last executing test programs: 8.085292211s ago: executing program 4 (id=2019): prlimit64(0x0, 0xe, 0x0, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x30, 0x20, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) 7.813685953s ago: executing program 4 (id=2023): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xd, 0xfe, &(0x7f00000000c0)="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"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='attr/current\x00') writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="e5", 0x1}], 0x1) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 7.090172131s ago: executing program 4 (id=2034): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xa, r3, &(0x7f0000000100)="8a510eb48dbdfcb4", 0x8, 0x242b}]) io_submit(r4, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x3511, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 5.807248694s ago: executing program 4 (id=2061): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000001a40)={0x8000000, 0x100009, 0x6, 0x100}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = socket(0x10, 0x3, 0x0) mq_notify(r2, &(0x7f0000000340)={0x0, 0x3e, 0x0, @thr={&(0x7f0000000280)="1f1fee425a7d343f6e4a1534da2a58a40ed1f89ad1c13ffd44e9ae9baffdad1fb75a118680226fa7a2eb36e6d4584955b90ffa792c03e3f71873309a8161ce3034e44c3b885b465877ae1f0ff9f95b78cee87150d2e4429ca57fd06c0ab27f8a4a0fc16810e22d0f49603931d11ad2a560e7ccf6e09bc32320a9518235ffaec3dce5088e0efc38ea4642cdcd7f1e37e51cfa7c2ca2c8bbf6069f680686b3b89df96b", &(0x7f0000002480)="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"}}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8197}]}}]}, 0x3c}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ptrace(0x11, r6) 5.424413774s ago: executing program 4 (id=2065): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 5.324617612s ago: executing program 4 (id=2068): syz_open_dev$sg(0x0, 0x3, 0x0) open(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="010000000000000000000000000000000000000066816ab9f9c09b73bdfe3b6a32f13a980147a2021e5e6352908cf1481d97d4c30f593d607b1ac488fd9dcce759e9413f2a9bea4ad75d6f285ae212a2f6952b3a1c54e174cb3a1942c3c90307433cd4fb6ce213d8c0b11904e304a207888bd89ac2b62977a4cc712ea197a03931f515fe05e3ea268c98297528e996b94bb035fb9bb1c6982dc5f6fb30b430ed1feaf517707efea207bb082383900cc23ba34a6def90a32ad2808e873d6ac99100378863890ea32cfccd456aef2e869a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000001000007020000f8fff4a7f09efbbab2b8d0ed0ca22000b704000000000000850000008200000018010000696c6c9c8dacf6298ba60c2500000000002020207b1af8ff00000000bfa10000000800000701000000010000b702000008000000000000000000850000007100000095000000000030faeb50e54dc2cd2296"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e4008000400000126d74f0008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) timer_getoverrun(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$eJzs3U1oHOUbAPBnZrPtv23+pgUFlR6KChVKN0k/tHpKr2Kh0IPgpS6bbQjZZEN2U5uQQ3ovYkFR6aXe9OBR8eBBvHj06kXxLIgGhaYHiUx2N/1Isq61ydbO7wezfT+GPu+bmWey7zBDAsitI9lHGvFMRJxPIobu6huIdueR1n6rK0uV2ytLlSTW1i78mkQSEbdWliqd/ZP2vwciYjkino6Ib4oRx9LNcRsLi1PlWq06164PN6dnhxsLi8cnp8sT1YnqzMmXXzl95tTp0ROjD22u1368/s617167ef3Tzw4vV94vJzEWg+2+u+fxMLV+JsUYu6/91E4E66Ok3wPggRTaeV6MiKdiKArtrAcef2t7I9aAnErkP+RU53tAtv7tbLv5/eOXs60FSBZ3tb21egZa9ybif+trk/2/J/esTLL15sHdHCiPpeWrETEyMLD5/E/a59+DG3kYA2RHfX22daA2H/904/oTW1x/Bjv3Tv+lzvVvddP17078wjbXv/M9xvjzzZ8+2jb+1Yhnt4yfbMRPtoifRsRbPca/8caXZ7brW/s44mhsHb8j6X5/ePjSZK060vrcMsZXRw+/2m3++7eJP9Zl/lnbbI/z/+Lbz59b7hL/xee7H/+t4u+LiHd7jH/o1ievb9eXxR/fZv7d4mdtN3uM/9LYkR963BUAAAAAAAAAAPgH0vVn2ZK0tFFO01Kp9Q7vk7E/rdUbzWOX6vMz461n3g5GMe08aTXUqidZfbT9PG6nfuK++smIOBQR7xX2rddLlXptvN+TBwAAAAAAAAAAAAAAAAAAgEfEgfve//+j0Hr/H8gJf/Ib8kv+Q37dm/9J38YB7D6//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74vy5c9m2dntlqZLVxy8vzE/VLx8frzamStPzlVKlPjdbmqjXJ2rVUqU+/Xf/X61enx2Jmfkrw81qozncWFi8OF2fn2lenJwuT1QvVou7MisAAAAAAAAAAAAAAAAAAAD4bxlc35K0FBHpejlNS6WI/0fEwSgmlyZr1ZGIeCIivi8U92b10X4PGgAAAAAAAAAAAAAAAAAAAB4zjYXFqXKtVp1T2FyIiOVHYBgKCn05+QEAAAAAAAAAAAAAAAAAgF1156Xffo8EAAAAAAAAAAAAAAAAAAAA8iz9OYmIbDs69MLg3T17I2JPslrIynsi4u0bFz64Um4250az9t822psftttP9GsOQC86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCOxsLiVLlWq87tYKHfcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EH8FAAD//46R2W8=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.324417232s ago: executing program 32 (id=2068): syz_open_dev$sg(0x0, 0x3, 0x0) open(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="010000000000000000000000000000000000000066816ab9f9c09b73bdfe3b6a32f13a980147a2021e5e6352908cf1481d97d4c30f593d607b1ac488fd9dcce759e9413f2a9bea4ad75d6f285ae212a2f6952b3a1c54e174cb3a1942c3c90307433cd4fb6ce213d8c0b11904e304a207888bd89ac2b62977a4cc712ea197a03931f515fe05e3ea268c98297528e996b94bb035fb9bb1c6982dc5f6fb30b430ed1feaf517707efea207bb082383900cc23ba34a6def90a32ad2808e873d6ac99100378863890ea32cfccd456aef2e869a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000001000007020000f8fff4a7f09efbbab2b8d0ed0ca22000b704000000000000850000008200000018010000696c6c9c8dacf6298ba60c2500000000002020207b1af8ff00000000bfa10000000800000701000000010000b702000008000000000000000000850000007100000095000000000030faeb50e54dc2cd2296"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e4008000400000126d74f0008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) timer_getoverrun(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$eJzs3U1oHOUbAPBnZrPtv23+pgUFlR6KChVKN0k/tHpKr2Kh0IPgpS6bbQjZZEN2U5uQQ3ovYkFR6aXe9OBR8eBBvHj06kXxLIgGhaYHiUx2N/1Isq61ydbO7wezfT+GPu+bmWey7zBDAsitI9lHGvFMRJxPIobu6huIdueR1n6rK0uV2ytLlSTW1i78mkQSEbdWliqd/ZP2vwciYjkino6Ib4oRx9LNcRsLi1PlWq06164PN6dnhxsLi8cnp8sT1YnqzMmXXzl95tTp0ROjD22u1368/s617167ef3Tzw4vV94vJzEWg+2+u+fxMLV+JsUYu6/91E4E66Ok3wPggRTaeV6MiKdiKArtrAcef2t7I9aAnErkP+RU53tAtv7tbLv5/eOXs60FSBZ3tb21egZa9ybif+trk/2/J/esTLL15sHdHCiPpeWrETEyMLD5/E/a59+DG3kYA2RHfX22daA2H/904/oTW1x/Bjv3Tv+lzvVvddP17078wjbXv/M9xvjzzZ8+2jb+1Yhnt4yfbMRPtoifRsRbPca/8caXZ7brW/s44mhsHb8j6X5/ePjSZK060vrcMsZXRw+/2m3++7eJP9Zl/lnbbI/z/+Lbz59b7hL/xee7H/+t4u+LiHd7jH/o1ievb9eXxR/fZv7d4mdtN3uM/9LYkR963BUAAAAAAAAAAPgH0vVn2ZK0tFFO01Kp9Q7vk7E/rdUbzWOX6vMz461n3g5GMe08aTXUqidZfbT9PG6nfuK++smIOBQR7xX2rddLlXptvN+TBwAAAAAAAAAAAAAAAAAAgEfEgfve//+j0Hr/H8gJf/Ib8kv+Q37dm/9J38YB7D6//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74vy5c9m2dntlqZLVxy8vzE/VLx8frzamStPzlVKlPjdbmqjXJ2rVUqU+/Xf/X61enx2Jmfkrw81qozncWFi8OF2fn2lenJwuT1QvVou7MisAAAAAAAAAAAAAAAAAAAD4bxlc35K0FBHpejlNS6WI/0fEwSgmlyZr1ZGIeCIivi8U92b10X4PGgAAAAAAAAAAAAAAAAAAAB4zjYXFqXKtVp1T2FyIiOVHYBgKCn05+QEAAAAAAAAAAAAAAAAAgF1156Xffo8EAAAAAAAAAAAAAAAAAAAA8iz9OYmIbDs69MLg3T17I2JPslrIynsi4u0bFz64Um4250az9t822psftttP9GsOQC86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCOxsLiVLlWq87tYKHfcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EH8FAAD//46R2W8=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.23610989s ago: executing program 0 (id=2106): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9b30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "9806d1267c49cd76", "c442e6adcb511ad19648396c5352e18f", "6086c2ca", "b973738a82366fb2"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000040), 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) removexattr(0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="3105ae380ea344a393c2781351bfc39b12421dbf73c5a93424", @ANYRES8=r5, @ANYRESDEC=r4, @ANYRESDEC=r7, @ANYRESOCT=0x0, @ANYRESHEX], 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00', @ANYBLOB="56cb0ed42fb629413e18cdd4"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.86735014s ago: executing program 5 (id=2069): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffe17fafb76008080047"], 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = dup2(r3, r3) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) 1.634899198s ago: executing program 3 (id=2112): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.544503715s ago: executing program 3 (id=2113): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000003030103000000000000004005000004"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x21, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2a, 0x0, &(0x7f0000000000)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="280000ff1b3c00000000200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x9, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='cachefiles_prep_read\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0xa3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) write(r4, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r5, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x94) 1.543993506s ago: executing program 5 (id=2114): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9802", @ANYRES16, @ANYBLOB="000427bd7000fddbdf250e0000004c000680040002004100040067636d28616573290000000000000000000000000000000000000000000000001900000098bcfef104d88759f785cca438bb8cd96df3f0eff4a8c6c943000000a400028004000400140003800800020005000000080001eb25714250fe5f828693dc587a000400000008000100000800010098000000080001000500000008000200ff07000008004c00038008000200b10c000008000100000000000800010001001080080001007791000008000200fbffffff08000200be0000000800020008000000080001000800000008000200050000000400040004000400600007306bc20780080001000e000000080001000f000000080001001e000000080001001a00000014000780080001001b000000080003000900000024000780080003009acd000008000200a30300000800040000000000080003003cf9ffff7c0005801c0002800800020004000000080003000000000008000300040000004c000280080003000080000008000200ffff0000080003000100008008000200020000000800030001000000080003000900000008000400ed00000008000100140000000800040007000000080001007564700008000100756470001400038008000100040000000800030007000000440004801400078008000300dd33000008000300030000001300010062726f6164636173742d6c696e6b00000900010073797a31000000000c000780080001000b0000002400038008000100030000000800030007000000080002007b52000008000300020000003c000280040004002c0003800800010001010000080001000600000008000100010000000800010001000000080002000800000004"], 0x298}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0) (fail_nth: 1) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.373170019s ago: executing program 3 (id=2115): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) poll(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9802", @ANYRES16, @ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.064937294s ago: executing program 0 (id=2117): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = inotify_init1(0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x24000420) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x1000, 0xffffffff, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r9], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 871.567569ms ago: executing program 1 (id=2119): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') getpgrp(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 821.213704ms ago: executing program 3 (id=2121): io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r0, 0x4, 0x0, 0x0, 0x0) io_destroy(r0) 798.048095ms ago: executing program 1 (id=2122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="10000180"], 0x28}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x63, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='sched_process_wait\x00', r5, 0x0, 0x3ff}, 0x18) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f00000005c0)={{r8}, 0xa, &(0x7f0000000540)=[0xff19, 0xf59, 0x31388f5e, 0x8af, 0xffffffffffff8000, 0x9, 0x81, 0xce7, 0x1, 0x4], 0x7, 0x1, 0x1}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="22000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r9, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') readv(r11, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xf}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000000640)='GPL\x00', 0x7fff, 0x1000, &(0x7f0000001480)=""/4096, 0x40f00, 0x8, '\x00', r2, 0x1c, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48f9, r11, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, r10], 0x0, 0x10, 0x3}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r10, 0x0, 0x20}, 0x38) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20240, 0x0) ioctl$TUNSETFILTEREBPF(r12, 0x800454e1, &(0x7f00000000c0)) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000000200)={{{@in=@private}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r13, 0x12) 707.706093ms ago: executing program 1 (id=2123): syz_emit_ethernet(0xd6, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x2, 0xd, "5e000800ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4e, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x6, "02a20948"}, {0x5, 0x8, "118c5572ec3c"}, {0x1, 0xa, "ab87709c27e85763"}, {0x5, 0x8, "b7380597c9fe"}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) 688.615374ms ago: executing program 1 (id=2124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x2, 0x5, 0x28}}, @void}}]]}, 0x50}}, 0x0) 668.160956ms ago: executing program 1 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff", @ANYBLOB], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x4e27, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r0, r0, r0, r0, r0, 0x1, r0, r0, r0, r0], &(0x7f0000000540)=[{0x6, 0x4, 0xc, 0xa}, {0x0, 0x3, 0xb, 0x3}, {0x0, 0x2, 0xd}, {0x3, 0x2, 0xb, 0xa}, {0x2, 0x3, 0x8}, {0x4, 0x3, 0x9, 0x4}, {0x2, 0x1, 0x1, 0x6}, {0x2, 0x4, 0xe, 0x5}, {0x0, 0x5, 0x3, 0x4}, {0x5, 0x2, 0x3, 0x5}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x2e, 0xa6, &(0x7f0000000600)="c65040ec6dfe1ca4e98eeff8449c0604e35eab6a4c01d4de9ced58ff67c5fa72dea6f4c12332da026028488b4390", &(0x7f0000000780)=""/166, 0x9, 0x0, 0xc7, 0xd2, &(0x7f0000000840)="4e731ad2861af5d673113b2cc378efcde0c0965b19c15499494cc0fbc0784871aa1757a78b93a88993ee1f1bb774da221fb973f972dd360647790d512da99f819c742cc475d240cd229ccc79c18d357670bb2dc277af26911454fa58f1ac7c956c53d581b1d61ffea0f7f3cc000ccba43a545b2b1dc3f92831f132b3ca8dcd370ded69801dbebbcd9eff839c662a8a1f3b3ce6d139b0d21bd7c838d8b12fb8d57c89ada553388708d85c4208185a93d58fb1e97d61680610e4a836872459c3bcfaa095f403cb93", &(0x7f0000000940)="d608af032fb169eaf8f8d62397afd501830c3815bb9c21225a3adf26927915aff603d18065eb217ee0af4f4dcc1991f8d6ff3519b31ed745b040f8d7929401a1b77f530edd291108ba546523659bae56c8bd7153782876434cfd8b8c535bf49e8ef6bc128a5438952404b1a1c573c28d05a99baa15b316475c1e01b1f54fe715fb848c2d7456edd984cf5a681a9906fa091cc895e04fb688f26fb13ad65b0edeed5914561d1929544d6336ece494db89e792e125f91ed1b1f1cbc1d3fd2e1488a4715d552daf502a547a669296f5a1e55c8c", 0x0, 0x0, 0x80000000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x8, 0x0, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0xffffffff, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x100000003}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a3, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 595.038302ms ago: executing program 1 (id=2126): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x1, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f00000001c0)='./file0\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'dvmrp0\x00'}) listxattr(&(0x7f0000001cc0)='./bus\x00', 0x0, 0x0) 567.193544ms ago: executing program 5 (id=2127): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000180)={0x4, 0x8, 0x9, 0x7, 0x4, "6e92def7227c1389b2f77c1c6c2dd50c87ea64", 0x2, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r3 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000780)=[{&(0x7f0000001a40)=""/4090, 0xa74}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) dup3(r0, r0, 0x80000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r6, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3}, @void, @val={0xc, 0x99, {0x5, 0x73}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) lremovexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='user.incfs.size\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80231000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x54, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x28}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}}, 0x4081) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000240)=0x5, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES16=r7, @ANYRES16=r8], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) 566.662064ms ago: executing program 2 (id=2128): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 512.431089ms ago: executing program 0 (id=2129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000097000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 494.61579ms ago: executing program 3 (id=2130): getgroups(0x0, 0x0) r0 = socket(0x1, 0xa, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x0, 0x200000, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20048840}, 0x4001000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x4, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r8, &(0x7f0000000a80)={&(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}, 0x20040044) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@rand_addr=' \x01\x00', r6}, 0x14) 460.656252ms ago: executing program 0 (id=2131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x20, r1, 0x205, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810) 460.249262ms ago: executing program 2 (id=2132): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') getpgrp(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 443.518554ms ago: executing program 0 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 411.883756ms ago: executing program 2 (id=2134): r0 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x1000, 0xc, 0x288}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000440)="755839d85c4120d484", 0x9}], 0x1) mq_notify(r3, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_notify(r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) 366.9148ms ago: executing program 5 (id=2135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b70", 0xc8}, {&(0x7f0000000d80)="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", 0x386}], 0x2, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 366.64378ms ago: executing program 5 (id=2136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) 345.767201ms ago: executing program 2 (id=2137): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xd, 0xfe, &(0x7f00000000c0)="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"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='attr/current\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="e5", 0x1}], 0x1) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 317.712964ms ago: executing program 3 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0/file1\x00'}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={r5, 0x4}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) 258.001859ms ago: executing program 0 (id=2139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8581366}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x400cd}, 0x40) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fa000000", @ANYRES16=r2, @ANYBLOB="cd3e0000000002000000010000000800020005000000ce0001"], 0x114}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 253.001009ms ago: executing program 5 (id=2140): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = inotify_init1(0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x24000420) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x1000, 0xffffffff, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r9], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 93.026672ms ago: executing program 2 (id=2141): io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r0, 0x4, 0x0, 0x0, 0x0) io_destroy(r0) 0s ago: executing program 2 (id=2142): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x2a, 0x35a, &(0x7f0000000780)="$eJzs3T1onHUYAPDn+l5yaaEmoFB0Ot0EKW3EQV0SSgrFDFo5/Fo8bOpH7izk8CAZcs2iOCougk5uHXRw6CwOIm4OrlaQqrjYLdDiK3fvm7v3PtJG5VKLv98QHp7//7n///0g9ybknry6FOsXZuLijRvXY26uFOWlM0uxW4qFOBJJZC7HBOVJSQDgXrCbpvFHmrnz7A+P7UWzU94XADA9vff/148PEpW7uRsA4DAc8Of/ZydmL01tWwDAFO3GyPv/I0PDI7/mL/f/JgAAuHc9/9LLzyyvRpyvVucimu+1a+1aPDUYX74Yb0Yj1uJUzMetiOxBIXta6H49e2515VS165eFqHUr2rWIZqddy54UlpNefSVOx3ws5PVpvz45O7e6crpXX42Iy53e+tEstWszcSxf/8djsRaLMR8PjNVHnFtdWazmL1Br7tV3InZibu8guvs/GfPx/WtxKRpxIbq1g/1vn65Wz6SrQ/XtK5XePAAAAAAAAAAAAAAAAAAAAAAAmIaT1b6Ffv+btNlpv3t+dMJC1I4U+vtkw3l/oJ2sP1Ba2evO834y2h9ouD9Pu1aOI3f1yAEAAAAAAAAAAAAAAAAAAOC/o7U5G/VGY22jtbm1Xgw6hczb337+9dEYnfNWMshEOXu5oTl5LgpVSfTL0355mgzNyYMkYjD5ytX+jotzKv2j2NprJlB8nUo2VMiU8j3VG43jD//8ydiim1vrfw4ySYydluGgNL5o874sdZuq/YPFO8y5lqbpfuXbH29urc/E0OpRiiiPXbh/E8zmwTfX33jw8daJJ3pDX+VNHx59bP6Fax999tt6vRH5qWk0Zjdat9J/slZkl2Bwb5Ty81yacCdMDnYGmZ2N1mY9+eH3Fx/64LuRyUlMLE+LmXf2X+uL0cxsFnS3uXF/drPdbqszE27+CcHTX9Zfudm/e//+FTzx6VL96vZPvx60qvBNQqMOAAAAAAAAAAAAAAAAAAA4FIWPWx9I9tnrJ5+b7q4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HAN/v9/IdgZyxwkuNmJ8aHK2kZr38WPHuqhAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/ZXAAAA//+XsmyE") (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x8004) (async) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') (async) lchown(0x0, 0x0, 0xee01) kernel console output (not intermixed with test programs): d promiscuous mode [ 64.773152][ T5359] syzkaller0: entered allmulticast mode [ 64.797489][ T5361] tipc: Enabled bearer , priority 0 [ 64.814150][ T5361] tipc: Resetting bearer [ 64.827409][ T5360] tipc: Disabling bearer [ 64.952873][ T5363] loop4: detected capacity change from 0 to 8192 [ 64.962858][ T5368] 9pnet_fd: Insufficient options for proto=fd [ 65.093605][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.103770][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.144840][ T5387] loop3: detected capacity change from 0 to 8192 [ 65.152851][ T5387] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.274573][ T5393] netlink: 'syz.2.775': attribute type 27 has an invalid length. [ 65.293207][ T5393] $Hÿ: left promiscuous mode [ 65.298078][ T5393] bond_slave_0: left promiscuous mode [ 65.303673][ T5393] bond_slave_1: left promiscuous mode [ 65.318530][ T5391] netlink: 14 bytes leftover after parsing attributes in process `syz.3.773'. [ 65.397310][ T5395] 9pnet_fd: Insufficient options for proto=fd [ 65.691149][ T5401] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 65.850105][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 66.054576][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 66.335077][ T5426] lo speed is unknown, defaulting to 1000 [ 66.496183][ T5425] 9pnet_fd: Insufficient options for proto=fd [ 67.241210][ T5456] netlink: 14 bytes leftover after parsing attributes in process `syz.1.794'. [ 67.479013][ T5458] netlink: 14 bytes leftover after parsing attributes in process `syz.0.795'. [ 67.644228][ T5463] loop3: detected capacity change from 0 to 512 [ 67.657978][ T5463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.666556][ T5463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.676582][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 67.676598][ T29] audit: type=1326 audit(1754636610.761:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 67.706088][ T29] audit: type=1326 audit(1754636610.761:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff480d9d550 code=0x7ffc0000 [ 67.729510][ T29] audit: type=1326 audit(1754636610.761:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 67.739412][ T5465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.752910][ T29] audit: type=1326 audit(1754636610.761:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 67.761569][ T5465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.784469][ T29] audit: type=1326 audit(1754636610.761:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 67.815454][ T29] audit: type=1326 audit(1754636610.761:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 67.838668][ T29] audit: type=1326 audit(1754636610.761:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 67.861981][ T29] audit: type=1326 audit(1754636610.761:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 67.885293][ T29] audit: type=1326 audit(1754636610.761:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 67.908625][ T29] audit: type=1326 audit(1754636610.761:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5462 comm="syz.3.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff480d9d550 code=0x7ffc0000 [ 68.049957][ T5475] syzkaller0: entered promiscuous mode [ 68.055458][ T5475] syzkaller0: entered allmulticast mode [ 68.068336][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 68.435723][ T5490] random: crng reseeded on system resumption [ 68.493824][ T5496] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 68.807517][ T5509] loop4: detected capacity change from 0 to 512 [ 68.818095][ T5509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.826787][ T5509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.858335][ T5511] syz1: rxe_newlink: already configured on veth0_to_bridge [ 69.136592][ T5521] random: crng reseeded on system resumption [ 69.228520][ T5533] tipc: Enabled bearer , priority 0 [ 69.236014][ T5533] syzkaller0: entered promiscuous mode [ 69.241613][ T5533] syzkaller0: entered allmulticast mode [ 69.252196][ T5533] tipc: Resetting bearer [ 69.300622][ T5532] tipc: Resetting bearer [ 69.307111][ T5532] tipc: Disabling bearer [ 69.469589][ T5555] syzkaller0: entered promiscuous mode [ 69.475294][ T5555] syzkaller0: entered allmulticast mode [ 69.493211][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.501734][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.588564][ T5566] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 69.783197][ T5577] 9pnet_fd: Insufficient options for proto=fd [ 70.124755][ T5596] syzkaller0: entered promiscuous mode [ 70.130327][ T5596] syzkaller0: entered allmulticast mode [ 70.154345][ T5600] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 70.276464][ T5602] netlink: 14 bytes leftover after parsing attributes in process `syz.0.855'. [ 70.636635][ T5618] loop3: detected capacity change from 0 to 164 [ 70.665039][ T5618] Unable to read rock-ridge attributes [ 70.674739][ T5618] Unable to read rock-ridge attributes [ 70.681276][ T5620] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 70.838636][ T5633] loop3: detected capacity change from 0 to 164 [ 70.846517][ T5633] Unable to read rock-ridge attributes [ 70.868826][ T5629] 9pnet_fd: Insufficient options for proto=fd [ 70.926191][ T5643] syzkaller0: entered promiscuous mode [ 70.931821][ T5643] syzkaller0: entered allmulticast mode [ 71.052486][ T5654] loop3: detected capacity change from 0 to 512 [ 71.066688][ T5654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.075250][ T5654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.142382][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 71.151422][ T5661] $Hÿ: entered promiscuous mode [ 71.156465][ T5661] bond_slave_0: entered promiscuous mode [ 71.162345][ T5661] bond_slave_1: entered promiscuous mode [ 71.200713][ T5660] 9pnet_fd: Insufficient options for proto=fd [ 71.272813][ T5669] netlink: 'syz.2.890': attribute type 27 has an invalid length. [ 71.290027][ T5669] $Hÿ: left promiscuous mode [ 71.294857][ T5669] bond_slave_0: left promiscuous mode [ 71.300683][ T5669] bond_slave_1: left promiscuous mode [ 71.374183][ T5681] netlink: 'syz.0.896': attribute type 27 has an invalid length. [ 71.445232][ T5681] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 71.462331][ T5681] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.471949][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 71.504102][ T5684] 9pnet_fd: Insufficient options for proto=fd [ 71.534607][ T5681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.656806][ T5688] 9pnet_fd: Insufficient options for proto=fd [ 71.753433][ T5695] random: crng reseeded on system resumption [ 72.085817][ T5715] 9pnet_fd: Insufficient options for proto=fd [ 72.277292][ T5727] random: crng reseeded on system resumption [ 72.314379][ T5730] netlink: 222 bytes leftover after parsing attributes in process `syz.3.916'. [ 72.620526][ T5750] 9pnet_fd: Insufficient options for proto=fd [ 72.697030][ T5766] netlink: 222 bytes leftover after parsing attributes in process `syz.4.932'. [ 72.722038][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 72.752298][ T5769] random: crng reseeded on system resumption [ 72.976240][ T5787] tipc: Enabled bearer , priority 0 [ 72.995913][ T5787] syzkaller0: entered promiscuous mode [ 73.001449][ T5787] syzkaller0: entered allmulticast mode [ 73.012116][ T5786] tipc: Resetting bearer [ 73.027496][ T5786] tipc: Disabling bearer [ 73.245278][ T5802] loop3: detected capacity change from 0 to 8192 [ 73.322409][ T5802] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.646629][ T5821] netlink: 14 bytes leftover after parsing attributes in process `syz.3.950'. [ 74.084009][ T5841] loop4: detected capacity change from 0 to 512 [ 74.137977][ T5841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.206724][ T5854] $Hÿ: entered promiscuous mode [ 74.211957][ T5854] bond_slave_0: entered promiscuous mode [ 74.217699][ T5854] bond_slave_1: entered promiscuous mode [ 74.271541][ T5863] random: crng reseeded on system resumption [ 74.372266][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 74.372284][ T29] audit: type=1326 audit(1754636617.461:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 74.401753][ T29] audit: type=1326 audit(1754636617.461:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 74.425066][ T29] audit: type=1326 audit(1754636617.461:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 74.442079][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 74.448445][ T29] audit: type=1326 audit(1754636617.461:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 74.480544][ T29] audit: type=1326 audit(1754636617.461:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 74.503841][ T29] audit: type=1326 audit(1754636617.461:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 74.527676][ T29] audit: type=1326 audit(1754636617.461:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 74.559877][ T29] audit: type=1326 audit(1754636617.571:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 74.583350][ T29] audit: type=1326 audit(1754636617.571:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 74.597769][ T5872] random: crng reseeded on system resumption [ 74.835577][ T5886] loop3: detected capacity change from 0 to 2048 [ 74.851040][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.929805][ T5889] lo speed is unknown, defaulting to 1000 [ 75.027089][ T5886] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.094747][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.188447][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 75.304445][ T5894] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 75.329129][ T29] audit: type=1326 audit(1754636618.431:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5901 comm="syz.0.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 75.423353][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.454754][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.463316][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.471859][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.718243][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.773690][ T5918] loop3: detected capacity change from 0 to 164 [ 75.781065][ T5918] Unable to read rock-ridge attributes [ 75.788118][ T5918] Unable to read rock-ridge attributes [ 75.852049][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 75.951307][ T5922] loop4: detected capacity change from 0 to 8192 [ 75.958657][ T5922] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.080852][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 76.155529][ T5932] syz1: rxe_newlink: already configured on veth0_to_bridge [ 76.252060][ T5934] netlink: 14 bytes leftover after parsing attributes in process `syz.4.992'. [ 76.759033][ T5938] lo speed is unknown, defaulting to 1000 [ 77.276622][ T5947] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 77.362672][ T5954] loop2: detected capacity change from 0 to 164 [ 77.370025][ T5954] Unable to read rock-ridge attributes [ 77.376175][ T5954] Unable to read rock-ridge attributes [ 77.464221][ T5958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.473225][ T5958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.497478][ T5958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.508363][ T5958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.613816][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 77.618986][ T5970] 9pnet_fd: Insufficient options for proto=fd [ 77.881765][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 77.987074][ T5990] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 78.177555][ T5994] 9pnet_fd: Insufficient options for proto=fd [ 78.339909][ T6002] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1019'. [ 78.459405][ T6004] netlink: 'syz.2.1025': attribute type 27 has an invalid length. [ 78.582744][ T6004] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 78.645789][ T6004] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.662565][ T6004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.708186][ T6013] $Hÿ: entered promiscuous mode [ 78.713358][ T6013] bond_slave_0: entered promiscuous mode [ 78.719112][ T6013] bond_slave_1: entered promiscuous mode [ 78.896179][ T6024] loop3: detected capacity change from 0 to 512 [ 78.920408][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.929311][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.941535][ T6025] 9pnet_fd: Insufficient options for proto=fd [ 79.716426][ T6044] netlink: 'syz.2.1042': attribute type 27 has an invalid length. [ 79.904452][ T6047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.012383][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 80.062529][ T6053] 9pnet_fd: Insufficient options for proto=fd [ 80.317092][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 80.330726][ T6063] random: crng reseeded on system resumption [ 80.447418][ T6067] lo speed is unknown, defaulting to 1000 [ 80.955436][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 81.251174][ T6079] 9pnet_fd: Insufficient options for proto=fd [ 81.467701][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 81.467718][ T29] audit: type=1326 audit(1754636624.561:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.4.1054" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd18765ebe9 code=0x0 [ 81.522417][ T29] audit: type=1400 audit(1754636624.631:2005): avc: denied { bind } for pid=6087 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.546931][ T29] audit: type=1400 audit(1754636624.631:2006): avc: denied { setopt } for pid=6087 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.694910][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 81.715264][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 81.757921][ T29] audit: type=1326 audit(1754636624.861:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 81.799827][ T29] audit: type=1326 audit(1754636624.861:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 81.823408][ T29] audit: type=1326 audit(1754636624.861:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 81.846805][ T29] audit: type=1326 audit(1754636624.861:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 81.870236][ T29] audit: type=1326 audit(1754636624.861:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 81.893738][ T29] audit: type=1326 audit(1754636624.861:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 81.917229][ T29] audit: type=1326 audit(1754636624.861:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 81.975308][ T6122] $Hÿ: entered promiscuous mode [ 81.980446][ T6122] bond_slave_0: entered promiscuous mode [ 81.986183][ T6122] bond_slave_1: entered promiscuous mode [ 82.048190][ T6129] syzkaller0: entered promiscuous mode [ 82.053769][ T6129] syzkaller0: entered allmulticast mode [ 82.186543][ T6144] FAULT_INJECTION: forcing a failure. [ 82.186543][ T6144] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.199700][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.0.1075 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 82.199739][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.199760][ T6144] Call Trace: [ 82.199767][ T6144] [ 82.199775][ T6144] __dump_stack+0x1d/0x30 [ 82.199795][ T6144] dump_stack_lvl+0xe8/0x140 [ 82.199814][ T6144] dump_stack+0x15/0x1b [ 82.199868][ T6144] should_fail_ex+0x265/0x280 [ 82.199901][ T6144] should_fail+0xb/0x20 [ 82.199965][ T6144] should_fail_usercopy+0x1a/0x20 [ 82.199986][ T6144] _copy_from_user+0x1c/0xb0 [ 82.200011][ T6144] get_timespec64+0x4c/0x100 [ 82.200030][ T6144] __x64_sys_recvmmsg+0xa3/0x170 [ 82.200087][ T6144] x64_sys_call+0x27a6/0x2ff0 [ 82.200112][ T6144] do_syscall_64+0xd2/0x200 [ 82.200140][ T6144] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.200174][ T6144] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.200199][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.200270][ T6144] RIP: 0033:0x7f887f85ebe9 [ 82.200333][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.200350][ T6144] RSP: 002b:00007f887e2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 82.200446][ T6144] RAX: ffffffffffffffda RBX: 00007f887fa85fa0 RCX: 00007f887f85ebe9 [ 82.200459][ T6144] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 82.200472][ T6144] RBP: 00007f887e2bf090 R08: 0000200000003700 R09: 0000000000000000 [ 82.200483][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.200496][ T6144] R13: 00007f887fa86038 R14: 00007f887fa85fa0 R15: 00007ffea5c19538 [ 82.200516][ T6144] [ 82.430476][ T6153] loop4: detected capacity change from 0 to 512 [ 82.451019][ T6151] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 82.460041][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.477876][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.613108][ T6163] ip6gre1: entered allmulticast mode [ 83.048850][ T6171] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1085'. [ 83.202728][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.257024][ T6181] loop4: detected capacity change from 0 to 512 [ 83.410433][ T6181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.578887][ T6192] FAULT_INJECTION: forcing a failure. [ 83.578887][ T6192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.592043][ T6192] CPU: 0 UID: 0 PID: 6192 Comm: syz.3.1092 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 83.592073][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.592114][ T6192] Call Trace: [ 83.592119][ T6192] [ 83.592127][ T6192] __dump_stack+0x1d/0x30 [ 83.592146][ T6192] dump_stack_lvl+0xe8/0x140 [ 83.592208][ T6192] dump_stack+0x15/0x1b [ 83.592226][ T6192] should_fail_ex+0x265/0x280 [ 83.592256][ T6192] should_fail+0xb/0x20 [ 83.592286][ T6192] should_fail_usercopy+0x1a/0x20 [ 83.592364][ T6192] _copy_from_user+0x1c/0xb0 [ 83.592388][ T6192] __se_sys_io_uring_setup+0x11f/0x210 [ 83.592428][ T6192] __x64_sys_io_uring_setup+0x31/0x40 [ 83.592502][ T6192] x64_sys_call+0x2b21/0x2ff0 [ 83.592525][ T6192] do_syscall_64+0xd2/0x200 [ 83.592553][ T6192] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.592581][ T6192] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.592602][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.592692][ T6192] RIP: 0033:0x7ff480d9ebe9 [ 83.592728][ T6192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.592747][ T6192] RSP: 002b:00007ff47f7c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 83.592766][ T6192] RAX: ffffffffffffffda RBX: 00007ff480fc6180 RCX: 00007ff480d9ebe9 [ 83.592778][ T6192] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 00000000000028fe [ 83.592789][ T6192] RBP: 00007ff47f7c5090 R08: 0000000000000000 R09: 0000000000000000 [ 83.592801][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.592845][ T6192] R13: 00007ff480fc6218 R14: 00007ff480fc6180 R15: 00007ffc85534088 [ 83.592865][ T6192] [ 83.812907][ T6181] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.054543][ T6194] lo speed is unknown, defaulting to 1000 [ 84.187988][ T6181] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #12: comm syz.4.1091: corrupted xattr block 6: invalid header [ 84.210144][ T6196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6196 comm=syz.0.1095 [ 84.262807][ T6181] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 84.332161][ T6198] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #12: comm syz.4.1091: corrupted xattr block 6: invalid header [ 84.359811][ T6181] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #12: comm syz.4.1091: corrupted xattr block 6: invalid header [ 84.362219][ T6200] lo speed is unknown, defaulting to 1000 [ 84.374146][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 84.404392][ T6198] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 84.414523][ T6198] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #12: comm syz.4.1091: corrupted xattr block 6: invalid header [ 84.442748][ T6196] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1095'. [ 84.452137][ T6181] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 84.479862][ T6181] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1091: Failed to acquire dquot type 0 [ 84.495571][ T6198] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 84.549354][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 84.664133][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.195224][ T6248] loop4: detected capacity change from 0 to 8192 [ 85.214308][ T6248] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.414942][ T6255] lo speed is unknown, defaulting to 1000 [ 85.880879][ T6248] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1105'. [ 86.128187][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.139794][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.148307][ T6278] loop2: detected capacity change from 0 to 2048 [ 86.156990][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.165974][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.189613][ T6284] tipc: Enabled bearer , priority 0 [ 86.211537][ T6278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.227462][ T6283] tipc: Disabling bearer [ 86.248375][ T6278] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.260388][ T6285] $Hÿ: entered promiscuous mode [ 86.265424][ T6285] bond_slave_0: entered promiscuous mode [ 86.271213][ T6285] bond_slave_1: entered promiscuous mode [ 86.324539][ T6292] tipc: Enabled bearer , priority 0 [ 86.346557][ T6291] tipc: Disabling bearer [ 86.589932][ T6297] Falling back ldisc for ttyS3. [ 86.752227][ T6314] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1138'. [ 86.763489][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 86.763503][ T29] audit: type=1400 audit(1754636629.871:2143): avc: denied { cpu } for pid=6317 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.801364][ T29] audit: type=1400 audit(1754636629.911:2144): avc: denied { write } for pid=6317 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 87.004079][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.053609][ T6321] loop3: detected capacity change from 0 to 8192 [ 87.066735][ T6327] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 87.074260][ T29] audit: type=1400 audit(1754636630.181:2145): avc: denied { setopt } for pid=6328 comm="syz.4.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.456923][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.509823][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.519030][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.527727][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.726735][ T6354] loop2: detected capacity change from 0 to 2048 [ 87.762045][ T6354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.794287][ T6354] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.978846][ T6364] loop3: detected capacity change from 0 to 8192 [ 87.989122][ T6364] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.257104][ T6377] random: crng reseeded on system resumption [ 88.378386][ T6379] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1157'. [ 88.434797][ T6382] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1160'. [ 88.692710][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.722749][ T6388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.731343][ T29] audit: type=1326 audit(1754636631.821:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 88.755177][ T29] audit: type=1326 audit(1754636631.821:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 88.778624][ T29] audit: type=1326 audit(1754636631.821:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f887f85d550 code=0x7ffc0000 [ 88.802092][ T29] audit: type=1326 audit(1754636631.821:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 88.825543][ T29] audit: type=1326 audit(1754636631.821:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 88.849043][ T29] audit: type=1326 audit(1754636631.821:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 88.872429][ T29] audit: type=1326 audit(1754636631.821:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 88.941676][ T6388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.987779][ T6396] loop3: detected capacity change from 0 to 164 [ 88.995142][ T6396] Unable to read rock-ridge attributes [ 89.002220][ T6396] Unable to read rock-ridge attributes [ 89.082664][ T6397] loop4: detected capacity change from 0 to 8192 [ 89.194028][ T6413] random: crng reseeded on system resumption [ 89.776792][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 90.464989][ T6444] loop4: detected capacity change from 0 to 8192 [ 90.617159][ T6444] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.816531][ T6458] loop2: detected capacity change from 0 to 8192 [ 90.912114][ T6462] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1184'. [ 91.267175][ T6460] debugfs: 'netdev@ffff888119bae550' already exists in 'ref_tracker' [ 91.415450][ T6472] random: crng reseeded on system resumption [ 91.516533][ T6480] loop4: detected capacity change from 0 to 8192 [ 91.524710][ T6480] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.700801][ T6491] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1196'. [ 91.743895][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 92.219879][ T6515] syz1: rxe_newlink: already configured on veth0_to_bridge [ 92.227422][ T6509] loop3: detected capacity change from 0 to 8192 [ 92.362194][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 92.362214][ T29] audit: type=1326 audit(1754636635.471:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 92.392315][ T29] audit: type=1326 audit(1754636635.471:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 92.393505][ T6518] tap0: tun_chr_ioctl cmd 1074025675 [ 92.415805][ T29] audit: type=1326 audit(1754636635.471:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 92.421090][ T6518] tap0: persist enabled [ 92.444414][ T29] audit: type=1326 audit(1754636635.471:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 92.472054][ T29] audit: type=1326 audit(1754636635.471:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 92.495523][ T29] audit: type=1326 audit(1754636635.471:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 92.518942][ T29] audit: type=1326 audit(1754636635.471:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 92.542370][ T29] audit: type=1326 audit(1754636635.471:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd18765d69f code=0x7ffc0000 [ 92.565582][ T29] audit: type=1326 audit(1754636635.471:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 92.588986][ T29] audit: type=1326 audit(1754636635.471:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 92.630343][ T6518] tap0: tun_chr_ioctl cmd 1074025675 [ 92.635722][ T6518] tap0: persist disabled [ 92.771561][ T6529] lo speed is unknown, defaulting to 1000 [ 92.778224][ T6529] lo speed is unknown, defaulting to 1000 [ 92.789362][ T6529] lo speed is unknown, defaulting to 1000 [ 92.844721][ T6529] infiniband sz1: set active [ 92.849443][ T6529] infiniband sz1: added lo [ 92.854116][ T10] lo speed is unknown, defaulting to 1000 [ 93.001266][ T6518] loop4: detected capacity change from 0 to 128 [ 93.008067][ T6518] msdos: Bad value for 'fmask' [ 93.014595][ T6529] RDS/IB: sz1: added [ 93.018658][ T6529] smc: adding ib device sz1 with port count 1 [ 93.026082][ T6529] smc: ib device sz1 port 1 has pnetid [ 93.032056][ T10] lo speed is unknown, defaulting to 1000 [ 93.038276][ T6529] lo speed is unknown, defaulting to 1000 [ 93.074408][ T6529] lo speed is unknown, defaulting to 1000 [ 93.110526][ T6529] lo speed is unknown, defaulting to 1000 [ 93.210587][ T6529] lo speed is unknown, defaulting to 1000 [ 93.228164][ T6542] loop3: detected capacity change from 0 to 8192 [ 93.239558][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 93.277331][ T6542] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.451293][ T6544] loop2: detected capacity change from 0 to 8192 [ 93.565740][ T6552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1221'. [ 93.622273][ T6529] lo speed is unknown, defaulting to 1000 [ 94.343218][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 94.519151][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.547517][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.570544][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.587578][ T6567] random: crng reseeded on system resumption [ 94.596905][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.648336][ T6569] random: crng reseeded on system resumption [ 94.731712][ T6571] 9pnet_fd: Insufficient options for proto=fd [ 94.855316][ T6577] loop3: detected capacity change from 0 to 8192 [ 95.006322][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 95.289443][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1239'. [ 96.037945][ T6610] syzkaller0: entered promiscuous mode [ 96.043572][ T6610] syzkaller0: entered allmulticast mode [ 96.161172][ T6612] tipc: Enabling of bearer rejected, failed to enable media [ 96.179374][ T6612] syzkaller0: entered promiscuous mode [ 96.185019][ T6612] syzkaller0: entered allmulticast mode [ 96.196584][ T6616] loop4: detected capacity change from 0 to 164 [ 96.216977][ T6616] Unable to read rock-ridge attributes [ 96.237278][ T6616] Unable to read rock-ridge attributes [ 96.532840][ T6629] lo speed is unknown, defaulting to 1000 [ 96.566242][ T6629] lo speed is unknown, defaulting to 1000 [ 96.631832][ T6640] loop2: detected capacity change from 0 to 512 [ 96.645312][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.654986][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.678045][ T6644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1259'. [ 97.102067][ T6657] netlink: 'syz.3.1264': attribute type 27 has an invalid length. [ 97.120991][ T6657] $Hÿ: left promiscuous mode [ 97.125795][ T6657] bond_slave_0: left promiscuous mode [ 97.131258][ T6657] bond_slave_1: left promiscuous mode [ 97.158970][ T6657] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 97.166987][ T6657] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.191016][ T6657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.393322][ T6665] syzkaller0: entered promiscuous mode [ 97.398827][ T6665] syzkaller0: entered allmulticast mode [ 97.418414][ T6668] random: crng reseeded on system resumption [ 97.646078][ T6676] lo speed is unknown, defaulting to 1000 [ 97.697824][ T6676] lo speed is unknown, defaulting to 1000 [ 97.882712][ T6683] loop4: detected capacity change from 0 to 512 [ 97.903379][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 97.903454][ T29] audit: type=1326 audit(1754636641.011:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 97.933103][ T29] audit: type=1326 audit(1754636641.011:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd18765d550 code=0x7ffc0000 [ 97.956833][ T29] audit: type=1326 audit(1754636641.011:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 97.957638][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.980232][ T29] audit: type=1326 audit(1754636641.011:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 98.012209][ T29] audit: type=1326 audit(1754636641.121:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 98.029136][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.035715][ T29] audit: type=1326 audit(1754636641.121:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 98.088607][ T29] audit: type=1326 audit(1754636641.191:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 98.112028][ T29] audit: type=1326 audit(1754636641.191:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 98.182699][ T29] audit: type=1326 audit(1754636641.281:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 98.206236][ T29] audit: type=1326 audit(1754636641.281:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 98.218306][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1281'. [ 98.243198][ T6698] macsec1: entered allmulticast mode [ 98.248616][ T6698] bridge0: entered allmulticast mode [ 98.254759][ T6698] bridge0: port 3(macsec1) entered blocking state [ 98.261347][ T6698] bridge0: port 3(macsec1) entered disabled state [ 98.269233][ T6698] bridge0: left allmulticast mode [ 98.296841][ T6695] lo speed is unknown, defaulting to 1000 [ 98.331617][ T6695] lo speed is unknown, defaulting to 1000 [ 98.406601][ T6705] random: crng reseeded on system resumption [ 98.513819][ T6709] loop3: detected capacity change from 0 to 164 [ 98.531195][ T6709] Unable to read rock-ridge attributes [ 98.583623][ T6709] Unable to read rock-ridge attributes [ 99.011558][ T6731] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1294'. [ 99.078914][ T6732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6732 comm=syz.1.1294 [ 99.158691][ T6750] loop4: detected capacity change from 0 to 512 [ 99.172256][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.180968][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.357282][ T6754] lo speed is unknown, defaulting to 1000 [ 99.375621][ T6758] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1306'. [ 99.391546][ T6754] lo speed is unknown, defaulting to 1000 [ 99.666177][ T6776] loop2: detected capacity change from 0 to 8192 [ 99.731983][ T6782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1317'. [ 99.759514][ T6780] 9pnet_fd: Insufficient options for proto=fd [ 99.847144][ T6795] random: crng reseeded on system resumption [ 99.922754][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1327'. [ 100.008390][ T6813] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1331'. [ 100.096941][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 100.124466][ T6821] bridge0: entered promiscuous mode [ 100.129885][ T6821] macsec1: entered allmulticast mode [ 100.134382][ T6823] random: crng reseeded on system resumption [ 100.135231][ T6821] bridge0: entered allmulticast mode [ 100.135709][ T6821] bridge0: port 3(macsec1) entered blocking state [ 100.153206][ T6821] bridge0: port 3(macsec1) entered disabled state [ 100.174480][ T6821] bridge0: left allmulticast mode [ 100.179558][ T6821] bridge0: left promiscuous mode [ 100.260065][ T6829] tipc: Enabling of bearer rejected, failed to enable media [ 100.269518][ T6829] syzkaller0: entered promiscuous mode [ 100.275032][ T6829] syzkaller0: entered allmulticast mode [ 100.359426][ T6835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1342'. [ 100.595778][ T6850] lo speed is unknown, defaulting to 1000 [ 100.630043][ T6850] lo speed is unknown, defaulting to 1000 [ 100.723483][ T6861] tap0: tun_chr_ioctl cmd 1074025675 [ 100.728810][ T6861] tap0: persist enabled [ 100.734609][ T6861] tap0: tun_chr_ioctl cmd 1074025675 [ 100.739947][ T6861] tap0: persist disabled [ 100.812987][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.821859][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.832477][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.841300][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.866722][ T6861] sz1: rxe_newlink: already configured on lo [ 100.948471][ T6872] loop4: detected capacity change from 0 to 164 [ 100.955493][ T6872] Unable to read rock-ridge attributes [ 100.962395][ T6872] Unable to read rock-ridge attributes [ 101.498647][ T6928] 9pnet_virtio: no channels available for device 127.0.0.1 [ 101.597735][ T6943] FAULT_INJECTION: forcing a failure. [ 101.597735][ T6943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.610951][ T6943] CPU: 1 UID: 0 PID: 6943 Comm: syz.4.1386 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 101.610985][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.611064][ T6943] Call Trace: [ 101.611071][ T6943] [ 101.611079][ T6943] __dump_stack+0x1d/0x30 [ 101.611103][ T6943] dump_stack_lvl+0xe8/0x140 [ 101.611124][ T6943] dump_stack+0x15/0x1b [ 101.611142][ T6943] should_fail_ex+0x265/0x280 [ 101.611175][ T6943] should_fail+0xb/0x20 [ 101.611257][ T6943] should_fail_usercopy+0x1a/0x20 [ 101.611276][ T6943] _copy_from_user+0x1c/0xb0 [ 101.611320][ T6943] br_ioctl_stub+0x1f0/0x860 [ 101.611383][ T6943] ? ioctl_has_perm+0x257/0x2a0 [ 101.611408][ T6943] ? __pfx_br_ioctl_stub+0x10/0x10 [ 101.611427][ T6943] sock_ioctl+0x39c/0x610 [ 101.611449][ T6943] ? __pfx_sock_ioctl+0x10/0x10 [ 101.611540][ T6943] __se_sys_ioctl+0xcb/0x140 [ 101.611667][ T6943] __x64_sys_ioctl+0x43/0x50 [ 101.611696][ T6943] x64_sys_call+0x1816/0x2ff0 [ 101.611716][ T6943] do_syscall_64+0xd2/0x200 [ 101.611741][ T6943] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.611837][ T6943] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.611859][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.611910][ T6943] RIP: 0033:0x7fd18765ebe9 [ 101.611953][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.611972][ T6943] RSP: 002b:00007fd1860c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.612013][ T6943] RAX: ffffffffffffffda RBX: 00007fd187885fa0 RCX: 00007fd18765ebe9 [ 101.612025][ T6943] RDX: 0000200000000080 RSI: 00000000000089a0 RDI: 0000000000000007 [ 101.612079][ T6943] RBP: 00007fd1860c7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.612094][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.612106][ T6943] R13: 00007fd187886038 R14: 00007fd187885fa0 R15: 00007fffa94d16a8 [ 101.612125][ T6943] [ 101.831234][ T6945] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1387'. [ 101.877142][ T6950] lo speed is unknown, defaulting to 1000 [ 101.911022][ T6950] lo speed is unknown, defaulting to 1000 [ 102.106200][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 102.175804][ T6966] random: crng reseeded on system resumption [ 102.218499][ T6972] tap0: tun_chr_ioctl cmd 1074025675 [ 102.223876][ T6972] tap0: persist enabled [ 102.228856][ T6972] tap0: tun_chr_ioctl cmd 1074025675 [ 102.234276][ T6972] tap0: persist disabled [ 102.352880][ T6979] rdma_rxe: rxe_newlink: failed to add lo [ 102.446100][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 102.468434][ T6988] bridge0: entered promiscuous mode [ 102.490342][ T6988] macsec1: entered allmulticast mode [ 102.495659][ T6988] bridge0: entered allmulticast mode [ 102.499703][ T6972] rdma_rxe: rxe_newlink: failed to add lo [ 102.512610][ T6988] bridge0: port 3(macsec1) entered blocking state [ 102.519643][ T6988] bridge0: port 3(macsec1) entered disabled state [ 102.531049][ T6988] bridge0: left allmulticast mode [ 102.536112][ T6988] bridge0: left promiscuous mode [ 102.558396][ T7000] random: crng reseeded on system resumption [ 102.625741][ T7006] bridge0: entered promiscuous mode [ 102.639804][ T7006] macsec1: entered allmulticast mode [ 102.645178][ T7006] bridge0: entered allmulticast mode [ 102.661490][ T7006] bridge0: port 3(macsec1) entered blocking state [ 102.668053][ T7006] bridge0: port 3(macsec1) entered disabled state [ 102.718710][ T7006] bridge0: left allmulticast mode [ 102.724192][ T7006] bridge0: left promiscuous mode [ 103.097771][ T7046] syz1: rxe_newlink: already configured on veth0_to_bridge [ 103.125115][ T7051] loop2: detected capacity change from 0 to 164 [ 103.132614][ T7051] Unable to read rock-ridge attributes [ 103.140978][ T7051] Unable to read rock-ridge attributes [ 103.238094][ T7070] macsec1: entered allmulticast mode [ 103.243586][ T7070] bridge0: entered allmulticast mode [ 103.249505][ T7070] bridge0: port 3(macsec1) entered blocking state [ 103.256093][ T7070] bridge0: port 3(macsec1) entered disabled state [ 103.265043][ T7070] bridge0: left allmulticast mode [ 103.384637][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 103.384652][ T29] audit: type=1326 audit(1754636646.491:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7083 comm="syz.2.1448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f272d2aebe9 code=0x0 [ 103.471249][ T7091] loop4: detected capacity change from 0 to 164 [ 103.478436][ T7091] Unable to read rock-ridge attributes [ 103.485746][ T7091] Unable to read rock-ridge attributes [ 103.601804][ T29] audit: type=1326 audit(1754636646.711:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 103.608886][ T7108] tap0: tun_chr_ioctl cmd 1074025675 [ 103.625433][ T29] audit: type=1326 audit(1754636646.711:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 103.625459][ T29] audit: type=1326 audit(1754636646.711:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 103.630776][ T7108] tap0: persist enabled [ 103.654147][ T29] audit: type=1326 audit(1754636646.711:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 103.789960][ T7108] tap0: tun_chr_ioctl cmd 1074025675 [ 103.795293][ T7108] tap0: persist disabled [ 103.828386][ T29] audit: type=1326 audit(1754636646.711:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 103.851827][ T29] audit: type=1326 audit(1754636646.711:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 103.875211][ T29] audit: type=1326 audit(1754636646.711:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 103.898641][ T29] audit: type=1326 audit(1754636646.711:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 103.922020][ T29] audit: type=1326 audit(1754636646.711:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd18765d69f code=0x7ffc0000 [ 104.097171][ T7108] sz1: rxe_newlink: already configured on lo [ 104.105109][ T7108] loop4: detected capacity change from 0 to 128 [ 104.113052][ T7108] msdos: Bad value for 'fmask' [ 104.471235][ T7144] 9pnet_fd: Insufficient options for proto=fd [ 104.497173][ T7148] __nla_validate_parse: 8 callbacks suppressed [ 104.497189][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 104.628112][ T7150] loop3: detected capacity change from 0 to 8192 [ 104.661136][ T7150] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.830795][ T7155] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1477'. [ 104.870343][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.889029][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.904154][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.934810][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.099205][ T7166] random: crng reseeded on system resumption [ 105.490907][ T7169] Falling back ldisc for ttyS3. [ 105.695204][ T7176] 9pnet_fd: Insufficient options for proto=fd [ 105.912805][ T7186] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1486'. [ 105.996674][ T7188] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 106.243650][ T7197] loop4: detected capacity change from 0 to 8192 [ 106.256155][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 106.281979][ T7197] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.426960][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.437365][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.446191][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.455872][ T7199] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1495'. [ 106.456044][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.652499][ T7203] 9pnet_fd: Insufficient options for proto=fd [ 106.687136][ T7206] random: crng reseeded on system resumption [ 106.978189][ T7221] loop3: detected capacity change from 0 to 2048 [ 106.988206][ T7218] 9pnet_fd: Insufficient options for proto=fd [ 107.004826][ T7221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.083882][ T7221] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.105601][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 107.139798][ T7234] bridge0: entered promiscuous mode [ 107.152001][ T7234] macsec1: entered allmulticast mode [ 107.157329][ T7234] bridge0: entered allmulticast mode [ 107.164427][ T7234] bridge0: port 3(macsec1) entered blocking state [ 107.171029][ T7234] bridge0: port 3(macsec1) entered disabled state [ 107.182239][ T7237] random: crng reseeded on system resumption [ 107.188812][ T7234] bridge0: left allmulticast mode [ 107.193897][ T7234] bridge0: left promiscuous mode [ 107.642378][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.652210][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.660784][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.669425][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.712947][ T7258] loop2: detected capacity change from 0 to 8192 [ 107.720409][ T7258] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.802904][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'. [ 107.838893][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.876841][ T7261] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1518'. [ 108.076076][ T7271] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 108.574354][ T7297] random: crng reseeded on system resumption [ 108.754586][ T7307] 9pnet_fd: Insufficient options for proto=fd [ 108.808524][ T7322] loop3: detected capacity change from 0 to 8192 [ 108.817410][ T7322] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.860282][ T7327] random: crng reseeded on system resumption [ 108.982462][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'. [ 108.993193][ T7328] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1545'. [ 109.306405][ T7340] netlink: 'syz.0.1552': attribute type 27 has an invalid length. [ 109.339193][ T7340] $Hÿ: left promiscuous mode [ 109.344237][ T7340] bond_slave_0: left promiscuous mode [ 109.349939][ T7340] bond_slave_1: left promiscuous mode [ 109.371075][ T7340] ip6gre1: left allmulticast mode [ 109.431376][ T7343] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 109.453903][ T7343] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.478778][ T7343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.495118][ T7349] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 109.739450][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 109.739466][ T29] audit: type=1326 audit(1754636652.841:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 109.786370][ T7362] tap0: tun_chr_ioctl cmd 1074025675 [ 109.791715][ T7362] tap0: persist enabled [ 109.800016][ T7362] tap0: tun_chr_ioctl cmd 1074025675 [ 109.805316][ T7362] tap0: persist disabled [ 109.839799][ T29] audit: type=1326 audit(1754636652.871:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 109.863427][ T29] audit: type=1326 audit(1754636652.881:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 109.886894][ T29] audit: type=1326 audit(1754636652.881:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 109.910379][ T29] audit: type=1326 audit(1754636652.891:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 109.933853][ T29] audit: type=1326 audit(1754636652.891:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 109.957342][ T29] audit: type=1326 audit(1754636652.891:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f283362d69f code=0x7ffc0000 [ 109.980624][ T29] audit: type=1326 audit(1754636652.891:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 110.004295][ T29] audit: type=1326 audit(1754636652.891:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 110.027792][ T29] audit: type=1326 audit(1754636652.891:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 110.261441][ T7379] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1567'. [ 110.380782][ T7381] loop3: detected capacity change from 0 to 8192 [ 110.387460][ T7381] /dev/loop3: Can't open blockdev [ 110.527915][ T7384] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1568'. [ 110.645755][ T7396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1574'. [ 110.679001][ T7400] tap0: tun_chr_ioctl cmd 1074025675 [ 110.684435][ T7400] tap0: persist enabled [ 110.690231][ T7400] tap0: tun_chr_ioctl cmd 1074025675 [ 110.695537][ T7400] tap0: persist disabled [ 110.716240][ T7398] loop4: detected capacity change from 0 to 8192 [ 110.734597][ T7398] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.018589][ T7414] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1575'. [ 111.327992][ T7430] loop2: detected capacity change from 0 to 2048 [ 111.405626][ T7423] lo speed is unknown, defaulting to 1000 [ 111.436576][ T7430] loop2: unable to read partition table [ 111.446386][ T7430] loop2: partition table beyond EOD, truncated [ 111.452605][ T7430] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 111.488607][ T7440] tap0: tun_chr_ioctl cmd 1074025675 [ 111.494067][ T7440] tap0: persist enabled [ 111.499043][ T7423] lo speed is unknown, defaulting to 1000 [ 111.499504][ T7440] tap0: tun_chr_ioctl cmd 1074025675 [ 111.510314][ T7440] tap0: persist disabled [ 111.567254][ T7440] rdma_rxe: rxe_newlink: failed to add lo [ 111.583729][ T7445] loop3: detected capacity change from 0 to 128 [ 111.584819][ T7446] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 111.602332][ T7445] msdos: Bad value for 'fmask' [ 111.620998][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 111.635261][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 111.671740][ T7454] tap0: tun_chr_ioctl cmd 1074025675 [ 111.677066][ T7454] tap0: persist enabled [ 111.681952][ T7454] tap0: tun_chr_ioctl cmd 1074025675 [ 111.687261][ T7454] tap0: persist disabled [ 111.693144][ T7457] random: crng reseeded on system resumption [ 111.925516][ T7454] sz1: rxe_newlink: already configured on lo [ 111.986172][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 112.139301][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.159622][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.170168][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.178786][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.252981][ T7506] syzkaller0: entered promiscuous mode [ 112.258562][ T7506] syzkaller0: entered allmulticast mode [ 112.338159][ T7513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.346667][ T7513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.416057][ T7523] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 112.579892][ T7531] Falling back ldisc for ttyS3. [ 112.728198][ T7547] syzkaller0: entered promiscuous mode [ 112.733871][ T7547] syzkaller0: entered allmulticast mode [ 112.998506][ T7575] syzkaller0: entered promiscuous mode [ 112.998974][ T7576] netlink: 'syz.1.1648': attribute type 27 has an invalid length. [ 113.004120][ T7575] syzkaller0: entered allmulticast mode [ 113.055414][ T7576] $Hÿ: left promiscuous mode [ 113.060297][ T7576] bond_slave_0: left promiscuous mode [ 113.065823][ T7576] bond_slave_1: left promiscuous mode [ 113.077173][ T9] lo speed is unknown, defaulting to 1000 [ 113.083026][ T9] syz2: Port: 1 Link DOWN [ 113.104354][ T7576] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 113.122836][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.132707][ T7576] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 113.151847][ T9] lo speed is unknown, defaulting to 1000 [ 113.157593][ T9] syz2: Port: 1 Link ACTIVE [ 113.516887][ T7602] random: crng reseeded on system resumption [ 113.553925][ T7604] syzkaller0: entered promiscuous mode [ 113.559443][ T7604] syzkaller0: entered allmulticast mode [ 113.612409][ T7606] netlink: 'syz.4.1661': attribute type 27 has an invalid length. [ 113.634926][ T7606] $Hÿ: left promiscuous mode [ 113.639781][ T7606] bond_slave_0: left promiscuous mode [ 113.645327][ T7606] bond_slave_1: left promiscuous mode [ 113.655092][ T3409] lo speed is unknown, defaulting to 1000 [ 113.660910][ T3409] sz1: Port: 1 Link DOWN [ 113.674841][ T7606] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 113.683003][ T7606] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.702667][ T7606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.718300][ T9] lo speed is unknown, defaulting to 1000 [ 113.724349][ T9] sz1: Port: 1 Link ACTIVE [ 113.724360][ T3409] lo speed is unknown, defaulting to 1000 [ 113.773095][ T7612] netlink: 'syz.4.1664': attribute type 27 has an invalid length. [ 113.823006][ T3409] lo speed is unknown, defaulting to 1000 [ 113.828765][ T3409] sz1: Port: 1 Link DOWN [ 113.839967][ T1070] lo speed is unknown, defaulting to 1000 [ 113.872441][ T7612] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 113.880611][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.890974][ T7612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.907019][ T3409] lo speed is unknown, defaulting to 1000 [ 113.913046][ T3409] sz1: Port: 1 Link ACTIVE [ 113.920663][ T3409] lo speed is unknown, defaulting to 1000 [ 113.942669][ T7628] syzkaller0: entered promiscuous mode [ 113.948262][ T7628] syzkaller0: entered allmulticast mode [ 113.962720][ T7631] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 113.988738][ T7636] loop4: detected capacity change from 0 to 164 [ 113.996041][ T7636] Unable to read rock-ridge attributes [ 114.003107][ T7636] Unable to read rock-ridge attributes [ 114.054241][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 114.066105][ T7640] bridge0: entered promiscuous mode [ 114.071542][ T7640] macsec1: entered allmulticast mode [ 114.076987][ T7640] bridge0: entered allmulticast mode [ 114.083139][ T7640] bridge0: port 3(macsec1) entered blocking state [ 114.089795][ T7640] bridge0: port 3(macsec1) entered disabled state [ 114.101506][ T7640] bridge0: left allmulticast mode [ 114.106633][ T7640] bridge0: left promiscuous mode [ 114.519360][ T7665] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1687'. [ 114.535758][ T7663] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1684'. [ 114.630740][ T7671] block device autoloading is deprecated and will be removed. [ 114.661103][ T7669] 9pnet_fd: Insufficient options for proto=fd [ 114.832096][ T7688] random: crng reseeded on system resumption [ 115.159141][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 115.159155][ T29] audit: type=1400 audit(1754636658.261:3148): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.188642][ T29] audit: type=1400 audit(1754636658.261:3149): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.226811][ T7693] Falling back ldisc for ttyS3. [ 115.300117][ T29] audit: type=1400 audit(1754636658.321:3150): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=557 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.337898][ T7715] lo speed is unknown, defaulting to 1000 [ 115.534714][ T7715] lo speed is unknown, defaulting to 1000 [ 115.631616][ T7726] __nla_validate_parse: 3 callbacks suppressed [ 115.631633][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1712'. [ 116.002549][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 116.016575][ T7732] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1713'. [ 116.180617][ T7735] loop1: detected capacity change from 0 to 8192 [ 116.206671][ T7735] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.287730][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.296173][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.304834][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.315859][ T7745] netlink: 'syz.4.1720': attribute type 27 has an invalid length. [ 116.319859][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.361760][ T3409] lo speed is unknown, defaulting to 1000 [ 116.378434][ T7745] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 116.386765][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.394674][ T7746] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1715'. [ 116.406560][ T7745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.412962][ T7749] 9pnet_fd: Insufficient options for proto=fd [ 116.422136][ T9] lo speed is unknown, defaulting to 1000 [ 116.435503][ T3409] lo speed is unknown, defaulting to 1000 [ 116.498376][ T7756] loop4: detected capacity change from 0 to 164 [ 116.526205][ T7756] Unable to read rock-ridge attributes [ 116.545970][ T7756] Unable to read rock-ridge attributes [ 116.641902][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 116.653593][ T7759] bridge0: entered promiscuous mode [ 116.658868][ T7759] macsec1: entered allmulticast mode [ 116.664267][ T7759] bridge0: entered allmulticast mode [ 116.671006][ T7759] bridge0: port 3(macsec1) entered blocking state [ 116.677455][ T7759] bridge0: port 3(macsec1) entered disabled state [ 116.685361][ T7759] bridge0: left allmulticast mode [ 116.690586][ T7759] bridge0: left promiscuous mode [ 116.893546][ T7770] loop3: detected capacity change from 0 to 8192 [ 117.008283][ T7775] lo speed is unknown, defaulting to 1000 [ 117.060970][ T7775] lo speed is unknown, defaulting to 1000 [ 117.201971][ T7770] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.277239][ T7774] loop2: detected capacity change from 0 to 8192 [ 117.298558][ T7780] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 117.306847][ T7774] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.246794][ T7785] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1731'. [ 118.275987][ T7786] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1729'. [ 118.591602][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.600457][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.620300][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.638953][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.863988][ T7819] lo speed is unknown, defaulting to 1000 [ 118.919501][ T7819] lo speed is unknown, defaulting to 1000 [ 119.035690][ T7823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1746'. [ 119.214531][ T7839] random: crng reseeded on system resumption [ 119.260793][ T7843] loop1: detected capacity change from 0 to 512 [ 119.270737][ T29] audit: type=1326 audit(1754636662.381:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 119.294283][ T29] audit: type=1326 audit(1754636662.381:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 119.318068][ T29] audit: type=1326 audit(1754636662.381:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f283362d550 code=0x7ffc0000 [ 119.341532][ T29] audit: type=1326 audit(1754636662.381:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 119.365033][ T29] audit: type=1326 audit(1754636662.381:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 119.388421][ T29] audit: type=1326 audit(1754636662.381:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 119.395374][ T7847] syzkaller0: entered promiscuous mode [ 119.411811][ T29] audit: type=1326 audit(1754636662.381:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.1.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 119.441403][ T7847] syzkaller0: entered allmulticast mode [ 119.464005][ T7851] netlink: 'syz.3.1760': attribute type 27 has an invalid length. [ 119.528028][ T7851] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 119.540503][ T7851] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.552924][ T7851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.657160][ T7866] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1767'. [ 119.975849][ T7884] lo speed is unknown, defaulting to 1000 [ 120.029901][ T7884] lo speed is unknown, defaulting to 1000 [ 120.179976][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 120.179991][ T29] audit: type=1326 audit(1754636663.061:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 120.209784][ T29] audit: type=1326 audit(1754636663.061:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 120.233222][ T29] audit: type=1326 audit(1754636663.061:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 120.256596][ T29] audit: type=1326 audit(1754636663.251:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 120.280014][ T29] audit: type=1326 audit(1754636663.251:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 120.303613][ T29] audit: type=1326 audit(1754636663.251:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd1876914a5 code=0x7ffc0000 [ 120.330730][ T29] audit: type=1326 audit(1754636663.411:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 120.355850][ T29] audit: type=1326 audit(1754636663.441:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7886 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 120.414302][ T7888] loop2: detected capacity change from 0 to 8192 [ 120.422069][ T7888] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.436503][ T29] audit: type=1326 audit(1754636663.491:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 120.460181][ T29] audit: type=1326 audit(1754636663.491:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7853 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18765ebe9 code=0x7ffc0000 [ 120.744904][ T7900] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1776'. [ 120.889574][ T7902] loop1: detected capacity change from 0 to 512 [ 121.232214][ T7921] random: crng reseeded on system resumption [ 121.384979][ T7928] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1788'. [ 121.496469][ T7930] loop2: detected capacity change from 0 to 164 [ 121.512686][ T7930] Unable to read rock-ridge attributes [ 121.524126][ T7930] Unable to read rock-ridge attributes [ 121.636183][ T7945] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1796'. [ 121.660161][ T7948] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 121.973386][ T7967] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1805'. [ 121.977195][ T7969] loop3: detected capacity change from 0 to 164 [ 121.990636][ T7969] Unable to read rock-ridge attributes [ 121.997627][ T7969] Unable to read rock-ridge attributes [ 122.093006][ T7975] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1809'. [ 122.178875][ T7979] 9pnet_fd: Insufficient options for proto=fd [ 122.215107][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1814'. [ 122.227146][ T7987] bridge0: entered promiscuous mode [ 122.233678][ T7987] macsec1: entered allmulticast mode [ 122.239033][ T7987] bridge0: entered allmulticast mode [ 122.248257][ T7987] bridge0: port 3(macsec1) entered blocking state [ 122.254857][ T7987] bridge0: port 3(macsec1) entered disabled state [ 122.266513][ T7987] bridge0: left allmulticast mode [ 122.271636][ T7987] bridge0: left promiscuous mode [ 122.309940][ T7996] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1818'. [ 122.396168][ T8006] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1822'. [ 122.475175][ T8010] syz1: rxe_newlink: already configured on veth0_to_bridge [ 122.540782][ T8013] 9pnet_fd: Insufficient options for proto=fd [ 122.814537][ T8029] loop3: detected capacity change from 0 to 8192 [ 122.822274][ T8029] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.963687][ T8034] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1832'. [ 123.025176][ T8037] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1834'. [ 123.309811][ T8044] tipc: Enabled bearer , priority 0 [ 123.321206][ T8044] tipc: Resetting bearer [ 123.329284][ T8043] tipc: Disabling bearer [ 123.397555][ T8046] random: crng reseeded on system resumption [ 123.678501][ T8061] syz1: rxe_newlink: already configured on veth0_to_bridge [ 124.084533][ T8096] blktrace: Concurrent blktraces are not allowed on loop7 [ 124.157667][ T8104] loop2: detected capacity change from 0 to 8192 [ 124.165275][ T8104] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.124057][ T8151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.142121][ T8151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.147042][ T8153] tap0: tun_chr_ioctl cmd 1074025675 [ 125.152430][ T8151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.155297][ T8153] tap0: persist enabled [ 125.163832][ T8151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.181301][ T8153] tap0: tun_chr_ioctl cmd 1074025675 [ 125.186627][ T8153] tap0: persist disabled [ 125.191001][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 125.191013][ T29] audit: type=1326 audit(1754636668.301:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 125.222146][ T29] audit: type=1326 audit(1754636668.301:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 125.229954][ T8155] 9pnet_fd: Insufficient options for proto=fd [ 125.245658][ T29] audit: type=1326 audit(1754636668.301:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 125.275033][ T29] audit: type=1326 audit(1754636668.301:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 125.298508][ T29] audit: type=1326 audit(1754636668.301:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 125.321988][ T29] audit: type=1326 audit(1754636668.301:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 125.345434][ T29] audit: type=1326 audit(1754636668.301:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 125.368828][ T29] audit: type=1326 audit(1754636668.301:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.3.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 125.392292][ T29] audit: type=1326 audit(1754636668.331:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 125.426265][ T29] audit: type=1326 audit(1754636668.331:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 125.565082][ T8153] rdma_rxe: rxe_newlink: failed to add lo [ 125.574118][ T8153] loop3: detected capacity change from 0 to 128 [ 125.590531][ T8153] msdos: Bad value for 'fmask' [ 125.849985][ T8165] Falling back ldisc for ttyS3. [ 125.961346][ T8182] __nla_validate_parse: 7 callbacks suppressed [ 125.961439][ T8182] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1889'. [ 126.404401][ T8186] 9pnet_fd: Insufficient options for proto=fd [ 126.589770][ T8195] loop2: detected capacity change from 0 to 8192 [ 126.717052][ T8195] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.729290][ T8202] loop3: detected capacity change from 0 to 2048 [ 126.752031][ T8202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.764419][ T8202] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.887440][ T8211] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1897'. [ 126.956309][ T8214] random: crng reseeded on system resumption [ 127.249201][ T8222] loop4: detected capacity change from 0 to 8192 [ 127.256653][ T8222] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.466276][ T8230] netlink: 'syz.1.1907': attribute type 27 has an invalid length. [ 127.505533][ T9] lo speed is unknown, defaulting to 1000 [ 127.511478][ T9] syz2: Port: 1 Link DOWN [ 127.535184][ T8233] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1904'. [ 127.625513][ T8230] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 127.635035][ T8230] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.645471][ T8230] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 127.663232][ T9] lo speed is unknown, defaulting to 1000 [ 127.668969][ T9] syz2: Port: 1 Link ACTIVE [ 127.678784][ T8234] tap0: tun_chr_ioctl cmd 1074025675 [ 127.684242][ T8234] tap0: persist enabled [ 127.697171][ T8232] tap0: tun_chr_ioctl cmd 1074025675 [ 127.702634][ T8232] tap0: persist disabled [ 127.849425][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.883091][ T8234] rdma_rxe: rxe_newlink: failed to add lo [ 127.988237][ T8232] loop2: detected capacity change from 0 to 128 [ 127.995307][ T8232] msdos: Bad value for 'fmask' [ 128.038166][ T8245] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1913'. [ 128.095670][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 128.433232][ T8253] loop2: detected capacity change from 0 to 8192 [ 128.454313][ T8253] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.676925][ T8262] netlink: 'syz.4.1919': attribute type 27 has an invalid length. [ 128.702866][ T3723] lo speed is unknown, defaulting to 1000 [ 128.708651][ T3723] sz1: Port: 1 Link DOWN [ 128.738492][ T8262] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 128.756908][ T8262] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.781057][ T8262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.800153][ T8256] loop3: detected capacity change from 0 to 8192 [ 128.806794][ T3376] lo speed is unknown, defaulting to 1000 [ 128.812587][ T3376] sz1: Port: 1 Link ACTIVE [ 128.817109][ T3410] lo speed is unknown, defaulting to 1000 [ 128.858195][ T8266] loop4: detected capacity change from 0 to 2048 [ 128.872379][ T8266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.889862][ T8266] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.958538][ T8276] random: crng reseeded on system resumption [ 129.059779][ T8278] Falling back ldisc for ttyS3. [ 129.146800][ T8283] random: crng reseeded on system resumption [ 129.170731][ T8273] Falling back ldisc for ttyS3. [ 129.199235][ T8285] tap0: tun_chr_ioctl cmd 1074025675 [ 129.204606][ T8285] tap0: persist enabled [ 129.209160][ T8285] tap0: tun_chr_ioctl cmd 1074025675 [ 129.214575][ T8285] tap0: persist disabled [ 129.337200][ T8287] loop2: detected capacity change from 0 to 8192 [ 129.351925][ T8287] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.462620][ T8285] rdma_rxe: rxe_newlink: failed to add lo [ 129.634391][ T8305] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1927'. [ 129.917209][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.953541][ T8308] lo speed is unknown, defaulting to 1000 [ 130.005581][ T8313] loop3: detected capacity change from 0 to 512 [ 130.025647][ T8308] lo speed is unknown, defaulting to 1000 [ 130.085150][ T8313] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 130.109689][ T8313] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.1932: iget: bad i_size value: 12154757448730 [ 130.154876][ T8313] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1932: couldn't read orphan inode 13 (err -117) [ 130.248051][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.261499][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.270492][ T8323] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1937'. [ 130.279920][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.288336][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.296235][ T8313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.313164][ T8313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.730780][ T8343] loop3: detected capacity change from 0 to 2048 [ 130.741931][ T8343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.754469][ T8343] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.821442][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.860655][ T8354] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1946'. [ 131.134592][ T8375] random: crng reseeded on system resumption [ 131.152258][ T8378] loop2: detected capacity change from 0 to 2048 [ 131.182095][ T8378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.194695][ T8378] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.272438][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.403499][ T8395] syz1: rxe_newlink: already configured on veth0_to_bridge [ 131.468722][ T8392] loop2: detected capacity change from 0 to 8192 [ 131.480668][ T8392] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.641519][ T8403] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1961'. [ 132.086729][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 132.086743][ T29] audit: type=1326 audit(1754636675.191:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 132.126470][ T8419] tap0: tun_chr_ioctl cmd 1074025675 [ 132.131947][ T8419] tap0: persist enabled [ 132.137627][ T8419] tap0: tun_chr_ioctl cmd 1074025675 [ 132.143071][ T8419] tap0: persist disabled [ 132.153625][ T29] audit: type=1326 audit(1754636675.221:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 132.177254][ T29] audit: type=1326 audit(1754636675.221:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 132.200709][ T29] audit: type=1326 audit(1754636675.221:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 132.224354][ T29] audit: type=1326 audit(1754636675.221:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 132.247979][ T29] audit: type=1326 audit(1754636675.221:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 132.271434][ T29] audit: type=1326 audit(1754636675.221:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f887f85d69f code=0x7ffc0000 [ 132.294698][ T29] audit: type=1326 audit(1754636675.221:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 132.318129][ T29] audit: type=1326 audit(1754636675.231:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 132.341623][ T29] audit: type=1326 audit(1754636675.231:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8418 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887f85ebe9 code=0x7ffc0000 [ 132.445811][ T8422] random: crng reseeded on system resumption [ 132.456516][ T8419] rdma_rxe: rxe_newlink: failed to add lo [ 132.575227][ T8427] random: crng reseeded on system resumption [ 132.654925][ T8433] syz1: rxe_newlink: already configured on veth0_to_bridge [ 132.905127][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 133.502008][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 133.759827][ T8468] Falling back ldisc for ttyS3. [ 133.841522][ T8470] tap0: tun_chr_ioctl cmd 1074025675 [ 133.846861][ T8470] tap0: persist enabled [ 133.871849][ T8470] tap0: tun_chr_ioctl cmd 1074025675 [ 133.877206][ T8470] tap0: persist disabled [ 134.076590][ T8475] loop4: detected capacity change from 0 to 8192 [ 134.113292][ T8482] rdma_rxe: rxe_newlink: failed to add lo [ 134.131709][ T8470] loop1: detected capacity change from 0 to 128 [ 134.147156][ T8470] msdos: Bad value for 'fmask' [ 134.163215][ T8475] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.463358][ T8490] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1989'. [ 134.547387][ T8491] lo speed is unknown, defaulting to 1000 [ 134.574421][ T8483] loop3: detected capacity change from 0 to 512 [ 134.732636][ T8483] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 134.825289][ T8491] lo speed is unknown, defaulting to 1000 [ 134.869362][ T8483] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.1992: iget: bad i_size value: 12154757448730 [ 134.926968][ T8483] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1992: couldn't read orphan inode 13 (err -117) [ 134.961393][ T8492] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 134.968907][ T8483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.991972][ T8483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.049190][ T8503] netlink: 'syz.0.1996': attribute type 27 has an invalid length. [ 135.085313][ T8503] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 135.093458][ T8503] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.104576][ T8503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.328573][ T8519] loop3: detected capacity change from 0 to 164 [ 135.335780][ T8519] Unable to read rock-ridge attributes [ 135.343827][ T8519] Unable to read rock-ridge attributes [ 135.397104][ T8523] syz1: rxe_newlink: already configured on veth0_to_bridge [ 135.422732][ T8525] random: crng reseeded on system resumption [ 135.618860][ T8531] random: crng reseeded on system resumption [ 135.676010][ T8534] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2008'. [ 135.823539][ T8527] lo speed is unknown, defaulting to 1000 [ 135.857858][ T8527] lo speed is unknown, defaulting to 1000 [ 135.969552][ T8546] random: crng reseeded on system resumption [ 136.055487][ T8557] syz1: rxe_newlink: already configured on veth0_to_bridge [ 136.076333][ T8553] loop3: detected capacity change from 0 to 8192 [ 136.083180][ T8553] /dev/loop3: Can't open blockdev [ 136.368824][ T8573] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2015'. [ 137.266197][ T8612] syz1: rxe_newlink: already configured on veth0_to_bridge [ 137.312208][ T8618] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2038'. [ 137.373453][ T8623] random: crng reseeded on system resumption [ 137.465957][ T8631] loop2: detected capacity change from 0 to 8192 [ 137.476296][ T8631] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.646695][ T8634] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2044'. [ 137.669845][ T8627] Falling back ldisc for ttyS3. [ 137.817092][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.826665][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.835458][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.844022][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.889795][ T8649] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2051'. [ 137.953014][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 137.953030][ T29] audit: type=1326 audit(1754636681.061:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 137.983439][ T29] audit: type=1326 audit(1754636681.061:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff480d9d550 code=0x7ffc0000 [ 138.006994][ T29] audit: type=1326 audit(1754636681.061:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 138.030664][ T29] audit: type=1326 audit(1754636681.061:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 138.031056][ T8655] random: crng reseeded on system resumption [ 138.054286][ T29] audit: type=1326 audit(1754636681.061:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 138.054321][ T29] audit: type=1326 audit(1754636681.061:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 138.054370][ T29] audit: type=1326 audit(1754636681.061:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 138.054422][ T29] audit: type=1326 audit(1754636681.061:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 138.054531][ T29] audit: type=1326 audit(1754636681.061:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 138.054628][ T29] audit: type=1326 audit(1754636681.061:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff480d9ebe9 code=0x7ffc0000 [ 138.304805][ T8665] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 138.476482][ T8673] loop4: detected capacity change from 0 to 1024 [ 138.483975][ T8673] EXT4-fs: inline encryption not supported [ 138.491083][ T8673] EXT4-fs: Ignoring removed bh option [ 138.505193][ T8673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.520473][ T8680] FAULT_INJECTION: forcing a failure. [ 138.520473][ T8680] name failslab, interval 1, probability 0, space 0, times 0 [ 138.533842][ T8680] CPU: 1 UID: 0 PID: 8680 Comm: syz.1.2063 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 138.533943][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.533958][ T8680] Call Trace: [ 138.533964][ T8680] [ 138.533972][ T8680] __dump_stack+0x1d/0x30 [ 138.534046][ T8680] dump_stack_lvl+0xe8/0x140 [ 138.534068][ T8680] dump_stack+0x15/0x1b [ 138.534086][ T8680] should_fail_ex+0x265/0x280 [ 138.534123][ T8680] should_failslab+0x8c/0xb0 [ 138.534150][ T8680] kmem_cache_alloc_node_noprof+0x57/0x320 [ 138.534215][ T8680] ? dup_task_struct+0x70/0x6a0 [ 138.534257][ T8680] ? perf_swevent_hrtimer+0x2b7/0x2f0 [ 138.534295][ T8680] dup_task_struct+0x70/0x6a0 [ 138.534396][ T8680] copy_process+0x399/0x2000 [ 138.534425][ T8680] ? rb_insert_color+0x71/0x2b0 [ 138.534454][ T8680] kernel_clone+0x16c/0x5c0 [ 138.534512][ T8680] __x64_sys_clone+0xe6/0x120 [ 138.534550][ T8680] x64_sys_call+0x119c/0x2ff0 [ 138.534573][ T8680] do_syscall_64+0xd2/0x200 [ 138.534600][ T8680] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.534720][ T8680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.534812][ T8680] RIP: 0033:0x7f283362ebe9 [ 138.534837][ T8680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.534857][ T8680] RSP: 002b:00007f283208efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 138.534948][ T8680] RAX: ffffffffffffffda RBX: 00007f2833855fa0 RCX: 00007f283362ebe9 [ 138.534963][ T8680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 138.534977][ T8680] RBP: 00007f283208f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.534990][ T8680] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 138.535004][ T8680] R13: 00007f2833856038 R14: 00007f2833855fa0 R15: 00007ffe31629638 [ 138.535026][ T8680] [ 138.723253][ T8672] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2056'. [ 138.786880][ T8685] random: crng reseeded on system resumption [ 138.823201][ T8681] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 138.838126][ T8681] EXT4-fs (loop4): Remounting filesystem read-only [ 138.845288][ T8681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.949975][ T8699] tipc: Enabled bearer , priority 0 [ 138.957320][ T8699] syzkaller0: entered promiscuous mode [ 138.962984][ T8699] syzkaller0: entered allmulticast mode [ 138.974854][ T8699] tipc: Resetting bearer [ 138.984236][ T8697] tipc: Resetting bearer [ 138.990865][ T8697] tipc: Disabling bearer [ 139.004590][ T8689] lo speed is unknown, defaulting to 1000 [ 139.033689][ T8689] lo speed is unknown, defaulting to 1000 [ 139.127980][ T8714] blktrace: Concurrent blktraces are not allowed on loop5 [ 139.132160][ T51] bridge_slave_1: left allmulticast mode [ 139.140784][ T51] bridge_slave_1: left promiscuous mode [ 139.145023][ T8712] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 139.146449][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.171352][ T51] bridge_slave_0: left allmulticast mode [ 139.177012][ T51] bridge_slave_0: left promiscuous mode [ 139.182758][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.361590][ T51] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.379228][ T51] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.403490][ T51] $Hÿ (unregistering): Released all slaves [ 139.443136][ T8717] tipc: Enabled bearer , priority 0 [ 139.468819][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 139.514996][ T8720] syzkaller0: entered promiscuous mode [ 139.520555][ T8720] syzkaller0: entered allmulticast mode [ 139.533795][ T51] tipc: Left network mode [ 139.540510][ T8710] tipc: Resetting bearer [ 139.597171][ T8708] tipc: Resetting bearer [ 139.606871][ T8708] tipc: Disabling bearer [ 139.624763][ T51] hsr_slave_0: left promiscuous mode [ 139.631434][ T51] hsr_slave_1: left promiscuous mode [ 139.637169][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.662353][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.735910][ T8742] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 139.864005][ T51] team0 (unregistering): Port device team_slave_1 removed [ 139.885561][ T51] team0 (unregistering): Port device team_slave_0 removed [ 139.948470][ T1955] smc: removing ib device sz1 [ 139.977033][ T10] lo speed is unknown, defaulting to 1000 [ 139.982830][ T10] sz1: Port: 1 Link DOWN [ 140.007849][ T8756] tap0: tun_chr_ioctl cmd 1074025675 [ 140.013251][ T8756] tap0: persist enabled [ 140.061692][ T8756] tap0: tun_chr_ioctl cmd 1074025675 [ 140.067003][ T8756] tap0: persist disabled [ 140.080549][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.087608][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.131033][ T8689] bridge_slave_0: entered allmulticast mode [ 140.151042][ T8689] bridge_slave_0: entered promiscuous mode [ 140.167641][ T8758] rdma_rxe: rxe_newlink: failed to add lo [ 140.174485][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.181634][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.199855][ T8689] bridge_slave_1: entered allmulticast mode [ 140.212065][ T8689] bridge_slave_1: entered promiscuous mode [ 140.247644][ T8758] loop1: detected capacity change from 0 to 128 [ 140.255913][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.265184][ T8750] lo speed is unknown, defaulting to 1000 [ 140.282738][ T8758] msdos: Bad value for 'fmask' [ 140.289553][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.328687][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2092'. [ 140.339510][ T8689] team0: Port device team_slave_0 added [ 140.353001][ T8689] team0: Port device team_slave_1 added [ 140.403824][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.410844][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.436858][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.449559][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.456585][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.482522][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.513280][ T8768] FAULT_INJECTION: forcing a failure. [ 140.513280][ T8768] name failslab, interval 1, probability 0, space 0, times 0 [ 140.526038][ T8768] CPU: 0 UID: 0 PID: 8768 Comm: syz.1.2094 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 140.526097][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.526112][ T8768] Call Trace: [ 140.526118][ T8768] [ 140.526133][ T8768] __dump_stack+0x1d/0x30 [ 140.526155][ T8768] dump_stack_lvl+0xe8/0x140 [ 140.526174][ T8768] dump_stack+0x15/0x1b [ 140.526199][ T8768] should_fail_ex+0x265/0x280 [ 140.526237][ T8768] should_failslab+0x8c/0xb0 [ 140.526287][ T8768] __kmalloc_noprof+0xa5/0x3e0 [ 140.526317][ T8768] ? io_cache_alloc_new+0x2a/0xb0 [ 140.526345][ T8768] io_cache_alloc_new+0x2a/0xb0 [ 140.526370][ T8768] io_sendmsg_prep+0x2cf/0x5d0 [ 140.526396][ T8768] io_submit_sqes+0x5de/0x1050 [ 140.526520][ T8768] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 140.526558][ T8768] ? 0xffffffff81000000 [ 140.526572][ T8768] ? __rcu_read_unlock+0x4f/0x70 [ 140.526612][ T8768] ? get_pid_task+0x96/0xd0 [ 140.526636][ T8768] ? proc_fail_nth_write+0x13b/0x160 [ 140.526745][ T8768] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 140.526772][ T8768] ? vfs_write+0x75e/0x8e0 [ 140.526802][ T8768] ? __rcu_read_unlock+0x4f/0x70 [ 140.526838][ T8768] ? __fget_files+0x184/0x1c0 [ 140.526865][ T8768] ? fput+0x8f/0xc0 [ 140.526900][ T8768] __x64_sys_io_uring_enter+0x78/0x90 [ 140.526938][ T8768] x64_sys_call+0x2de1/0x2ff0 [ 140.526969][ T8768] do_syscall_64+0xd2/0x200 [ 140.526994][ T8768] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.527021][ T8768] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 140.527047][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.527079][ T8768] RIP: 0033:0x7f283362ebe9 [ 140.527116][ T8768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.527137][ T8768] RSP: 002b:00007f283208f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 140.527158][ T8768] RAX: ffffffffffffffda RBX: 00007f2833855fa0 RCX: 00007f283362ebe9 [ 140.527173][ T8768] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000003 [ 140.527194][ T8768] RBP: 00007f283208f090 R08: 0000000000000000 R09: 0000000000000000 [ 140.527208][ T8768] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 140.527273][ T8768] R13: 00007f2833856038 R14: 00007f2833855fa0 R15: 00007ffe31629638 [ 140.527293][ T8768] [ 140.777857][ T8689] hsr_slave_0: entered promiscuous mode [ 140.784048][ T8689] hsr_slave_1: entered promiscuous mode [ 140.789915][ T8689] debugfs: 'hsr0' already exists in 'hsr' [ 140.795648][ T8689] Cannot create hsr debugfs directory [ 140.951657][ T8775] 9pnet_fd: Insufficient options for proto=fd [ 141.036100][ T8689] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.074581][ T8689] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.094500][ T8689] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.102833][ T8777] loop1: detected capacity change from 0 to 8192 [ 141.112050][ T8689] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.187157][ T8689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.294165][ T8798] random: crng reseeded on system resumption [ 141.427792][ T8689] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.463890][ T8796] lo speed is unknown, defaulting to 1000 [ 141.479598][ T8689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.490108][ T8689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.660592][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.667683][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.677958][ T8804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2102'. [ 141.698668][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.705751][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.793982][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.903486][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.921363][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.942926][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.968112][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.995208][ T8824] loop1: detected capacity change from 0 to 2048 [ 142.059708][ T8824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.073775][ T8834] 9pnet_fd: Insufficient options for proto=fd [ 142.080331][ T8824] ext4 filesystem being mounted at /494/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.086700][ T8689] veth0_vlan: entered promiscuous mode [ 142.099270][ T8689] veth1_vlan: entered promiscuous mode [ 142.112429][ T8689] veth0_macvtap: entered promiscuous mode [ 142.121075][ T8689] veth1_macvtap: entered promiscuous mode [ 142.132139][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.152808][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.172350][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.184187][ T8839] netlink: 'syz.2.2109': attribute type 27 has an invalid length. [ 142.195538][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2106'. [ 142.205323][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.214623][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.224004][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.252339][ T8839] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 142.275961][ T8839] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.288966][ T8839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.439432][ T8850] loop2: detected capacity change from 0 to 8192 [ 142.460975][ T8850] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.581795][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2112'. [ 142.642762][ T8852] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2111'. [ 142.663147][ T8858] loop5: detected capacity change from 0 to 512 [ 142.670872][ T8856] loop3: detected capacity change from 0 to 128 [ 142.671141][ T8858] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.683647][ T8858] EXT4-fs: Ignoring removed bh option [ 142.689515][ T8858] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 142.702704][ T8858] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.714144][ T8858] EXT4-fs (loop5): 1 truncate cleaned up [ 142.720312][ T8858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.793982][ T8862] loop3: detected capacity change from 0 to 512 [ 142.811056][ T8862] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.817579][ T8862] EXT4-fs: Ignoring removed bh option [ 142.838719][ T8862] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.838902][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.865700][ T8858] FAULT_INJECTION: forcing a failure. [ 142.865700][ T8858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.879067][ T8858] CPU: 1 UID: 0 PID: 8858 Comm: syz.5.2114 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 142.879098][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.879111][ T8858] Call Trace: [ 142.879116][ T8858] [ 142.879130][ T8858] __dump_stack+0x1d/0x30 [ 142.879153][ T8858] dump_stack_lvl+0xe8/0x140 [ 142.879176][ T8858] dump_stack+0x15/0x1b [ 142.879239][ T8858] should_fail_ex+0x265/0x280 [ 142.879270][ T8858] should_fail+0xb/0x20 [ 142.879366][ T8858] should_fail_usercopy+0x1a/0x20 [ 142.879458][ T8858] _copy_from_user+0x1c/0xb0 [ 142.879481][ T8858] ___sys_sendmsg+0xc1/0x1d0 [ 142.879562][ T8858] __x64_sys_sendmsg+0xd4/0x160 [ 142.879661][ T8858] x64_sys_call+0x191e/0x2ff0 [ 142.879682][ T8858] do_syscall_64+0xd2/0x200 [ 142.879706][ T8858] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.879734][ T8858] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 142.879760][ T8858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.879838][ T8858] RIP: 0033:0x7f71fe22ebe9 [ 142.879855][ T8858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.879872][ T8858] RSP: 002b:00007f71fcc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.879920][ T8858] RAX: ffffffffffffffda RBX: 00007f71fe455fa0 RCX: 00007f71fe22ebe9 [ 142.879953][ T8858] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 142.879967][ T8858] RBP: 00007f71fcc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.879982][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.879996][ T8858] R13: 00007f71fe456038 R14: 00007f71fe455fa0 R15: 00007fff2530a5d8 [ 142.880017][ T8858] [ 143.068395][ T8858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.088454][ T8862] EXT4-fs (loop3): 1 truncate cleaned up [ 143.096365][ T8862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.143026][ T8868] syz1: rxe_newlink: already configured on veth0_to_bridge [ 143.277849][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 143.277865][ T29] audit: type=1326 audit(1754636686.381:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 143.278590][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'. [ 143.286735][ T29] audit: type=1326 audit(1754636686.391:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f283362d550 code=0x7ffc0000 [ 143.352930][ T29] audit: type=1326 audit(1754636686.421:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 143.376435][ T29] audit: type=1326 audit(1754636686.421:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 143.384078][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2122'. [ 143.400102][ T29] audit: type=1326 audit(1754636686.421:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 143.432344][ T29] audit: type=1326 audit(1754636686.421:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 143.455750][ T29] audit: type=1326 audit(1754636686.421:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 143.479231][ T29] audit: type=1326 audit(1754636686.421:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 143.502693][ T29] audit: type=1326 audit(1754636686.421:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 143.523052][ T8884] random: crng reseeded on system resumption [ 143.529933][ T29] audit: type=1326 audit(1754636686.421:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8872 comm="syz.1.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283362ebe9 code=0x7ffc0000 [ 143.562285][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.612698][ T8890] loop1: detected capacity change from 0 to 2048 [ 143.631533][ T8689] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.643010][ T8890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.656235][ T8890] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.726275][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'. [ 143.769254][ T8900] hsr_slave_0 (unregistering): left promiscuous mode [ 143.794266][ T8912] netlink: 'syz.2.2134': attribute type 1 has an invalid length. [ 143.798909][ T8909] netlink: 'syz.0.2133': attribute type 27 has an invalid length. [ 143.822629][ T8912] SELinux: policydb magic number 0xd8395875 does not match expected magic number 0xf97cff8c [ 143.834042][ T8912] SELinux: failed to load policy [ 143.876463][ T8909] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 143.886114][ T8909] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.896354][ T8909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.959588][ T8927] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 144.182494][ T8931] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2139'. [ 144.201955][ T8935] ================================================================== [ 144.210062][ T8935] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 144.216749][ T8935] [ 144.219063][ T8935] write to 0xffff88810443b808 of 8 bytes by task 8934 on cpu 0: [ 144.226717][ T8935] call_rcu+0x51/0x3f0 [ 144.230791][ T8935] mas_wmb_replace+0xc6a/0x14a0 [ 144.235638][ T8935] mas_wr_store_entry+0x1773/0x2b50 [ 144.240842][ T8935] mas_store_prealloc+0x74d/0x9e0 [ 144.245859][ T8935] vma_iter_store_new+0x1c5/0x200 [ 144.250874][ T8935] mmap_region+0x1100/0x1630 [ 144.255454][ T8935] do_mmap+0x9b3/0xbe0 [ 144.259519][ T8935] vm_mmap_pgoff+0x17a/0x2e0 [ 144.264105][ T8935] ksys_mmap_pgoff+0xc2/0x310 [ 144.268816][ T8935] x64_sys_call+0x14a3/0x2ff0 [ 144.273484][ T8935] do_syscall_64+0xd2/0x200 [ 144.277982][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.283866][ T8935] [ 144.286175][ T8935] read to 0xffff88810443b808 of 8 bytes by task 8935 on cpu 1: [ 144.293715][ T8935] mas_state_walk+0x3e9/0x650 [ 144.298420][ T8935] mas_walk+0x60/0x150 [ 144.302496][ T8935] lock_vma_under_rcu+0x8d/0x160 [ 144.307446][ T8935] do_user_addr_fault+0x233/0x1090 [ 144.312564][ T8935] exc_page_fault+0x62/0xa0 [ 144.317062][ T8935] asm_exc_page_fault+0x26/0x30 [ 144.321908][ T8935] [ 144.324215][ T8935] value changed: 0x0000200000ffffff -> 0xffff88810443bb08 [ 144.331311][ T8935] [ 144.333616][ T8935] Reported by Kernel Concurrency Sanitizer on: [ 144.339752][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.2.2142 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 144.351812][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.361889][ T8935] ================================================================== [ 144.371634][ T8935] loop2: detected capacity change from 0 to 256 [ 144.448113][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.