88.686254][ T7592] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.758144][ T7592] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.808332][ T7592] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.846863][ T7613] syzkaller0: entered promiscuous mode [ 88.852401][ T7613] syzkaller0: entered allmulticast mode [ 88.876012][ T7592] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.892363][ T7615] syzkaller0: entered promiscuous mode [ 88.897934][ T7615] syzkaller0: entered allmulticast mode [ 88.947306][ T803] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.963439][ T803] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.971863][ T803] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.980608][ T803] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.025580][ T7617] syzkaller0: entered promiscuous mode [ 89.031183][ T7617] syzkaller0: entered allmulticast mode [ 89.074563][ T7621] syzkaller0: entered promiscuous mode [ 89.080078][ T7621] syzkaller0: entered allmulticast mode [ 89.351197][ T7626] syzkaller0: entered promiscuous mode [ 89.357004][ T7626] syzkaller0: entered allmulticast mode [ 89.524825][ T7628] syzkaller0: entered promiscuous mode [ 89.530460][ T7628] syzkaller0: entered allmulticast mode [ 89.615508][ T7636] 9p: Could not find request transport: r [ 89.903337][ T7652] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1582'. [ 89.906182][ T7651] syzkaller0: entered promiscuous mode [ 89.912588][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1582'. [ 89.917971][ T7651] syzkaller0: entered allmulticast mode [ 90.407476][ T7663] syzkaller0: entered promiscuous mode [ 90.412982][ T7663] syzkaller0: entered allmulticast mode [ 90.563609][ T7665] bridge4: entered promiscuous mode [ 90.568873][ T7665] bridge4: entered allmulticast mode [ 90.576149][ T7665] team0: Port device bridge4 added [ 90.815659][ T7675] syzkaller0: entered promiscuous mode [ 90.821185][ T7675] syzkaller0: entered allmulticast mode [ 91.022320][ T7677] syzkaller0: entered promiscuous mode [ 91.028036][ T7677] syzkaller0: entered allmulticast mode [ 91.036406][ T7677] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 91.328682][ T7695] 9p: Could not find request transport: r [ 91.411538][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 91.501117][ T7700] loop0: detected capacity change from 0 to 512 [ 91.508570][ T7700] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.522326][ T7700] EXT4-fs (loop0): 1 truncate cleaned up [ 91.529050][ T7700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.560254][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.656773][ T7707] netlink: 'syz.2.1603': attribute type 39 has an invalid length. [ 91.755574][ T7715] SELinux: ebitmap: truncated map [ 91.762325][ T7715] SELinux: failed to load policy [ 91.789087][ T7719] loop2: detected capacity change from 0 to 512 [ 91.796069][ T7719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.807405][ T7719] EXT4-fs (loop2): 1 truncate cleaned up [ 91.813824][ T7719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.857759][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.023878][ T7728] bridge1: entered promiscuous mode [ 92.029286][ T7728] bridge1: entered allmulticast mode [ 92.036536][ T7728] team0: Port device bridge1 added [ 92.119665][ T7728] bridge0: port 3(team0) entered blocking state [ 92.126038][ T7728] bridge0: port 3(team0) entered disabled state [ 92.132981][ T7728] team0: entered allmulticast mode [ 92.138224][ T7728] team_slave_0: entered allmulticast mode [ 92.144125][ T7728] team_slave_1: entered allmulticast mode [ 92.154893][ T7728] team0: entered promiscuous mode [ 92.159971][ T7728] team_slave_0: entered promiscuous mode [ 92.165863][ T7728] team_slave_1: entered promiscuous mode [ 92.172023][ T7728] bridge0: port 3(team0) entered blocking state [ 92.178383][ T7728] bridge0: port 3(team0) entered forwarding state [ 92.379890][ T7750] netlink: 'syz.4.1614': attribute type 39 has an invalid length. [ 92.509978][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 92.522531][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 93.193900][ T7782] syzkaller0: entered promiscuous mode [ 93.199429][ T7782] syzkaller0: entered allmulticast mode [ 93.241276][ T7784] loop4: detected capacity change from 0 to 512 [ 93.279252][ T7784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.912394][ T7784] EXT4-fs (loop4): 1 truncate cleaned up [ 93.936039][ T7784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.951339][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 93.951354][ T29] audit: type=1400 audit(1765566418.122:2570): avc: denied { getopt } for pid=7792 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.057342][ T7797] 9p: Bad value for 'rfdno' [ 94.149939][ T7798] syzkaller0: entered promiscuous mode [ 94.155607][ T7798] syzkaller0: entered allmulticast mode [ 94.203679][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.318954][ T29] audit: type=1326 audit(1765566418.492:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 94.342556][ T29] audit: type=1326 audit(1765566418.492:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 94.366096][ T29] audit: type=1326 audit(1765566418.492:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faacccef783 code=0x7ffc0000 [ 94.389475][ T29] audit: type=1326 audit(1765566418.492:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faacccef783 code=0x7ffc0000 [ 94.484386][ T7813] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1638'. [ 94.493502][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1638'. [ 94.963253][ T29] audit: type=1326 audit(1765566418.592:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 94.986879][ T29] audit: type=1326 audit(1765566418.592:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 95.010348][ T29] audit: type=1326 audit(1765566418.602:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 95.033865][ T29] audit: type=1326 audit(1765566418.602:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 95.057319][ T29] audit: type=1326 audit(1765566418.602:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7810 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 95.770565][ T7832] loop3: detected capacity change from 0 to 512 [ 95.790919][ T7834] syzkaller0: entered promiscuous mode [ 95.796525][ T7834] syzkaller0: entered allmulticast mode [ 95.810867][ T7832] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.857042][ T7832] EXT4-fs (loop3): 1 truncate cleaned up [ 95.892226][ T7832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.911948][ T7838] syzkaller0: entered promiscuous mode [ 95.917542][ T7838] syzkaller0: entered allmulticast mode [ 95.963524][ T7838] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 95.986091][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1648'. [ 96.021264][ T7847] loop4: detected capacity change from 0 to 512 [ 96.031344][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.059363][ T7847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.124205][ T7847] EXT4-fs (loop4): 1 truncate cleaned up [ 96.130342][ T7847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.238348][ T7854] syzkaller0: entered promiscuous mode [ 96.243931][ T7854] syzkaller0: entered allmulticast mode [ 96.272559][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.404073][ T7870] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1655'. [ 96.413233][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1655'. [ 96.520187][ T7876] loop3: detected capacity change from 0 to 512 [ 96.551586][ T7876] EXT4-fs: Ignoring removed i_version option [ 96.569228][ T7876] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.586572][ T7876] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1660: EA inode hash validation failed [ 96.601648][ T7876] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.619434][ T7876] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.1660: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 96.634947][ T7876] EXT4-fs (loop3): Remounting filesystem read-only [ 96.641513][ T7876] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.3.1660: ea_inode dec ref err=-117 [ 96.655741][ T7876] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 96.664973][ T7876] EXT4-fs (loop3): 1 orphan inode deleted [ 96.671870][ T7876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 96.696750][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.990806][ T7889] syzkaller0: entered promiscuous mode [ 96.996412][ T7889] syzkaller0: entered allmulticast mode [ 97.139910][ T7893] loop0: detected capacity change from 0 to 512 [ 97.150731][ T7893] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.162587][ T7893] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.176012][ T7893] EXT4-fs (loop0): 1 truncate cleaned up [ 97.182299][ T7893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.221114][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.292230][ T7901] syzkaller0: entered promiscuous mode [ 97.297780][ T7901] syzkaller0: entered allmulticast mode [ 97.345222][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1672'. [ 97.379098][ T7906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.425802][ T7906] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 97.436613][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 97.441831][ T7913] syzkaller0: entered promiscuous mode [ 97.451038][ T7913] syzkaller0: entered allmulticast mode [ 97.457379][ T7906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1672'. [ 97.469623][ T7915] tipc: Enabled bearer , priority 0 [ 97.484301][ T7917] loop0: detected capacity change from 0 to 2048 [ 97.489768][ T7915] syzkaller0: entered promiscuous mode [ 97.496480][ T7915] syzkaller0: entered allmulticast mode [ 97.506880][ T7913] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 97.520024][ T7915] tipc: Resetting bearer [ 97.527003][ T7914] tipc: Resetting bearer [ 97.534654][ T7914] tipc: Disabling bearer [ 97.557203][ T3851] Alternate GPT is invalid, using primary GPT. [ 97.563639][ T3851] loop0: p2 p3 p7 [ 97.576248][ T7917] Alternate GPT is invalid, using primary GPT. [ 97.583005][ T7917] loop0: p2 p3 p7 [ 97.619479][ T7923] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1678'. [ 97.628744][ T7923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1678'. [ 97.724887][ T3851] udevd[3851]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 97.737058][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 97.740154][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 97.758244][ T7932] loop3: detected capacity change from 0 to 2048 [ 97.768419][ T7932] EXT4-fs: Ignoring removed bh option [ 97.784572][ T3851] udevd[3851]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 97.786111][ T6562] udevd[6562]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 97.795800][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 97.822051][ T7932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.854878][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1683'. [ 97.864061][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1683'. [ 97.873591][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 97.887802][ T7932] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.1683: corrupted in-inode xattr: e_name out of bounds [ 97.902101][ T7932] EXT4-fs (loop3): Remounting filesystem read-only [ 97.905285][ T7945] netlink: 'syz.0.1688': attribute type 39 has an invalid length. [ 97.915199][ T7947] syzkaller0: entered promiscuous mode [ 97.921947][ T7947] syzkaller0: entered allmulticast mode [ 97.940319][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.962966][ T7949] bridge5: entered promiscuous mode [ 97.968384][ T7949] bridge5: entered allmulticast mode [ 97.975643][ T7949] team0: Port device bridge5 added [ 97.986873][ T7951] bridge7: entered promiscuous mode [ 97.992125][ T7951] bridge7: entered allmulticast mode [ 97.999663][ T7951] team0: Port device bridge7 added [ 98.081085][ T7957] 9p: Bad value for 'rfdno' [ 98.090303][ T7957] netlink: 'syz.4.1693': attribute type 21 has an invalid length. [ 98.098518][ T7957] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1693'. [ 98.108209][ T7957] netlink: 'syz.4.1693': attribute type 4 has an invalid length. [ 98.119972][ T7957] loop4: detected capacity change from 0 to 512 [ 98.127105][ T7957] EXT4-fs: Ignoring removed i_version option [ 98.136184][ T7957] EXT4-fs (loop4): orphan cleanup on readonly fs [ 98.143999][ T7957] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1693: EA inode hash validation failed [ 98.157010][ T7957] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.170576][ T7957] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.1693: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 98.186609][ T7957] EXT4-fs (loop4): Remounting filesystem read-only [ 98.193206][ T7957] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.1693: ea_inode dec ref err=-117 [ 98.206261][ T7957] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 98.215265][ T7957] EXT4-fs (loop4): 1 orphan inode deleted [ 98.221544][ T7957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.246045][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.903661][ T7980] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 99.045475][ T7989] loop0: detected capacity change from 0 to 512 [ 99.054476][ T7989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.070201][ T7989] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.083822][ T7989] EXT4-fs (loop0): 1 truncate cleaned up [ 99.090262][ T7989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.155268][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.186501][ T7992] loop4: detected capacity change from 0 to 512 [ 99.199349][ T7992] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.214456][ T7992] EXT4-fs (loop4): 1 truncate cleaned up [ 99.220610][ T7992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.279683][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.355810][ T8004] bridge2: entered promiscuous mode [ 99.361081][ T8004] bridge2: entered allmulticast mode [ 99.369019][ T8004] team0: Port device bridge2 added [ 99.440655][ T8011] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 99.993412][ T8030] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 100.017641][ T8029] syzkaller0: entered promiscuous mode [ 100.023205][ T8029] syzkaller0: entered allmulticast mode [ 100.291510][ T8036] loop3: detected capacity change from 0 to 512 [ 100.324742][ T8036] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.355850][ T8040] syzkaller0: entered promiscuous mode [ 100.361517][ T8040] syzkaller0: entered allmulticast mode [ 100.384665][ T8036] EXT4-fs (loop3): 1 truncate cleaned up [ 100.395534][ T8036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.442416][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.533868][ T8048] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 100.544806][ T8050] loop0: detected capacity change from 0 to 512 [ 100.584196][ T8052] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 100.593600][ T8050] EXT4-fs (loop0): 1 truncate cleaned up [ 100.599980][ T8050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.626256][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 100.626271][ T29] audit: type=1326 audit(1765566424.802:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 100.649168][ T8052] team0: left allmulticast mode [ 100.655955][ T29] audit: type=1326 audit(1765566424.802:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 100.660872][ T8052] team_slave_0: left allmulticast mode [ 100.660890][ T8052] team_slave_1: left allmulticast mode [ 100.660926][ T8052] team0: left promiscuous mode [ 100.660938][ T8052] team_slave_0: left promiscuous mode [ 100.684270][ T29] audit: type=1326 audit(1765566424.802:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 100.689961][ T8052] team_slave_1: left promiscuous mode [ 100.695349][ T29] audit: type=1326 audit(1765566424.802:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faacccef749 code=0x7ffc0000 [ 100.700718][ T8052] bridge0: port 3(team0) entered disabled state [ 100.786304][ T8055] netlink: 'syz.3.1724': attribute type 10 has an invalid length. [ 100.802818][ T8052] bridge_slave_0: left allmulticast mode [ 100.808549][ T8052] bridge_slave_0: left promiscuous mode [ 100.814240][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.824684][ T8052] bridge_slave_1: left allmulticast mode [ 100.830365][ T8052] bridge_slave_1: left promiscuous mode [ 100.836255][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.850491][ T8052] bond0: (slave bond_slave_0): Releasing backup interface [ 100.862806][ T8052] bond0: (slave bond_slave_1): Releasing backup interface [ 100.956144][ T8052] team0: Port device team_slave_0 removed [ 100.974757][ T8052] team0: Port device team_slave_1 removed [ 101.014361][ T8052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.021882][ T8052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.056149][ T8052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.063675][ T8052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.075897][ T8052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 101.099574][ T8055] batman_adv: batadv0: Adding interface: veth1_vlan [ 101.109684][ T8055] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.140227][ T8055] batman_adv: batadv0: Interface activated: veth1_vlan [ 101.239533][ T8068] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 101.246119][ T8068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.253935][ T8068] vhci_hcd vhci_hcd.0: Device attached [ 101.271721][ T29] audit: type=1326 audit(1765566424.952:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 101.295234][ T29] audit: type=1326 audit(1765566424.952:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 101.318885][ T29] audit: type=1326 audit(1765566424.952:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 101.342232][ T29] audit: type=1326 audit(1765566424.952:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 101.365856][ T29] audit: type=1326 audit(1765566424.952:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 101.389365][ T29] audit: type=1326 audit(1765566424.952:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.0.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 101.423706][ T8044] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 101.449027][ T8069] vhci_hcd: connection closed [ 101.449318][ T31] vhci_hcd vhci_hcd.2: stop threads [ 101.459853][ T31] vhci_hcd vhci_hcd.2: release socket [ 101.465326][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 101.483211][ T6554] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 101.775304][ T8076] syzkaller0: entered promiscuous mode [ 101.780864][ T8076] syzkaller0: entered allmulticast mode [ 101.797442][ T8077] syz.3.1731 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.892810][ T8083] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 102.141667][ T8109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8109 comm=syz.4.1745 [ 102.154634][ T8109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8109 comm=syz.4.1745 [ 102.167231][ T8113] __nla_validate_parse: 3 callbacks suppressed [ 102.167252][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 102.236845][ T8118] loop4: detected capacity change from 0 to 512 [ 102.267299][ T8118] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.454315][ T8118] EXT4-fs (loop4): 1 truncate cleaned up [ 102.586401][ T8133] FAULT_INJECTION: forcing a failure. [ 102.586401][ T8133] name failslab, interval 1, probability 0, space 0, times 0 [ 102.599201][ T8133] CPU: 1 UID: 0 PID: 8133 Comm: syz.2.1751 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.599236][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.599249][ T8133] Call Trace: [ 102.599255][ T8133] [ 102.599261][ T8133] __dump_stack+0x1d/0x30 [ 102.599353][ T8133] dump_stack_lvl+0xe8/0x140 [ 102.599376][ T8133] dump_stack+0x15/0x1b [ 102.599395][ T8133] should_fail_ex+0x265/0x280 [ 102.599418][ T8133] should_failslab+0x8c/0xb0 [ 102.599484][ T8133] __kmalloc_cache_noprof+0x65/0x4c0 [ 102.599521][ T8133] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 102.599543][ T8133] bpf_prog_alloc_no_stats+0xc4/0x390 [ 102.599563][ T8133] bpf_prog_alloc+0x3c/0x150 [ 102.599633][ T8133] bpf_prog_load+0x506/0x1140 [ 102.599665][ T8133] ? security_bpf+0x2b/0x90 [ 102.599766][ T8133] __sys_bpf+0x469/0x7c0 [ 102.599798][ T8133] __x64_sys_bpf+0x41/0x50 [ 102.599820][ T8133] x64_sys_call+0x28e1/0x3000 [ 102.599879][ T8133] do_syscall_64+0xd8/0x2a0 [ 102.599928][ T8133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.600018][ T8133] RIP: 0033:0x7fd3a2adf749 [ 102.600036][ T8133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.600060][ T8133] RSP: 002b:00007fd3a153f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.600084][ T8133] RAX: ffffffffffffffda RBX: 00007fd3a2d35fa0 RCX: 00007fd3a2adf749 [ 102.600101][ T8133] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 102.600113][ T8133] RBP: 00007fd3a153f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.600124][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.600177][ T8133] R13: 00007fd3a2d36038 R14: 00007fd3a2d35fa0 R15: 00007ffe99b2ec18 [ 102.600201][ T8133] [ 102.871175][ T8135] syzkaller0: entered promiscuous mode [ 102.876840][ T8135] syzkaller0: entered allmulticast mode [ 103.211513][ T8149] loop2: detected capacity change from 0 to 2048 [ 103.262677][ T3310] Alternate GPT is invalid, using primary GPT. [ 103.269245][ T3310] loop2: p2 p3 p7 [ 103.290589][ T8149] Alternate GPT is invalid, using primary GPT. [ 103.296962][ T8149] loop2: p2 p3 p7 [ 103.327507][ T8160] loop3: detected capacity change from 0 to 512 [ 103.354143][ T8160] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.413193][ T8160] EXT4-fs (loop3): 1 truncate cleaned up [ 103.446335][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.448618][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 103.467696][ T3851] udevd[3851]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 103.518498][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 103.528915][ T3851] udevd[3851]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 103.598131][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.665628][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.675730][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 103.687127][ T3851] udevd[3851]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 103.923810][ T8184] syzkaller0: entered promiscuous mode [ 103.929346][ T8184] syzkaller0: entered allmulticast mode [ 104.004847][ T8188] loop3: detected capacity change from 0 to 512 [ 104.019206][ T8188] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.031063][ T8188] EXT4-fs (loop3): 1 truncate cleaned up [ 104.142020][ T8197] syzkaller0: entered promiscuous mode [ 104.147665][ T8197] syzkaller0: entered allmulticast mode [ 104.161877][ T8199] syzkaller0: entered promiscuous mode [ 104.167447][ T8199] syzkaller0: entered allmulticast mode [ 104.293871][ T8214] loop4: detected capacity change from 0 to 2048 [ 104.321413][ T3851] Alternate GPT is invalid, using primary GPT. [ 104.327899][ T3851] loop4: p2 p3 p7 [ 104.340604][ T8214] Alternate GPT is invalid, using primary GPT. [ 104.347157][ T8214] loop4: p2 p3 p7 [ 104.377325][ T8220] syzkaller0: entered promiscuous mode [ 104.383027][ T8220] syzkaller0: entered allmulticast mode [ 104.424480][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 104.493427][ T8224] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 104.607511][ T8236] syzkaller0: entered promiscuous mode [ 104.613058][ T8236] syzkaller0: entered allmulticast mode [ 104.744376][ T8244] syzkaller0: entered promiscuous mode [ 104.749959][ T8244] syzkaller0: entered allmulticast mode [ 105.004080][ T8259] FAULT_INJECTION: forcing a failure. [ 105.004080][ T8259] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.017330][ T8259] CPU: 0 UID: 0 PID: 8259 Comm: syz.3.1793 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.017357][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.017369][ T8259] Call Trace: [ 105.017376][ T8259] [ 105.017384][ T8259] __dump_stack+0x1d/0x30 [ 105.017497][ T8259] dump_stack_lvl+0xe8/0x140 [ 105.017523][ T8259] dump_stack+0x15/0x1b [ 105.017549][ T8259] should_fail_ex+0x265/0x280 [ 105.017578][ T8259] should_fail+0xb/0x20 [ 105.017674][ T8259] should_fail_usercopy+0x1a/0x20 [ 105.017704][ T8259] _copy_from_user+0x1c/0xb0 [ 105.017740][ T8259] copy_from_sockptr+0x5e/0xa0 [ 105.017772][ T8259] packet_setsockopt+0x7c1/0xfd0 [ 105.017792][ T8259] ? __pfx_packet_setsockopt+0x10/0x10 [ 105.017811][ T8259] __sys_setsockopt+0x184/0x200 [ 105.017917][ T8259] __x64_sys_setsockopt+0x64/0x80 [ 105.017952][ T8259] x64_sys_call+0x21d5/0x3000 [ 105.017980][ T8259] do_syscall_64+0xd8/0x2a0 [ 105.018056][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.018077][ T8259] RIP: 0033:0x7faacccef749 [ 105.018093][ T8259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.018124][ T8259] RSP: 002b:00007faacb757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.018148][ T8259] RAX: ffffffffffffffda RBX: 00007faaccf45fa0 RCX: 00007faacccef749 [ 105.018164][ T8259] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 105.018245][ T8259] RBP: 00007faacb757090 R08: 000000000000001c R09: 0000000000000000 [ 105.018391][ T8259] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.018402][ T8259] R13: 00007faaccf46038 R14: 00007faaccf45fa0 R15: 00007fff46f9c828 [ 105.018419][ T8259] [ 105.219903][ T8262] tipc: Enabled bearer , priority 0 [ 105.227183][ T8262] syzkaller0: entered promiscuous mode [ 105.232694][ T8262] syzkaller0: entered allmulticast mode [ 105.242875][ T8262] tipc: Resetting bearer [ 105.249614][ T8261] tipc: Resetting bearer [ 105.256659][ T8261] tipc: Disabling bearer [ 105.307237][ T8267] syzkaller0: entered promiscuous mode [ 105.312943][ T8267] syzkaller0: entered allmulticast mode [ 105.379099][ T8273] syzkaller0: entered promiscuous mode [ 105.384768][ T8273] syzkaller0: entered allmulticast mode [ 105.437034][ T8279] syzkaller0: entered promiscuous mode [ 105.442631][ T8279] syzkaller0: entered allmulticast mode [ 105.455663][ T8281] netlink: 'syz.2.1804': attribute type 10 has an invalid length. [ 105.463723][ T8281] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1804'. [ 105.486501][ T8281] ipvlan2: entered promiscuous mode [ 105.492000][ T8283] loop4: detected capacity change from 0 to 512 [ 105.493433][ T8281] bridge0: port 4(ipvlan2) entered blocking state [ 105.504882][ T8281] bridge0: port 4(ipvlan2) entered disabled state [ 105.522942][ T8281] ipvlan2: entered allmulticast mode [ 105.528419][ T8281] bridge0: entered allmulticast mode [ 105.533955][ T8283] EXT4-fs (loop4): 1 truncate cleaned up [ 105.545978][ T8281] ipvlan2: left allmulticast mode [ 105.551065][ T8281] bridge0: left allmulticast mode [ 105.691200][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 105.691280][ T29] audit: type=1326 audit(1765566429.862:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 105.728631][ T29] audit: type=1326 audit(1765566429.862:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 105.752280][ T29] audit: type=1326 audit(1765566429.862:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 105.759684][ T8309] syzkaller0: entered promiscuous mode [ 105.775880][ T29] audit: type=1326 audit(1765566429.872:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3a2adf783 code=0x7ffc0000 [ 105.781384][ T8309] syzkaller0: entered allmulticast mode [ 105.804762][ T29] audit: type=1326 audit(1765566429.872:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3a2adf783 code=0x7ffc0000 [ 105.821635][ T8305] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 105.833478][ T29] audit: type=1326 audit(1765566429.872:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 105.839874][ T8305] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 105.863335][ T29] audit: type=1326 audit(1765566429.872:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 105.870959][ T8305] vhci_hcd vhci_hcd.0: Device attached [ 105.894444][ T29] audit: type=1326 audit(1765566429.872:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 105.905354][ T8311] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1811'. [ 105.923371][ T29] audit: type=1326 audit(1765566429.872:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 105.932283][ T8311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1811'. [ 105.955735][ T29] audit: type=1326 audit(1765566429.872:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a2adf749 code=0x7ffc0000 [ 105.973343][ T8311] IPVS: stopping backup sync thread 8030 ... [ 106.005761][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 106.116321][ T8306] vhci_hcd: connection closed [ 106.116625][ T52] vhci_hcd vhci_hcd.0: stop threads [ 106.126693][ T52] vhci_hcd vhci_hcd.0: release socket [ 106.132117][ T52] vhci_hcd vhci_hcd.0: disconnect device [ 106.143640][ T3490] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 106.247996][ T8323] syzkaller0: entered promiscuous mode [ 106.253579][ T8323] syzkaller0: entered allmulticast mode [ 106.362625][ T8325] loop1: detected capacity change from 0 to 512 [ 106.369615][ T8325] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.400619][ T8325] EXT4-fs (loop1): 1 truncate cleaned up [ 106.438252][ T8330] syzkaller0: entered promiscuous mode [ 106.443832][ T8330] syzkaller0: entered allmulticast mode [ 106.491600][ T8334] tipc: Enabled bearer , priority 0 [ 106.502185][ T8334] syzkaller0: entered promiscuous mode [ 106.507753][ T8334] syzkaller0: entered allmulticast mode [ 106.518824][ T8334] tipc: Resetting bearer [ 106.533575][ T8331] tipc: Resetting bearer [ 106.552770][ T8331] tipc: Disabling bearer [ 106.583748][ T8342] syzkaller0: entered promiscuous mode [ 106.589304][ T8342] syzkaller0: entered allmulticast mode [ 106.625968][ T8345] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 4, id = 0 [ 106.644483][ T8339] IPVS: stopping master sync thread 8345 ... [ 106.691390][ T8339] syz.1.1824 (8339) used greatest stack depth: 10192 bytes left [ 106.733997][ T8357] loop1: detected capacity change from 0 to 512 [ 106.740735][ T8356] loop2: detected capacity change from 0 to 2048 [ 106.776705][ T8357] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.795933][ T8357] EXT4-fs (loop1): 1 truncate cleaned up [ 106.904992][ T3310] Alternate GPT is invalid, using primary GPT. [ 106.911501][ T3310] loop2: p2 p3 p7 [ 107.051912][ T8372] syzkaller0: entered promiscuous mode [ 107.057468][ T8372] syzkaller0: entered allmulticast mode [ 107.374318][ T8385] syzkaller0: entered promiscuous mode [ 107.379918][ T8385] syzkaller0: entered allmulticast mode [ 107.729446][ T8356] Alternate GPT is invalid, using primary GPT. [ 107.735965][ T8356] loop2: p2 p3 p7 [ 107.752665][ T8394] netlink: 'syz.4.1843': attribute type 1 has an invalid length. [ 107.780418][ T8394] bridge_slave_0: left allmulticast mode [ 107.786276][ T8394] bridge_slave_0: left promiscuous mode [ 107.792134][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.805876][ T8394] bridge_slave_1: left allmulticast mode [ 107.811569][ T8394] bridge_slave_1: left promiscuous mode [ 107.817390][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.852701][ T8400] netlink: 'syz.4.1843': attribute type 10 has an invalid length. [ 107.860626][ T8400] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1843'. [ 107.874853][ T8394] bond0: (slave bond_slave_0): Releasing backup interface [ 107.912247][ T8394] bond0: (slave bond_slave_1): Releasing backup interface [ 107.940238][ T8394] team0: Port device team_slave_0 removed [ 107.971858][ T8394] team0: Port device team_slave_1 removed [ 108.028657][ T8394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.036180][ T8394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.102089][ T8394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.109554][ T8394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.136114][ T8394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.156909][ T8395] bridge6: entered promiscuous mode [ 108.162186][ T8395] bridge6: entered allmulticast mode [ 108.195362][ T8395] team0: Port device bridge6 added [ 108.224525][ T8400] batman_adv: batadv0: Adding interface: veth1_vlan [ 108.231169][ T8400] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.279783][ T8411] 9p: Could not find request transport: r [ 108.315404][ T8400] batman_adv: batadv0: Interface activated: veth1_vlan [ 108.339226][ T8411] netlink: 'syz.1.1847': attribute type 32 has an invalid length. [ 108.403971][ T8417] tmpfs: Unknown parameter 'noswaq' [ 108.431708][ T8419] netlink: 'syz.2.1851': attribute type 10 has an invalid length. [ 108.439648][ T8419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1851'. [ 108.495248][ T8423] loop0: detected capacity change from 0 to 512 [ 108.505156][ T8419] batman_adv: batadv0: Adding interface: veth1_vlan [ 108.511851][ T8419] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.543449][ T8423] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.559436][ T8423] EXT4-fs (loop0): 1 truncate cleaned up [ 108.587020][ T8419] batman_adv: batadv0: Interface activated: veth1_vlan [ 108.606481][ T8425] syzkaller0: entered promiscuous mode [ 108.612019][ T8425] syzkaller0: entered allmulticast mode [ 108.703572][ T8431] loop2: detected capacity change from 0 to 512 [ 108.716637][ T8431] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.770332][ T8431] EXT4-fs (loop2): 1 truncate cleaned up [ 108.780782][ T8433] syzkaller0: entered promiscuous mode [ 108.786364][ T8433] syzkaller0: entered allmulticast mode [ 108.862053][ T8438] loop1: detected capacity change from 0 to 512 [ 108.928370][ T8438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.961940][ T8443] loop2: detected capacity change from 0 to 512 [ 108.968466][ T8440] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 108.975041][ T8440] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.982779][ T8440] vhci_hcd vhci_hcd.0: Device attached [ 108.990160][ T8443] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.001237][ T8438] EXT4-fs (loop1): 1 truncate cleaned up [ 109.010016][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1862'. [ 109.024093][ T8443] EXT4-fs (loop2): 1 truncate cleaned up [ 109.102300][ T8445] vhci_hcd: connection closed [ 109.102955][ T37] vhci_hcd vhci_hcd.3: stop threads [ 109.113075][ T37] vhci_hcd vhci_hcd.3: release socket [ 109.118611][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 109.163327][ T1040] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 109.302768][ T8473] syzkaller0: entered promiscuous mode [ 109.308467][ T8473] syzkaller0: entered allmulticast mode [ 109.371486][ T8477] bridge2: entered promiscuous mode [ 109.376858][ T8477] bridge2: entered allmulticast mode [ 109.387015][ T8477] team0: Port device bridge2 added [ 109.442614][ T8479] syzkaller0: entered promiscuous mode [ 109.448191][ T8479] syzkaller0: entered allmulticast mode [ 126.113457][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 126.113472][ T29] audit: type=1400 audit(1765566450.292:2912): avc: denied { create } for pid=8499 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.160164][ T29] audit: type=1400 audit(1765566450.332:2913): avc: denied { connect } for pid=8499 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.162694][ T8502] process 'syz.3.1879' launched '/dev/fd/10' with NULL argv: empty string added [ 126.190339][ T8501] FAULT_INJECTION: forcing a failure. [ 126.190339][ T8501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.203439][ T8501] CPU: 0 UID: 0 PID: 8501 Comm: syz.4.1880 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.203498][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.203511][ T8501] Call Trace: [ 126.203518][ T8501] [ 126.203528][ T8501] __dump_stack+0x1d/0x30 [ 126.203563][ T8501] dump_stack_lvl+0xe8/0x140 [ 126.203602][ T8501] dump_stack+0x15/0x1b [ 126.203699][ T8501] should_fail_ex+0x265/0x280 [ 126.203735][ T8501] should_fail+0xb/0x20 [ 126.203758][ T8501] should_fail_usercopy+0x1a/0x20 [ 126.203785][ T8501] _copy_from_user+0x1c/0xb0 [ 126.203817][ T8501] ___sys_sendmsg+0xc1/0x1d0 [ 126.203879][ T8501] __x64_sys_sendmsg+0xd4/0x160 [ 126.203914][ T8501] x64_sys_call+0x17ba/0x3000 [ 126.204006][ T8501] do_syscall_64+0xd8/0x2a0 [ 126.204084][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.204111][ T8501] RIP: 0033:0x7f0212e6f749 [ 126.204193][ T8501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.204214][ T8501] RSP: 002b:00007f02118cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.204233][ T8501] RAX: ffffffffffffffda RBX: 00007f02130c5fa0 RCX: 00007f0212e6f749 [ 126.204246][ T8501] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 126.204295][ T8501] RBP: 00007f02118cf090 R08: 0000000000000000 R09: 0000000000000000 [ 126.204314][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.204326][ T8501] R13: 00007f02130c6038 R14: 00007f02130c5fa0 R15: 00007fff82d0a8c8 [ 126.204350][ T8501] [ 126.209611][ T8500] loop0: detected capacity change from 0 to 512 [ 126.241949][ T29] audit: type=1400 audit(1765566450.402:2914): avc: denied { execute_no_trans } for pid=8499 comm="syz.3.1879" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.268535][ T8503] loop2: detected capacity change from 0 to 512 [ 126.343236][ T8500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.374126][ T8503] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.409617][ T8505] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 126.436186][ T8505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.443870][ T8505] vhci_hcd vhci_hcd.0: Device attached [ 126.449839][ T29] audit: type=1400 audit(1765566450.622:2915): avc: denied { write } for pid=8499 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.471998][ T8503] EXT4-fs (loop2): 1 truncate cleaned up [ 126.475646][ T8515] loop4: detected capacity change from 0 to 736 [ 126.479508][ T8508] vhci_hcd: connection closed [ 126.486714][ T31] vhci_hcd vhci_hcd.3: stop threads [ 126.496709][ T31] vhci_hcd vhci_hcd.3: release socket [ 126.502107][ T31] vhci_hcd vhci_hcd.3: disconnect device [ 126.514867][ T8500] EXT4-fs (loop0): 1 truncate cleaned up [ 126.531717][ T8517] loop1: detected capacity change from 0 to 736 [ 126.533995][ T8503] EXT4-fs mount: 21 callbacks suppressed [ 126.534048][ T8503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.538589][ T8500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.544693][ T29] audit: type=1400 audit(1765566450.722:2916): avc: denied { mount } for pid=8512 comm="syz.4.1882" name="/" dev="loop4" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 126.611243][ T29] audit: type=1400 audit(1765566450.782:2917): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 126.632025][ T8517] FAULT_INJECTION: forcing a failure. [ 126.632025][ T8517] name failslab, interval 1, probability 0, space 0, times 0 [ 126.646679][ T8517] CPU: 1 UID: 0 PID: 8517 Comm: syz.1.1883 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.646706][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.646720][ T8517] Call Trace: [ 126.646727][ T8517] [ 126.646735][ T8517] __dump_stack+0x1d/0x30 [ 126.646764][ T8517] dump_stack_lvl+0xe8/0x140 [ 126.646787][ T8517] dump_stack+0x15/0x1b [ 126.646806][ T8517] should_fail_ex+0x265/0x280 [ 126.646863][ T8517] should_failslab+0x8c/0xb0 [ 126.646900][ T8517] kmem_cache_alloc_noprof+0x69/0x4b0 [ 126.646968][ T8517] ? getname_flags+0x80/0x3b0 [ 126.646991][ T8517] ? fput+0x8f/0xc0 [ 126.647018][ T8517] getname_flags+0x80/0x3b0 [ 126.647054][ T8517] __x64_sys_mkdirat+0x40/0x60 [ 126.647131][ T8517] x64_sys_call+0x30c/0x3000 [ 126.647178][ T8517] do_syscall_64+0xd8/0x2a0 [ 126.647214][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.647338][ T8517] RIP: 0033:0x7fa9c561f749 [ 126.647354][ T8517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.647438][ T8517] RSP: 002b:00007fa9c4087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 126.647464][ T8517] RAX: ffffffffffffffda RBX: 00007fa9c5875fa0 RCX: 00007fa9c561f749 [ 126.647479][ T8517] RDX: 00000000000001c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 126.647492][ T8517] RBP: 00007fa9c4087090 R08: 0000000000000000 R09: 0000000000000000 [ 126.647504][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.647563][ T8517] R13: 00007fa9c5876038 R14: 00007fa9c5875fa0 R15: 00007ffc95ba8188 [ 126.647582][ T8517] [ 126.828501][ T8519] loop4: detected capacity change from 0 to 1024 [ 126.835390][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.856023][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.896365][ T8519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.976942][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.016134][ T8536] loop4: detected capacity change from 0 to 512 [ 127.036299][ T8536] EXT4-fs (loop4): 1 truncate cleaned up [ 127.057920][ T8536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.070464][ T8534] 9p: Could not find request transport: r [ 127.081519][ T8534] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1887'. [ 127.351923][ T29] audit: type=1400 audit(1765566451.522:2918): avc: denied { bind } for pid=8545 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.371738][ T29] audit: type=1400 audit(1765566451.542:2919): avc: denied { setopt } for pid=8545 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.388868][ T8548] syzkaller0: entered promiscuous mode [ 127.396927][ T8548] syzkaller0: entered allmulticast mode [ 127.494850][ T8551] syzkaller0: entered promiscuous mode [ 127.500349][ T8551] syzkaller0: entered allmulticast mode [ 127.580370][ T8553] FAULT_INJECTION: forcing a failure. [ 127.580370][ T8553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.593755][ T8553] CPU: 0 UID: 0 PID: 8553 Comm: syz.1.1893 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.593781][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.593797][ T8553] Call Trace: [ 127.593806][ T8553] [ 127.593815][ T8553] __dump_stack+0x1d/0x30 [ 127.593847][ T8553] dump_stack_lvl+0xe8/0x140 [ 127.593874][ T8553] dump_stack+0x15/0x1b [ 127.593891][ T8553] should_fail_ex+0x265/0x280 [ 127.593986][ T8553] should_fail_alloc_page+0xf2/0x100 [ 127.594012][ T8553] __alloc_frozen_pages_noprof+0x109/0x360 [ 127.594053][ T8553] alloc_pages_mpol+0xb3/0x260 [ 127.594116][ T8553] vma_alloc_folio_noprof+0x1aa/0x300 [ 127.594145][ T8553] handle_mm_fault+0xef5/0x2c60 [ 127.594184][ T8553] do_user_addr_fault+0x630/0x1080 [ 127.594268][ T8553] exc_page_fault+0x62/0xa0 [ 127.594293][ T8553] asm_exc_page_fault+0x26/0x30 [ 127.594311][ T8553] RIP: 0033:0x7fa9c55ccc5b [ 127.594325][ T8553] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 127.594400][ T8553] RSP: 002b:00007fa9c4084e10 EFLAGS: 00010246 [ 127.594415][ T8553] RAX: 00007fa9c4086f30 RBX: 00007fa9c584a640 RCX: 0000000000000000 [ 127.594426][ T8553] RDX: 00007fa9c4086f78 RSI: 00007fa9c5680df8 RDI: 00007fa9c4084e30 [ 127.594437][ T8553] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 127.594448][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.594476][ T8553] R13: 00007fa9c5876038 R14: 00007fa9c5875fa0 R15: 00007ffc95ba8188 [ 127.594493][ T8553] [ 127.594519][ T8553] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 127.786632][ T8555] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 127.800870][ T8559] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1895'. [ 127.810726][ T8559] syzkaller1: entered promiscuous mode [ 127.816361][ T8559] syzkaller1: entered allmulticast mode [ 127.818648][ T8555] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 127.829845][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'. [ 127.833294][ T29] audit: type=1326 audit(1765566451.992:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 127.862305][ T29] audit: type=1326 audit(1765566451.992:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8554 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f260e1ff749 code=0x7ffc0000 [ 127.902712][ T8555] batman_adv: batadv0: Adding interface: veth1_vlan [ 127.909385][ T8555] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.936059][ T8561] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.939559][ T8555] batman_adv: batadv0: Interface activated: veth1_vlan [ 127.948482][ T8561] loop2: detected capacity change from 0 to 512 [ 127.978344][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.002458][ T8565] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 128.009478][ T8561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.022427][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 128.048025][ T8561] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 128.071440][ T8561] System zones: 1-12 [ 128.076279][ T8561] EXT4-fs (loop2): 1 truncate cleaned up [ 128.082552][ T8561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.121239][ T8574] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1903'. [ 128.205392][ T8580] loop3: detected capacity change from 0 to 512 [ 128.212604][ T8580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.225655][ T8580] EXT4-fs (loop3): 1 truncate cleaned up [ 128.231926][ T8580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.264224][ T8578] loop0: detected capacity change from 0 to 512 [ 128.286321][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.315737][ T8578] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.343100][ T8578] EXT4-fs (loop0): 1 truncate cleaned up [ 128.357609][ T8578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.388411][ T8586] $Hÿ: renamed from bond0 (while UP) [ 128.401942][ T8586] $Hÿ: entered promiscuous mode [ 128.407079][ T8586] bond_slave_0: entered promiscuous mode [ 128.413540][ T8586] bond_slave_1: entered promiscuous mode [ 128.421203][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.431196][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.498529][ T8590] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1910'. [ 128.498903][ T8590] syzkaller1: entered promiscuous mode [ 128.498923][ T8590] syzkaller1: entered allmulticast mode [ 128.522922][ T8595] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 128.524212][ T8593] syzkaller0: entered promiscuous mode [ 128.524236][ T8593] syzkaller0: entered allmulticast mode [ 128.525138][ T8595] netlink: 'syz.0.1909': attribute type 10 has an invalid length. [ 128.525205][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1909'. [ 128.708615][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'. [ 128.787874][ T8609] syzkaller0: entered promiscuous mode [ 128.793553][ T8609] syzkaller0: entered allmulticast mode [ 128.800289][ T8614] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.809194][ T8613] tipc: Enabling of bearer rejected, failed to enable media [ 128.834252][ T8613] syzkaller0: entered promiscuous mode [ 128.839748][ T8613] syzkaller0: entered allmulticast mode [ 128.847702][ T8614] loop3: detected capacity change from 0 to 512 [ 128.854775][ T8614] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 128.973490][ T8622] netlink: 'syz.3.1922': attribute type 39 has an invalid length. [ 128.974700][ T8620] tipc: Enabling of bearer rejected, failed to enable media [ 129.008403][ T8626] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1923'. [ 129.023711][ T8626] syzkaller1: entered promiscuous mode [ 129.029230][ T8626] syzkaller1: entered allmulticast mode [ 129.053572][ T8620] syzkaller0: entered promiscuous mode [ 129.059106][ T8620] syzkaller0: entered allmulticast mode [ 129.118618][ T8506] Alternate GPT is invalid, using primary GPT. [ 129.125055][ T8506] loop3: p2 p3 p7 [ 129.157618][ T8632] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.168247][ T8630] Alternate GPT is invalid, using primary GPT. [ 129.174646][ T8630] loop3: p2 p3 p7 [ 129.176569][ T8632] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.202919][ T8637] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.243965][ T8632] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.254158][ T8637] EXT4-fs (loop2): 1 truncate cleaned up [ 129.285716][ T8632] infiniband syz2: set active [ 129.290446][ T8632] infiniband syz2: added ip6_vti0 [ 129.295532][ T23] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.315455][ T8637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.357279][ T8524] udevd[8524]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 129.369509][ T8506] udevd[8506]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 129.381314][ T8638] udevd[8638]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 129.392126][ T8632] RDS/IB: syz2: added [ 129.399638][ T8632] smc: adding ib device syz2 with port count 1 [ 129.401987][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.416100][ T8632] smc: ib device syz2 port 1 has no pnetid [ 129.422234][ T3488] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.443682][ T8638] udevd[8638]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 129.444184][ T8506] udevd[8506]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 129.455130][ T8646] udevd[8646]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 129.480035][ T8632] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.486381][ T8651] tipc: Enabling of bearer rejected, failed to enable media [ 129.496458][ T8651] syzkaller0: entered promiscuous mode [ 129.501952][ T8651] syzkaller0: entered allmulticast mode [ 129.569928][ T8655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.599781][ T8632] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.621135][ T8655] EXT4-fs (loop2): 1 truncate cleaned up [ 129.627661][ T8655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.652343][ T8660] can0: slcan on ttyS3. [ 129.752993][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.769959][ T8632] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.783231][ T8660] can0 (unregistered): slcan off ttyS3. [ 129.841347][ T8670] syzkaller0: entered promiscuous mode [ 129.846913][ T8670] syzkaller0: entered allmulticast mode [ 129.901888][ T8632] ip6_vti0 speed is unknown, defaulting to 1000 [ 129.972439][ T8683] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.013748][ T8683] EXT4-fs (loop3): 1 truncate cleaned up [ 130.020132][ T8683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.040032][ T8632] ip6_vti0 speed is unknown, defaulting to 1000 [ 130.107873][ C0] ================================================================== [ 130.116031][ C0] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 130.124308][ C0] [ 130.126632][ C0] read to 0xffff8881030cc078 of 2 bytes by interrupt on cpu 1: [ 130.134175][ C0] virtqueue_disable_cb+0x58/0x150 [ 130.139338][ C0] skb_xmit_done+0x67/0x1a0 [ 130.143844][ C0] vring_interrupt+0x155/0x180 [ 130.148627][ C0] __handle_irq_event_percpu+0x9d/0x510 [ 130.154263][ C0] handle_irq_event+0x64/0xf0 [ 130.158954][ C0] handle_edge_irq+0x154/0x470 [ 130.163752][ C0] __common_interrupt+0x60/0xb0 [ 130.168650][ C0] common_interrupt+0x7e/0x90 [ 130.173334][ C0] asm_common_interrupt+0x26/0x40 [ 130.178373][ C0] copy_page_range+0x10ca/0x3c30 [ 130.183324][ C0] dup_mmap+0x824/0xea0 [ 130.187523][ C0] copy_mm+0x11a/0x370 [ 130.191600][ C0] copy_process+0xcbc/0x1ef0 [ 130.196203][ C0] kernel_clone+0x16c/0x5c0 [ 130.200710][ C0] __x64_sys_clone+0xe6/0x120 [ 130.205397][ C0] x64_sys_call+0x12d0/0x3000 [ 130.210089][ C0] do_syscall_64+0xd8/0x2a0 [ 130.214604][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.220590][ C0] [ 130.222908][ C0] write to 0xffff8881030cc078 of 2 bytes by interrupt on cpu 0: [ 130.230532][ C0] virtqueue_disable_cb+0x7a/0x150 [ 130.235654][ C0] start_xmit+0x10e/0x17a0 [ 130.240095][ C0] dev_hard_start_xmit+0x125/0x3e0 [ 130.245227][ C0] sch_direct_xmit+0x192/0x550 [ 130.250019][ C0] __dev_queue_xmit+0xcb2/0x1ec0 [ 130.254969][ C0] ip_finish_output2+0x77f/0x8b0 [ 130.259930][ C0] ip_finish_output+0x114/0x2a0 [ 130.264793][ C0] ip_output+0xbd/0x190 [ 130.268965][ C0] __ip_queue_xmit+0xbbf/0xc00 [ 130.273735][ C0] ip_queue_xmit+0x39/0x50 [ 130.278184][ C0] __tcp_transmit_skb+0x17fd/0x1c10 [ 130.283391][ C0] tcp_write_xmit+0x1477/0x3150 [ 130.288248][ C0] tcp_tsq_write+0x15c/0x170 [ 130.292862][ C0] tcp_tsq_workfn+0x23b/0x300 [ 130.297553][ C0] process_scheduled_works+0x4ce/0x9d0 [ 130.303033][ C0] bh_worker+0x229/0x370 [ 130.307288][ C0] workqueue_softirq_action+0xab/0xc0 [ 130.312671][ C0] tasklet_action+0xb/0x30 [ 130.317086][ C0] handle_softirqs+0xba/0x290 [ 130.321794][ C0] __irq_exit_rcu+0x3a/0xc0 [ 130.326310][ C0] common_interrupt+0x83/0x90 [ 130.331003][ C0] asm_common_interrupt+0x26/0x40 [ 130.336031][ C0] d_alloc+0x9a/0x100 [ 130.340052][ C0] lookup_one_qstr_excl+0x99/0x250 [ 130.345215][ C0] filename_create+0x141/0x210 [ 130.350010][ C0] do_mkdirat+0x82/0x3b0 [ 130.354254][ C0] __x64_sys_mkdirat+0x4c/0x60 [ 130.359030][ C0] x64_sys_call+0x30c/0x3000 [ 130.363631][ C0] do_syscall_64+0xd8/0x2a0 [ 130.368158][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.374068][ C0] [ 130.376400][ C0] value changed: 0x0000 -> 0x0001 [ 130.381414][ C0] [ 130.383746][ C0] Reported by Kernel Concurrency Sanitizer on: [ 130.389909][ C0] CPU: 0 UID: 0 PID: 3330 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.399806][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.409862][ C0] ================================================================== [ 130.420966][ T8692] syzkaller0: entered promiscuous mode [ 130.426527][ T8692] syzkaller0: entered allmulticast mode [ 130.441570][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.479980][ T8699] syzkaller0: entered promiscuous mode [ 130.485572][ T8699] syzkaller0: entered allmulticast mode [ 130.493782][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1944'.