last executing test programs: 2m51.895242038s ago: executing program 0 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x4, 0x76, 0xfff00000}, {0x6, 0x25, 0x7, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x48, 0x25, 0x29, 0x4}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x2}, 0x0, 0x8000, 0x0, 0x80003}}) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_create(r9, 0x0, 0x0) pread64(r9, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r8, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xfffffffc, 0x6}}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r11, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x10) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r12, 0x8930, &(0x7f0000000040)=':') sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x14000000) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m51.647131113s ago: executing program 0 (id=61): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@func_proto, @typedef={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x39}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 2m51.584135295s ago: executing program 0 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r0, @ANYRES16, @ANYRESDEC=r1, @ANYBLOB="2fd1e2b585401e347bcbd4414e6aa1247062edb39b893f4750473b2e2492a314ff34ef7a9712ba8e309d39019d76ede3e14238c83e49a094657871c5ae268240680101b13db03c869de07decbe36ab85ae6582fa2d1427f195b21091de5c9b879246c5bb872ee0866cf09834961fea31c2672d6d04", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES16], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=' ', 0x1}], 0x1, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x20000080}}], 0x1, 0xc001) accept4(r5, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a09040000000000000000020200002c000480280001800e000100696d6d65646961746500000014000280080001400000000f08000280040001000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0xa00, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000140)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x1ad2, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000e10400000000000000000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800008f97b8cadb9b41753a000000000000000000c6d7734062319c0d6d657a9f57000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x2b}, 0x90) epoll_ctl$EPOLL_CTL_DEL(r12, 0x2, r12) r14 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) r15 = fsmount(r14, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r15, &(0x7f0000000140)='./file0\x00') 2m51.421811588s ago: executing program 0 (id=68): r0 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="497d345a64bd37d7d15f47d60f53d55875e36b99be6a2ec6864c9fbabb017f56986fbe6ccccaf9c0590b19fc914a476280598be0be6590d0745bc527b71f1fc2d560e2776e87cafc8354cb347802e77466439e5297759413e324b568ce3ae98bf2260faf24eccc161bc21bef9ef951c990a7b7f78cdbfec4defb6d94b05e6e6e79833c6169166d74cf96cb585750bb0f92b10bf1f903ae7a565aee57a9f9ff6d59af09c2b451b1513907c351009b1bfa3bc6149585a5c362d3b525e4813be0ce2191e550c8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r6 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000000)=0x20000004, 0x4) sendmsg$nl_generic(r6, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x458}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = epoll_create1(0x0) r9 = eventfd2(0x0, 0x0) epoll_pwait2(r8, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000180)={0x20000005}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 2m51.28353118s ago: executing program 0 (id=72): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) socket$can_bcm(0x1d, 0x2, 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedd}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="30001700fd1d122bb4de6cba0d5c184ffd3e8c3a641c65eccc6e9908d58a92e9015102d2623533d47d24a90376960c2566bedc5c34d86c877e7e678805dee8bb6451bf9dfffc593c9c90315941e4edc3cec3252065d1487ec7e3b797b2e0e8c3026701027b35b45fba6a4b5f4aa5f22c2e97008d85c086ded1dc40505d58b004da8080bce1dd3b6232909cab3e827438a503164ec6747709e1459cc5f3c7975c95ca568cbae85372590b981e07ef1766fffa34369021f2be4e926c8521922f30618b2b0a700123467be7f9e51e1ae252845d80d25121ffc9fca9236dd2966e4fff35bf39b4455b1cee9eb511102916023e8db33f1473aa5b", @ANYRES16=r4, @ANYBLOB="8b3300000000000000000500000008001d800300008014001d801000008004000400050007002d000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r2, @ANYRES64, @ANYRES32=r1, @ANYRESDEC=r1], 0x40, 0x2f6, &(0x7f00000001c0)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstatfs(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x36}, 0x94) syz_emit_ethernet(0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002800000000002f9078000000006401010200008035", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a19c0537035b94a9f50dc698703d41bd60c3542f167935702cbef5a41542c5e7dec1816a398325c72c78f9ea44dab911cb0d144d138c3a248f98dd5f05c4c3d817deb4481077df6b1da589465530b50293b3ac716c50ac403af4155fb9253bb6791275e6e9a8"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e30, 0xfffffdfc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4) getgroups(0x0, 0x0) 2m51.261861701s ago: executing program 0 (id=73): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m36.224457793s ago: executing program 32 (id=73): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m29.886981897s ago: executing program 4 (id=684): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) utimes(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) write$cgroup_pid(r5, &(0x7f0000000180)=r6, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYRES16=r3], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) 2m29.885728887s ago: executing program 4 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r0, @ANYRES16, @ANYRESDEC=r1, @ANYBLOB="2fd1e2b585401e347bcbd4414e6aa1247062edb39b893f4750473b2e2492a314ff34ef7a9712ba8e309d39019d76ede3e14238c83e49a094657871c5ae268240680101b13db03c869de07decbe36ab85ae6582fa2d1427f195b21091de5c9b879246c5bb872ee0866cf09834961fea31c2672d6d04", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES16=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=' ', 0x1}], 0x1, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x20000080}}], 0x1, 0xc001) accept4(r6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a09040000000000000000020200002c000480280001800e000100696d6d65646961746500000014000280080001400000000f08000280040001000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0xa00, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000140)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) r10 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x1ad2, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000e10400000000000000000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800008f97b8cadb9b41753a000000000000000000c6d7734062319c0d6d657a9f57000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x2b}, 0x90) epoll_ctl$EPOLL_CTL_DEL(r13, 0x2, r13) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r16, &(0x7f0000000140)='./file0\x00') 2m29.501081304s ago: executing program 4 (id=682): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000400), 0x1, 0x35b, &(0x7f0000000440)="$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") 2m29.309948548s ago: executing program 4 (id=688): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x100002, 0x0, 0xfffffffc, 0xa, 0x21, 0xfffffff2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x2a) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000004000000000000000200000000001900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r10, @ANYBLOB="eab9947213995036e256cd26e53b6d3e1b8c1777f33c9034ae0523dcb1c92d9c8e6260afd339e697aca53ef4a80e028825133211811333eb92ef412c0f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r12}, 0x10) 2m28.781517398s ago: executing program 4 (id=697): r0 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="497d345a64bd37d7d15f47d60f53d55875e36b99be6a2ec6864c9fbabb017f56986fbe6ccccaf9c0590b19fc914a476280598be0be6590d0745bc527b71f1fc2d560e2776e87cafc8354cb347802e77466439e5297759413e324b568ce3ae98bf2260faf24eccc161bc21bef9ef951c990a7b7f78cdbfec4defb6d94b05e6e6e79833c6169166d74cf96cb585750bb0f92b10bf1f903ae7a565aee57a9f9ff6d59af09c2b451b1513907c351009b1bfa3bc6149585a5c362d3b525e4813be0ce2191e550c8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r6 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000000)=0x20000004, 0x4) sendmsg$nl_generic(r6, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x458}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = epoll_create1(0x0) r9 = eventfd2(0x0, 0x0) epoll_pwait2(r8, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000180)={0x20000005}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 2m28.210963449s ago: executing program 4 (id=710): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000180)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) gettid() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = memfd_create(&(0x7f0000000000)='\x00\x05\x00\x00\x00\x00\x00\x00\x00!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\xfc\xff\xff\xff\xeb0\xdd\xa8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0Oo\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9.\x00\xcf\x1c-\x1d$\x98\xf3\xed!A\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00v\xb8Z1o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc3:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82\x06\x00\x00\x00\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9aO\xbfC4S\xe6\x1f\x00\x00\x00', 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) 2m28.17945467s ago: executing program 33 (id=710): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000180)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) gettid() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = memfd_create(&(0x7f0000000000)='\x00\x05\x00\x00\x00\x00\x00\x00\x00!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\xfc\xff\xff\xff\xeb0\xdd\xa8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0Oo\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9.\x00\xcf\x1c-\x1d$\x98\xf3\xed!A\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00v\xb8Z1o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc3:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82\x06\x00\x00\x00\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9aO\xbfC4S\xe6\x1f\x00\x00\x00', 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) 3.753743257s ago: executing program 1 (id=5640): unshare(0x1a050300) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0xffffffffffffff9e, 0x20, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)='D', 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r4, 0x2, 0x80, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xe02, 0x1c0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) close_range(r6, 0xffffffffffffffff, 0x0) 3.692608718s ago: executing program 1 (id=5641): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xa}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) 3.692276258s ago: executing program 1 (id=5642): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0xffffffffffffffff}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@errors_remount}, {@nodioread_nolock}]}, 0x3, 0x53e, &(0x7f0000000b40)="$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") pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x10024) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x8000) sendmmsg$inet(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000200)="a389", 0x2}], 0x1, &(0x7f0000002f40)=ANY=[], 0x118}}], 0x1, 0x4004445) 3.07561697s ago: executing program 1 (id=5649): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 3.0584886s ago: executing program 1 (id=5650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x86dd, r3, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 3.038683421s ago: executing program 1 (id=5651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x2, 0xf}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000c80)=ANY=[@ANYBLOB="48030000", @ANYRES8=r0, @ANYBLOB="137000c6000000000000000000000000000063336cc37c60b0ad883e3a4460af74a6c2f2280ae4225811cabdbf3dc9826edae1f6949d97131126905031a0b42d701d98d75bfce17c3a61df8b46e5c3a45fc51ececb842b921ee3ef867d4dace1f825e445832cf7692c819ec43d510c923b6327c44cfe42f7af602ffe8cd3455cc6a81d3e2eedb0906fc7a78d32db36db538ad6d7419f3eb3f6e6fd7d0f57e47eafcdf6da65ecc9330ecb88a6a8d8c31f6dbc2c1a046ada46fbcfd7557536900b58c2a6439298b757d867b68c69aa6e1a3ef9af0b652c765942eb58e4b860b11e52c8a5a1d355", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400faffffff08000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="00001200", @ANYRES32=0x0, @ANYBLOB="bc01028064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004000a000208c1000000040007000800000000108106b282000003000207010001000300020307000000080003070700000040000100240001006c625f74785f686173685f746f5f670000000300000008000400"/149, @ANYBLOB="665e256526d319695ca5521023e281443d3e0b3ae4316223220bfcf8248d", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x348}, 0x1, 0x0, 0x0, 0x800}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe57) unshare(0x64000600) 1.785409466s ago: executing program 3 (id=5696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x86dd, r3, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 1.762280476s ago: executing program 3 (id=5698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 1.732901396s ago: executing program 3 (id=5699): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) 1.687095367s ago: executing program 3 (id=5702): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.206439687s ago: executing program 5 (id=5712): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x8000002}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x3e, 0x6, "ffb648e24d7a1ba0cbb10443b6b3193cdb9f232427fc81d49434cb06c2f08c410dc3ec09156cf829e3969a954533a08747ff8ce22ea6f56eade1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000854}, 0x24000840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f00000008c0), &(0x7f0000000880)=r8}, 0x20) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r9, &(0x7f0000000080)={0x11, 0x1a, r10, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) 878.982843ms ago: executing program 6 (id=5714): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) 878.773433ms ago: executing program 6 (id=5715): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 866.024053ms ago: executing program 6 (id=5716): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 841.309724ms ago: executing program 5 (id=5717): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2d, 0x8, 0x9, 0xdd, 0x58, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x7, 0xfffffffb}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@gettfilter={0x3c, 0x2e, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0xf}, {0xffff, 0xe}, {0xfff2, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x9}, {0x5, 0x8}, {0x4, 0xfff1}}, [{0x8}, {0x8}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') 810.411524ms ago: executing program 3 (id=5718): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 667.289197ms ago: executing program 5 (id=5721): mmap(&(0x7f000061c000/0x1000)=nil, 0x1000, 0x3, 0x40010, 0xffffffffffffffff, 0xffffd000) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffb, @empty, 'wg1\x00'}}, 0x1e) close(r0) 666.676107ms ago: executing program 6 (id=5722): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_secret(0x80000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a3100000000140007800500"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r3 = socket$netlink(0x10, 0x3, 0x10) flock(0xffffffffffffffff, 0x5) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x3) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 653.481587ms ago: executing program 3 (id=5723): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_secret(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x40, 0x9, 0x8}) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mq_timedreceive(r2, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r1], 0x48) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r5, 0x111, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0/file0/file0\x00'}, 0x6e) 643.672957ms ago: executing program 5 (id=5724): timer_create(0x1, 0x0, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200f2a7ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) timer_getoverrun(0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 531.39511ms ago: executing program 2 (id=5726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r0, @ANYRES16, @ANYRESDEC=r1, @ANYBLOB="2fd1e2b585401e347bcbd4414e6aa1247062edb39b893f4750473b2e2492a314ff34ef7a9712ba8e309d39019d76ede3e14238c83e49a094657871c5ae268240680101b13db03c869de07decbe36ab85ae6582fa2d1427f195b21091de5c9b879246c5bb872ee0866cf09834961fea31c2672d6d04", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES16=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=' ', 0x1}], 0x1, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x20000080}}], 0x1, 0xc001) accept4(r6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a09040000000000000000020200002c000480280001800e000100696d6d65646961746500000014000280080001400000000f08000280040001000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0xa00, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000140)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) r10 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x1ad2, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000e10400000000000000000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800008f97b8cadb9b41753a000000000000000000c6d7734062319c0d6d657a9f57000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x2b}, 0x90) epoll_ctl$EPOLL_CTL_DEL(r13, 0x2, r13) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r15, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r16, &(0x7f0000000140)='./file0\x00') 417.191812ms ago: executing program 5 (id=5727): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 304.164474ms ago: executing program 6 (id=5728): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3810000018140100000000000000000008003e140000000008000100010000000800030a790000010000000000"], 0x38}, 0x1, 0xf00, 0x0, 0x2000884d}, 0xc076118a1fe0728f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000001f00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) open(0x0, 0x64842, 0x389b0d52417bb201) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000980)=0x10000, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="7379737468865921d255d048d7af25656d2e68000000000000"], &(0x7f00000008c0)=""/175, 0xaf) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x4, 0x8000000}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x3, @time={0x0, 0x7f}, 0x4, {0x0, 0x9}, 0x4, 0x1, 0x1}) sendmsg$nl_route_sched(r5, 0x0, 0x4004050) fchdir(0xffffffffffffffff) 288.960814ms ago: executing program 5 (id=5729): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 253.592225ms ago: executing program 2 (id=5730): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) clock_adjtime(0x3, &(0x7f0000000040)={0xf4b, 0x0, 0x0, 0xfffffffffffffffc, 0x4000000000000, 0x0, 0x0, 0x4, 0x10001, 0x4000000000201, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x2, 0x102, 0x0, 0x1000000000, 0x104, 0x2}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_getevents(0x0, 0x100000001, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24d2f21ec0816b8eab1f3fe722000040", @ANYRESOCT=0x0, @ANYBLOB="210027bd7000fbdbdf250400000008000700e00000010800020003000000"], 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000080ffff00009500"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000206030300000000000000000700f9ff"], 0x14}}, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 206.699236ms ago: executing program 2 (id=5731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000100)}, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x1, 0x8, 0x200, 0x2, 0x7}, 0x7, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x9, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x5, 0x0, 0x80, 0x9, 0x30, 0x4, 0x81, 0x9, 0x2, 0x8, 0x40, 0xe80c, 0x80000001, 0x80, 0x400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x200, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x5, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0x3, 0x80000001, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x800, 0xfff, 0x2, 0x5, 0x6, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0xf, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x6, 0x2, 0x3, 0x5, 0x1, 0x8001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x6, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x6, 0x3, 0x7fffffff, 0x8, 0x0, 0x7fd, 0x8, 0x91e, 0x4, 0xe, 0xdd, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x6, 0x8, 0x100, 0x8, 0x0, 0xd, 0x2, 0x9, 0x4, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x20000, 0xfffffffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x9, 0x2, 0x20c, 0x10001, 0x4, 0xa, 0xfff, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x4, 0x40, 0x5, 0x6, 0x2ed, 0xfffffffb, 0xcf30, 0x7, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x2, 0x8, 0xc, 0x3, 0x1, 0x0, 0x3, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x0) 150.153537ms ago: executing program 2 (id=5732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x2, 0xf}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000c80)=ANY=[@ANYBLOB="48030000", @ANYRES8=r0, @ANYBLOB="137000c6000000000000000000000000000063336cc37c60b0ad883e3a4460af74a6c2f2280ae4225811cabdbf3dc9826edae1f6949d97131126905031a0b42d701d98d75bfce17c3a61df8b46e5c3a45fc51ececb842b921ee3ef867d4dace1f825e445832cf7692c819ec43d510c923b6327c44cfe42f7af602ffe8cd3455cc6a81d3e2eedb0906fc7a78d32db36db538ad6d7419f3eb3f6e6fd7d0f57e47eafcdf6da65ecc9330ecb88a6a8d8c31f6dbc2c1a046ada46fbcfd7557536900b58c2a6439298b757d867b68c69aa6e1a3ef9af0b652c765942eb58e4b860b11e52c8a5a1d355", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400faffffff08000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="00001200", @ANYRES32=0x0, @ANYBLOB="bc01028064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004000a000208c1000000040007000800000000108106b282000003000207010001000300020307000000080003070700000040000100240001006c625f74785f686173685f746f5f670000000300000008000400"/149, @ANYBLOB="665e256526d319695ca5521023e281443d3e0b3ae4316223220bfcf8248d", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x348}, 0x1, 0x0, 0x0, 0x800}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe57) unshare(0x64000600) 45.211359ms ago: executing program 2 (id=5733): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffb, @empty, 'wg1\x00'}}, 0x1e) close(r0) 41.302009ms ago: executing program 6 (id=5734): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3810000018140100000000000000000008003e140000000008000100010000000800030a790000010000000000"], 0x38}, 0x1, 0xf00, 0x0, 0x2000884d}, 0xc076118a1fe0728f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000001f00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) open(0x0, 0x64842, 0x389b0d52417bb201) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r5, &(0x7f0000000a80)=ANY=[@ANYBLOB="7379737468865921d255d048d7af25656d2e68000000000000"], &(0x7f00000008c0)=""/175, 0xaf) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x4, 0x8000000}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x3, @time={0x0, 0x7f}, 0x4, {0x0, 0x9}, 0x4, 0x1, 0x1}) sendmsg$nl_route_sched(r6, 0x0, 0x4004050) fchdir(0xffffffffffffffff) 0s ago: executing program 2 (id=5735): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): audit: type=1326 audit(1758143756.855:29381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.2.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 145.276865][ T29] audit: type=1326 audit(1758143756.875:29382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.2.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 145.300814][ T29] audit: type=1326 audit(1758143756.875:29383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.2.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 145.306619][T15393] tmpfs: Bad value for 'mpol' [ 145.324500][ T29] audit: type=1326 audit(1758143756.875:29384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.2.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 145.352867][ T29] audit: type=1326 audit(1758143756.875:29385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.2.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 145.371205][T15420] IPv6: Can't replace route, no match found [ 145.376649][ T29] audit: type=1326 audit(1758143756.875:29386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.2.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 145.408232][ T29] audit: type=1326 audit(1758143756.935:29387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.2.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 145.432473][ T29] audit: type=1326 audit(1758143756.935:29388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15392 comm="syz.2.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 145.531981][T15434] sch_fq: defrate 0 ignored. [ 145.838760][T15447] raw_sendmsg: syz.6.4159 forgot to set AF_INET. Fix it! [ 145.853199][T15456] tmpfs: Bad value for 'mpol' [ 145.914033][T15462] validate_nla: 7 callbacks suppressed [ 145.914093][T15462] netlink: 'syz.2.4163': attribute type 10 has an invalid length. [ 145.948067][T15462] bond0: (slave dummy0): Releasing backup interface [ 145.990458][T15462] team0: Port device dummy0 added [ 146.049129][T15462] netlink: 'syz.2.4163': attribute type 10 has an invalid length. [ 146.082287][T15462] team0: Port device dummy0 removed [ 146.117093][T15462] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.139965][T15484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.150171][T15484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.237807][T15493] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 146.270220][T15493] SELinux: failed to load policy [ 146.279224][T15496] FAULT_INJECTION: forcing a failure. [ 146.279224][T15496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.292312][T15496] CPU: 0 UID: 0 PID: 15496 Comm: syz.3.4175 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 146.292344][T15496] Tainted: [W]=WARN [ 146.292351][T15496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.292383][T15496] Call Trace: [ 146.292390][T15496] [ 146.292399][T15496] __dump_stack+0x1d/0x30 [ 146.292418][T15496] dump_stack_lvl+0xe8/0x140 [ 146.292439][T15496] dump_stack+0x15/0x1b [ 146.292497][T15496] should_fail_ex+0x265/0x280 [ 146.292517][T15496] should_fail+0xb/0x20 [ 146.292535][T15496] should_fail_usercopy+0x1a/0x20 [ 146.292560][T15496] strncpy_from_user+0x25/0x230 [ 146.292653][T15496] ? __fget_files+0x184/0x1c0 [ 146.292678][T15496] __se_sys_add_key+0x86/0x350 [ 146.292704][T15496] __x64_sys_add_key+0x67/0x80 [ 146.292726][T15496] x64_sys_call+0x28c4/0x2ff0 [ 146.292841][T15496] do_syscall_64+0xd2/0x200 [ 146.292867][T15496] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.292888][T15496] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.292918][T15496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.292987][T15496] RIP: 0033:0x7ff57feaeba9 [ 146.293002][T15496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.293020][T15496] RSP: 002b:00007ff57e90f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 146.293041][T15496] RAX: ffffffffffffffda RBX: 00007ff5800f5fa0 RCX: 00007ff57feaeba9 [ 146.293055][T15496] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000200000000040 [ 146.293068][T15496] RBP: 00007ff57e90f090 R08: 000000000f92e7c5 R09: 0000000000000000 [ 146.293079][T15496] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 146.293097][T15496] R13: 00007ff5800f6038 R14: 00007ff5800f5fa0 R15: 00007ffc93c5a118 [ 146.293113][T15496] [ 146.477944][T15489] pim6reg: left allmulticast mode [ 146.579137][T15511] tmpfs: Bad value for 'mpol' [ 146.655914][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4182'. [ 146.767734][T15534] netlink: 'syz.6.4188': attribute type 10 has an invalid length. [ 146.781002][T15534] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.830366][T15541] IPv6: Can't replace route, no match found [ 146.896747][T15546] loop6: detected capacity change from 0 to 164 [ 146.904991][T15546] syz.6.4192: attempt to access beyond end of device [ 146.904991][T15546] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.925201][T15546] syz.6.4192: attempt to access beyond end of device [ 146.925201][T15546] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.978238][T15553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.987809][T15553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.002064][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.011958][T15546] tmpfs: Bad value for 'mpol' [ 147.013249][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.108424][T15582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4202'. [ 147.117526][T15582] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4202'. [ 147.119562][T15584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.126925][T15582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4202'. [ 147.136397][T15584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.152411][T15582] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4202'. [ 147.161200][T15584] loop6: detected capacity change from 0 to 128 [ 147.161585][T15582] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4202'. [ 147.237845][T15598] bond0: (slave dummy0): Releasing backup interface [ 147.291730][T15598] team0: Unable to change to the same mode the team is in [ 147.347181][T15606] netlink: 'syz.2.4210': attribute type 10 has an invalid length. [ 147.357075][T15606] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.462150][T15618] bond0: (slave dummy0): Releasing backup interface [ 147.494197][T15618] team0: Unable to change to the same mode the team is in [ 147.524591][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4216'. [ 147.625325][T15635] bond0: (slave dummy0): Releasing backup interface [ 147.658227][T15635] team0: Unable to change to the same mode the team is in [ 147.830686][T15659] loop6: detected capacity change from 0 to 512 [ 147.848888][T15659] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 147.877054][T15659] EXT4-fs (loop6): orphan cleanup on readonly fs [ 147.889686][T15659] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4226: corrupted inode contents [ 147.902234][T15659] EXT4-fs (loop6): Remounting filesystem read-only [ 147.909211][T15659] EXT4-fs (loop6): 1 truncate cleaned up [ 147.914993][ T5216] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 147.925644][ T5216] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 147.936859][ T5216] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 147.991475][T15667] IPv6: Can't replace route, no match found [ 148.017632][T15668] usb usb8: usbfs: process 15668 (syz.5.4224) did not claim interface 0 before use [ 148.300994][T15659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.333975][T15699] __nla_validate_parse: 1 callbacks suppressed [ 148.333990][T15699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4233'. [ 148.350411][T12230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.423652][T15714] netlink: 'syz.6.4236': attribute type 10 has an invalid length. [ 148.434573][T15714] bond0: (slave dummy0): Releasing backup interface [ 148.444788][T15714] team0: Port device dummy0 added [ 148.452563][T15714] netlink: 'syz.6.4236': attribute type 10 has an invalid length. [ 148.463436][T15714] team0: Port device dummy0 removed [ 148.471638][T15714] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.505223][T15722] loop6: detected capacity change from 0 to 164 [ 148.514242][T15722] syz.6.4238: attempt to access beyond end of device [ 148.514242][T15722] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 148.529669][T15722] syz.6.4238: attempt to access beyond end of device [ 148.529669][T15722] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 148.549407][T15726] IPv6: Can't replace route, no match found [ 148.573599][T15730] sch_fq: defrate 0 ignored. [ 148.574338][T15728] netlink: 'syz.2.4240': attribute type 29 has an invalid length. [ 148.599786][T15722] tmpfs: Bad value for 'mpol' [ 148.689259][T15749] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4243'. [ 148.756351][T15758] netlink: 'syz.6.4248': attribute type 10 has an invalid length. [ 148.767948][T15758] bond0: (slave dummy0): Releasing backup interface [ 148.783170][T15758] team0: Port device dummy0 added [ 148.795615][T15758] netlink: 'syz.6.4248': attribute type 10 has an invalid length. [ 148.799342][T15759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4249'. [ 148.820946][T15758] team0: Port device dummy0 removed [ 148.847222][T15758] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.875372][T15769] sch_fq: defrate 0 ignored. [ 148.917657][T15779] FAULT_INJECTION: forcing a failure. [ 148.917657][T15779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.923971][T15777] tipc: Started in network mode [ 148.930785][T15779] CPU: 1 UID: 0 PID: 15779 Comm: syz.6.4253 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.930815][T15779] Tainted: [W]=WARN [ 148.930821][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.930834][T15779] Call Trace: [ 148.930914][T15779] [ 148.930921][T15779] __dump_stack+0x1d/0x30 [ 148.930943][T15779] dump_stack_lvl+0xe8/0x140 [ 148.930961][T15779] dump_stack+0x15/0x1b [ 148.930977][T15779] should_fail_ex+0x265/0x280 [ 148.931082][T15779] should_fail+0xb/0x20 [ 148.931101][T15779] should_fail_usercopy+0x1a/0x20 [ 148.931178][T15779] _copy_from_user+0x1c/0xb0 [ 148.931234][T15779] ___sys_sendmsg+0xc1/0x1d0 [ 148.931271][T15779] __x64_sys_sendmsg+0xd4/0x160 [ 148.931298][T15779] x64_sys_call+0x191e/0x2ff0 [ 148.931319][T15779] do_syscall_64+0xd2/0x200 [ 148.931350][T15779] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.931373][T15779] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 148.931439][T15779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.931461][T15779] RIP: 0033:0x7f521b62eba9 [ 148.931478][T15779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.931515][T15779] RSP: 002b:00007f521a097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.931534][T15779] RAX: ffffffffffffffda RBX: 00007f521b875fa0 RCX: 00007f521b62eba9 [ 148.931547][T15779] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000004 [ 148.931560][T15779] RBP: 00007f521a097090 R08: 0000000000000000 R09: 0000000000000000 [ 148.931573][T15779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.931589][T15779] R13: 00007f521b876038 R14: 00007f521b875fa0 R15: 00007ffe2ee39698 [ 148.931608][T15779] [ 149.022400][T15789] netlink: 'syz.6.4258': attribute type 10 has an invalid length. [ 149.023935][T15777] tipc: Node identity 8e7543b14e9, cluster identity 4711 [ 149.126474][T15777] tipc: Enabled bearer , priority 0 [ 149.136942][T15790] xfrm0: entered promiscuous mode [ 149.142028][T15790] xfrm0: entered allmulticast mode [ 149.166442][T15777] tipc: Resetting bearer [ 149.197780][T15775] tipc: Disabling bearer [ 149.214847][T15803] bond0: (slave dummy0): Releasing backup interface [ 149.247184][T15803] team0: Port device dummy0 added [ 149.252898][T15809] sch_fq: defrate 0 ignored. [ 149.281294][T15810] team0: Port device dummy0 removed [ 149.306494][T15810] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.317429][T15814] FAULT_INJECTION: forcing a failure. [ 149.317429][T15814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.330787][T15814] CPU: 0 UID: 0 PID: 15814 Comm: syz.5.4267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.330925][T15814] Tainted: [W]=WARN [ 149.330932][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.330945][T15814] Call Trace: [ 149.330951][T15814] [ 149.330959][T15814] __dump_stack+0x1d/0x30 [ 149.331015][T15814] dump_stack_lvl+0xe8/0x140 [ 149.331034][T15814] dump_stack+0x15/0x1b [ 149.331052][T15814] should_fail_ex+0x265/0x280 [ 149.331247][T15814] should_fail+0xb/0x20 [ 149.331276][T15814] should_fail_usercopy+0x1a/0x20 [ 149.331369][T15814] _copy_from_iter+0xd2/0xe80 [ 149.331398][T15814] ? __build_skb_around+0x1a0/0x200 [ 149.331458][T15814] ? __alloc_skb+0x223/0x320 [ 149.331507][T15814] netlink_sendmsg+0x471/0x6b0 [ 149.331535][T15814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.331560][T15814] __sock_sendmsg+0x145/0x180 [ 149.331586][T15814] ____sys_sendmsg+0x31e/0x4e0 [ 149.331657][T15814] ___sys_sendmsg+0x17b/0x1d0 [ 149.331765][T15814] __x64_sys_sendmsg+0xd4/0x160 [ 149.331789][T15814] x64_sys_call+0x191e/0x2ff0 [ 149.331808][T15814] do_syscall_64+0xd2/0x200 [ 149.331915][T15814] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.331939][T15814] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.331965][T15814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.331997][T15814] RIP: 0033:0x7f577aa9eba9 [ 149.332014][T15814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.332030][T15814] RSP: 002b:00007f57794ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.332122][T15814] RAX: ffffffffffffffda RBX: 00007f577ace5fa0 RCX: 00007f577aa9eba9 [ 149.332135][T15814] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 149.332148][T15814] RBP: 00007f57794ff090 R08: 0000000000000000 R09: 0000000000000000 [ 149.332162][T15814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.332174][T15814] R13: 00007f577ace6038 R14: 00007f577ace5fa0 R15: 00007ffdc4ccb018 [ 149.332192][T15814] [ 149.575717][T15822] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.608787][T15825] loop6: detected capacity change from 0 to 512 [ 149.661566][T15825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.676601][T15825] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.703140][T15825] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4272: corrupted inode contents [ 149.729679][T15825] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.4272: mark_inode_dirty error [ 149.735595][T15850] sch_fq: defrate 0 ignored. [ 149.747868][T15825] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.4272: corrupted inode contents [ 149.775768][T15825] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4272: mark_inode_dirty error [ 149.827899][T15825] bond0: (slave dummy0): Releasing backup interface [ 149.862350][T15858] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.902085][T15862] tmpfs: Bad value for 'mpol' [ 149.915206][T15825] team0: Unable to change to the same mode the team is in [ 149.983869][T15875] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4290'. [ 150.021548][T12230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.035241][T15908] sch_fq: defrate 0 ignored. [ 150.092615][ T29] kauditd_printk_skb: 1387 callbacks suppressed [ 150.092632][ T29] audit: type=1326 audit(1758143761.715:30770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 150.105099][T15926] loop6: detected capacity change from 0 to 512 [ 150.123120][ T29] audit: type=1326 audit(1758143761.715:30771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 150.152865][ T29] audit: type=1326 audit(1758143761.715:30772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 150.176486][ T29] audit: type=1326 audit(1758143761.715:30773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 150.200085][ T29] audit: type=1326 audit(1758143761.715:30774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 150.223678][ T29] audit: type=1326 audit(1758143761.715:30775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 150.247345][ T29] audit: type=1326 audit(1758143761.715:30776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 150.271027][ T29] audit: type=1326 audit(1758143761.715:30777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 150.284698][T15926] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 150.294807][ T29] audit: type=1326 audit(1758143761.715:30778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f521b62d510 code=0x7ffc0000 [ 150.304961][T15926] EXT4-fs (loop6): orphan cleanup on readonly fs [ 150.326426][ T29] audit: type=1326 audit(1758143761.715:30779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 150.338257][T15926] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4297: corrupted inode contents [ 150.368931][T15926] EXT4-fs (loop6): Remounting filesystem read-only [ 150.375508][T15926] EXT4-fs (loop6): 1 truncate cleaned up [ 150.404524][ T5218] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 150.415132][ T5218] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 150.426341][ T5218] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 150.446123][T15926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.549433][T12230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.656962][T15970] usb usb8: usbfs: process 15970 (syz.2.4305) did not claim interface 0 before use [ 150.730106][T15961] sch_fq: defrate 0 ignored. [ 150.836555][T15984] bond0: (slave dummy0): Releasing backup interface [ 150.957084][T15992] team0: Unable to change to the same mode the team is in [ 151.107451][T15998] SELinux: ebitmap: truncated map [ 151.126219][T15998] SELinux: failed to load policy [ 151.132546][T15998] pim6reg: left allmulticast mode [ 151.193724][T16012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.210166][T16012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.231239][T16020] pim6reg: left allmulticast mode [ 151.251668][T16025] sch_fq: defrate 0 ignored. [ 151.894615][T16056] sch_fq: defrate 0 ignored. [ 151.972012][T16060] pim6reg: entered allmulticast mode [ 152.161251][T16074] bond0: (slave dummy0): Releasing backup interface [ 152.200626][T16077] team0: Unable to change to the same mode the team is in [ 152.271760][T16081] loop9: detected capacity change from 0 to 7 [ 152.281817][T16085] sch_fq: defrate 0 ignored. [ 152.290656][T16083] validate_nla: 8 callbacks suppressed [ 152.290671][T16083] netlink: 'syz.1.4346': attribute type 10 has an invalid length. [ 152.296973][ T3289] buffer_io_error: 20 callbacks suppressed [ 152.296986][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.318059][T16083] bond0: (slave dummy0): Releasing backup interface [ 152.319449][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.332570][ T3289] loop9: unable to read partition table [ 152.349545][T16081] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.360496][T16091] netlink: 'syz.1.4346': attribute type 10 has an invalid length. [ 152.371697][T16083] team0: Port device dummy0 added [ 152.389036][T16081] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.397004][T16081] loop9: unable to read partition table [ 152.412839][T16097] tmpfs: Bad value for 'mpol' [ 152.414407][T16091] team0: Port device dummy0 removed [ 152.422831][T16081] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 152.422831][T16081] ) failed (rc=-5) [ 152.438013][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.452945][T16091] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 152.462395][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.482563][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.507777][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.545910][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.694165][T16113] bond0: (slave dummy0): Releasing backup interface [ 152.729909][T16122] team0: Unable to change to the same mode the team is in [ 152.756597][T16125] sch_fq: defrate 0 ignored. [ 152.768119][T16123] team0: Unable to change to the same mode the team is in [ 152.840777][T16131] tmpfs: Bad value for 'mpol' [ 152.951116][T16176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.964223][T16176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.972625][T16183] sch_fq: defrate 0 ignored. [ 153.052866][T16191] IPv6: Can't replace route, no match found [ 153.053449][T16178] team0: Unable to change to the same mode the team is in [ 153.140167][T16193] tmpfs: Bad value for 'mpol' [ 153.211904][T16216] sch_fq: defrate 0 ignored. [ 153.242663][T16222] netlink: 'syz.2.4388': attribute type 10 has an invalid length. [ 153.262465][T16224] IPv6: Can't replace route, no match found [ 153.326682][T16230] block device autoloading is deprecated and will be removed. [ 153.340438][T16254] tmpfs: Bad value for 'mpol' [ 153.543177][T16277] netlink: 'syz.2.4401': attribute type 10 has an invalid length. [ 153.551448][T16279] IPv6: Can't replace route, no match found [ 153.575239][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4405'. [ 153.584174][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4405'. [ 153.630468][T16283] tmpfs: Bad value for 'mpol' [ 153.635697][T16292] bond0: (slave dummy0): Releasing backup interface [ 153.702736][T16304] team0: Unable to change to the same mode the team is in [ 153.714121][T16308] netlink: 'syz.1.4413': attribute type 10 has an invalid length. [ 153.720778][T16312] IPv6: Can't replace route, no match found [ 153.724926][T16308] team0: Port device dummy0 added [ 153.735926][T16308] netlink: 'syz.1.4413': attribute type 10 has an invalid length. [ 153.745592][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4414'. [ 153.770592][T16308] team0: Port device dummy0 removed [ 153.780245][T16308] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.868385][T16315] pim6reg: entered allmulticast mode [ 153.945499][T16338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4425'. [ 153.959651][T16330] tmpfs: Bad value for 'mpol' [ 153.986313][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4427'. [ 154.015916][T16342] tmpfs: Bad value for 'mpol' [ 154.229698][T16387] sch_fq: defrate 0 ignored. [ 154.275681][T16395] tmpfs: Bad value for 'mpol' [ 154.382912][T16412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4448'. [ 154.495221][T16417] team0: Unable to change to the same mode the team is in [ 154.664029][T16433] tmpfs: Bad value for 'mpol' [ 154.712501][T16454] pim6reg: entered allmulticast mode [ 154.736380][T16453] loop9: detected capacity change from 0 to 7 [ 154.743141][T16453] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.753283][T16453] loop9: unable to read partition table [ 154.762143][T16453] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 154.762143][T16453] ) failed (rc=-5) [ 154.857939][T16475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4465'. [ 155.096412][ T29] kauditd_printk_skb: 1902 callbacks suppressed [ 155.096444][ T29] audit: type=1326 audit(1758143766.725:32676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.2.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 155.127251][ T29] audit: type=1326 audit(1758143766.725:32677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.6.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 155.151056][ T29] audit: type=1326 audit(1758143766.725:32678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.6.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 155.174823][ T29] audit: type=1326 audit(1758143766.725:32679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.6.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 155.198447][ T29] audit: type=1326 audit(1758143766.755:32680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.6.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 155.222231][ T29] audit: type=1326 audit(1758143766.755:32681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.2.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 155.246041][ T29] audit: type=1326 audit(1758143766.755:32682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.6.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 155.269716][ T29] audit: type=1326 audit(1758143766.755:32683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.6.4475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 155.293282][ T29] audit: type=1326 audit(1758143766.755:32684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.2.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 155.316853][ T29] audit: type=1326 audit(1758143766.755:32685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16522 comm="syz.2.4476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 155.344581][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4475'. [ 155.354574][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'. [ 155.487681][T16535] team0: Unable to change to the same mode the team is in [ 155.497498][T16534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4480'. [ 155.610818][T16547] pim6reg: entered allmulticast mode [ 155.717945][T16574] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 155.727458][T16574] smc: net device bond0 applied user defined pnetid SYZ0 [ 155.735115][T16574] smc: net device bond0 erased user defined pnetid SYZ0 [ 155.742821][T16574] SELinux: Context system_u:object_r:dmidecode_exec_t:s0 is not valid (left unmapped). [ 155.805792][T16578] netlink: 'syz.5.4495': attribute type 10 has an invalid length. [ 155.816584][T16582] usb usb8: usbfs: process 16582 (syz.2.4485) did not claim interface 0 before use [ 155.912646][T16581] syz.1.4492 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 155.931937][T16578] team0: Port device dummy0 added [ 156.147041][T16592] team0: Unable to change to the same mode the team is in [ 156.342545][T16612] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 156.353053][T16612] SELinux: failed to load policy [ 156.359376][T16612] pim6reg: left allmulticast mode [ 156.439265][T16622] netlink: 'syz.2.4507': attribute type 10 has an invalid length. [ 156.448854][T16622] team0: Port device dummy0 added [ 156.660815][T16653] netlink: 'syz.6.4518': attribute type 10 has an invalid length. [ 156.671923][T16653] team0: Port device dummy0 added [ 156.707310][T16657] tmpfs: Bad value for 'mpol' [ 156.729625][T16667] FAULT_INJECTION: forcing a failure. [ 156.729625][T16667] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.737060][T16669] netlink: 'syz.6.4524': attribute type 10 has an invalid length. [ 156.743505][T16667] CPU: 0 UID: 0 PID: 16667 Comm: syz.2.4523 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.743536][T16667] Tainted: [W]=WARN [ 156.743543][T16667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.743555][T16667] Call Trace: [ 156.743561][T16667] [ 156.743568][T16667] __dump_stack+0x1d/0x30 [ 156.743589][T16667] dump_stack_lvl+0xe8/0x140 [ 156.743651][T16667] dump_stack+0x15/0x1b [ 156.743667][T16667] should_fail_ex+0x265/0x280 [ 156.743690][T16667] should_fail_alloc_page+0xf2/0x100 [ 156.743716][T16667] __alloc_frozen_pages_noprof+0xff/0x360 [ 156.743792][T16667] alloc_pages_mpol+0xb3/0x250 [ 156.743821][T16667] alloc_pages_noprof+0x90/0x130 [ 156.743850][T16667] ? __pfx_environ_read+0x10/0x10 [ 156.743871][T16667] get_free_pages_noprof+0xc/0x40 [ 156.743911][T16667] environ_read+0x80/0x320 [ 156.743970][T16667] ? __pfx_environ_read+0x10/0x10 [ 156.743990][T16667] vfs_readv+0x3fb/0x690 [ 156.744024][T16667] __x64_sys_preadv+0xfd/0x1c0 [ 156.744098][T16667] x64_sys_call+0x282a/0x2ff0 [ 156.744116][T16667] do_syscall_64+0xd2/0x200 [ 156.744144][T16667] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.744310][T16667] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 156.744350][T16667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.744381][T16667] RIP: 0033:0x7f37529ceba9 [ 156.744397][T16667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.744415][T16667] RSP: 002b:00007f3751437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 156.744433][T16667] RAX: ffffffffffffffda RBX: 00007f3752c15fa0 RCX: 00007f37529ceba9 [ 156.744445][T16667] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000003 [ 156.744457][T16667] RBP: 00007f3751437090 R08: 0000000000000000 R09: 0000000000000000 [ 156.744494][T16667] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 156.744506][T16667] R13: 00007f3752c16038 R14: 00007f3752c15fa0 R15: 00007fff07235fe8 [ 156.744524][T16667] [ 156.976133][T16669] team0: Port device dummy0 removed [ 156.984204][T16669] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 157.068607][T16690] bond0: (slave dummy0): Releasing backup interface [ 157.082860][T16690] team0: Port device dummy0 added [ 157.103561][T16692] tmpfs: Bad value for 'mpol' [ 157.395363][T16726] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.452529][T16732] IPv6: Can't replace route, no match found [ 157.800884][T16749] team0: Port device dummy0 removed [ 157.832097][T16749] team0: Unable to change to the same mode the team is in [ 157.897565][T16755] validate_nla: 2 callbacks suppressed [ 157.897576][T16755] netlink: 'syz.1.4559': attribute type 10 has an invalid length. [ 157.912790][T16755] bond0: (slave dummy0): Releasing backup interface [ 157.926125][T16755] team0: Port device dummy0 added [ 158.010239][T16772] sch_fq: defrate 0 ignored. [ 158.070266][T16781] netlink: 'syz.2.4571': attribute type 10 has an invalid length. [ 158.079989][T16781] team0: Port device dummy0 added [ 158.083881][T16785] netlink: 'syz.5.4572': attribute type 10 has an invalid length. [ 158.086543][T16781] netlink: 'syz.2.4571': attribute type 10 has an invalid length. [ 158.130441][T16790] netlink: 'syz.5.4574': attribute type 10 has an invalid length. [ 158.138718][T16781] team0: Port device dummy0 removed [ 158.152053][T16781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.270841][T16808] sch_fq: defrate 0 ignored. [ 158.301471][T16812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.311281][T16812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.404877][T16828] netlink: 'syz.6.4591': attribute type 10 has an invalid length. [ 158.418264][T16828] netlink: 'syz.6.4591': attribute type 10 has an invalid length. [ 158.427753][T16828] team0: Port device dummy0 removed [ 158.437438][T16828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.439970][T16832] netlink: 'syz.2.4593': attribute type 10 has an invalid length. [ 158.463180][T16832] bond0: (slave dummy0): Releasing backup interface [ 158.474080][T16832] team0: Port device dummy0 added [ 158.481828][T16834] sch_fq: defrate 0 ignored. [ 158.486998][T16836] loop9: detected capacity change from 0 to 7 [ 158.493331][T16836] buffer_io_error: 6 callbacks suppressed [ 158.493343][T16836] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.507353][T16836] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.515259][T16836] loop9: unable to read partition table [ 158.528837][T16836] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 158.528837][T16836] ) failed (rc=-5) [ 158.532614][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.544392][T16832] netlink: 'syz.2.4593': attribute type 10 has an invalid length. [ 158.557463][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.568303][T16832] team0: Port device dummy0 removed [ 158.582600][T16832] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.628844][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.638243][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.650146][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.924854][T16865] netlink: 'syz.2.4605': attribute type 10 has an invalid length. [ 158.935274][T16865] bond0: (slave dummy0): Releasing backup interface [ 158.944971][T16865] team0: Port device dummy0 added [ 158.957261][T16865] team0: Port device dummy0 removed [ 158.965581][T16865] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 159.002867][T16867] sch_fq: defrate 0 ignored. [ 159.052829][T16873] loop9: detected capacity change from 0 to 7 [ 159.061333][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.070202][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.078120][ T3289] loop9: unable to read partition table [ 159.132271][T16873] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.140315][T16873] loop9: unable to read partition table [ 159.146582][T16873] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 159.146582][T16873] ) failed (rc=-5) [ 159.256938][T16882] usb usb8: usbfs: process 16882 (syz.3.4608) did not claim interface 0 before use [ 159.403405][T16887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.441283][T16887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.666395][T16922] sch_fq: defrate 0 ignored. [ 159.975285][T16949] sch_fq: defrate 0 ignored. [ 160.084719][T16961] pim6reg: left allmulticast mode [ 160.114676][ T29] kauditd_printk_skb: 1787 callbacks suppressed [ 160.114699][ T29] audit: type=1326 audit(1758143771.725:34473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.144872][ T29] audit: type=1326 audit(1758143771.735:34474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.168702][ T29] audit: type=1326 audit(1758143771.735:34475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.192363][ T29] audit: type=1326 audit(1758143771.735:34476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.216008][ T29] audit: type=1326 audit(1758143771.735:34477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.240076][ T29] audit: type=1326 audit(1758143771.735:34478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.263703][ T29] audit: type=1326 audit(1758143771.735:34479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.287209][ T29] audit: type=1326 audit(1758143771.735:34480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.311076][ T29] audit: type=1326 audit(1758143771.735:34481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.334599][ T29] audit: type=1326 audit(1758143771.735:34482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.3.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 160.469980][T16974] __nla_validate_parse: 2 callbacks suppressed [ 160.469994][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4640'. [ 160.503311][T16978] sch_fq: defrate 0 ignored. [ 160.531404][T16980] team0: Port device dummy0 added [ 160.675146][T17000] FAULT_INJECTION: forcing a failure. [ 160.675146][T17000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.688365][T17000] CPU: 1 UID: 0 PID: 17000 Comm: syz.6.4653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.688417][T17000] Tainted: [W]=WARN [ 160.688479][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.688490][T17000] Call Trace: [ 160.688497][T17000] [ 160.688503][T17000] __dump_stack+0x1d/0x30 [ 160.688522][T17000] dump_stack_lvl+0xe8/0x140 [ 160.688537][T17000] dump_stack+0x15/0x1b [ 160.688582][T17000] should_fail_ex+0x265/0x280 [ 160.688606][T17000] should_fail+0xb/0x20 [ 160.688628][T17000] should_fail_usercopy+0x1a/0x20 [ 160.688654][T17000] _copy_from_user+0x1c/0xb0 [ 160.688717][T17000] memdup_user+0x5e/0xd0 [ 160.688744][T17000] strndup_user+0x68/0xb0 [ 160.688769][T17000] __se_sys_mount+0x4d/0x2e0 [ 160.688831][T17000] ? fput+0x8f/0xc0 [ 160.688858][T17000] ? ksys_write+0x192/0x1a0 [ 160.688880][T17000] __x64_sys_mount+0x67/0x80 [ 160.688953][T17000] x64_sys_call+0x2b4d/0x2ff0 [ 160.688971][T17000] do_syscall_64+0xd2/0x200 [ 160.688997][T17000] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.689020][T17000] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 160.689137][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.689158][T17000] RIP: 0033:0x7f521b62eba9 [ 160.689173][T17000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.689190][T17000] RSP: 002b:00007f521a097038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.689263][T17000] RAX: ffffffffffffffda RBX: 00007f521b875fa0 RCX: 00007f521b62eba9 [ 160.689277][T17000] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 160.689289][T17000] RBP: 00007f521a097090 R08: 0000200000000240 R09: 0000000000000000 [ 160.689300][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.689310][T17000] R13: 00007f521b876038 R14: 00007f521b875fa0 R15: 00007ffe2ee39698 [ 160.689325][T17000] [ 160.900774][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4654'. [ 160.943853][T17007] sch_fq: defrate 0 ignored. [ 161.014138][T17013] loop9: detected capacity change from 0 to 7 [ 161.022687][ T3289] loop9: unable to read partition table [ 161.032685][T17013] loop9: unable to read partition table [ 161.038660][T17013] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.038660][T17013] ) failed (rc=-5) [ 161.137195][T17016] usb usb8: usbfs: process 17016 (syz.3.4648) did not claim interface 0 before use [ 161.375348][T17025] team0: Port device dummy0 removed [ 161.404876][T17025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.451354][T17033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.460766][T17033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.511919][T17038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.522997][T17038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.580687][T17046] sch_fq: defrate 0 ignored. [ 161.639958][T17054] team0: Port device dummy0 removed [ 161.648112][T17054] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.886738][T17064] usb usb8: usbfs: process 17064 (syz.5.4675) did not claim interface 0 before use [ 162.121600][T17090] IPv6: Can't replace route, no match found [ 162.170019][T17089] pim6reg: entered allmulticast mode [ 162.178214][T17094] sch_fq: defrate 0 ignored. [ 162.254485][T17104] pim6reg: left allmulticast mode [ 162.267644][T17107] bond0: (slave dummy0): Releasing backup interface [ 162.282927][T17107] team0: Port device dummy0 added [ 162.293704][T17107] team0: Port device dummy0 removed [ 162.311577][T17107] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 162.415184][T17121] tmpfs: Bad value for 'mpol' [ 162.462740][T17125] loop9: detected capacity change from 0 to 7 [ 162.469536][ T3289] loop9: unable to read partition table [ 162.476022][T17125] loop9: unable to read partition table [ 162.481906][T17125] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 162.481906][T17125] ) failed (rc=-5) [ 162.584502][T17132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4693'. [ 163.270991][T17146] usb usb8: usbfs: process 17146 (syz.2.4695) did not claim interface 0 before use [ 163.346660][T17149] pim6reg: left allmulticast mode [ 163.572979][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4699'. [ 163.609269][T17199] validate_nla: 9 callbacks suppressed [ 163.609294][T17199] netlink: 'syz.6.4700': attribute type 10 has an invalid length. [ 163.655358][T17199] bond0: (slave dummy0): Releasing backup interface [ 163.663588][T17209] netlink: 'syz.6.4700': attribute type 10 has an invalid length. [ 163.675625][T17199] team0: Port device dummy0 added [ 163.694956][T17202] pim6reg: entered allmulticast mode [ 163.727897][T17209] team0: Port device dummy0 removed [ 163.744281][T17209] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 163.797577][T17219] team0: Port device dummy0 removed [ 163.906766][T17224] usb usb8: usbfs: process 17224 (syz.3.4706) did not claim interface 0 before use [ 163.930319][T17223] SELinux: ebitmap: truncated map [ 163.939599][T17219] team0: Unable to change to the same mode the team is in [ 164.043586][T17223] SELinux: failed to load policy [ 164.120741][T17251] pim6reg: entered allmulticast mode [ 164.168025][T17223] pim6reg: left allmulticast mode [ 164.189337][T17262] tmpfs: Bad value for 'mpol' [ 164.373002][T17275] usb usb8: usbfs: process 17275 (syz.1.4713) did not claim interface 0 before use [ 164.701377][T17304] netlink: 'syz.3.4720': attribute type 10 has an invalid length. [ 164.710957][T17307] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 164.723111][T17304] bond0: (slave dummy0): Releasing backup interface [ 164.736533][T17304] team0: Port device dummy0 added [ 164.742495][T17306] sch_fq: defrate 0 ignored. [ 164.743724][T17304] netlink: 'syz.3.4720': attribute type 10 has an invalid length. [ 164.751716][T17304] team0: Port device dummy0 removed [ 164.754226][T17304] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 164.814499][T17302] geneve2: entered promiscuous mode [ 164.819855][T17302] geneve2: entered allmulticast mode [ 164.834677][T17312] SELinux: ebitmap: truncated map [ 164.840944][T17312] SELinux: failed to load policy [ 164.852645][T17312] pim6reg: entered allmulticast mode [ 164.860824][T17312] pim6reg: left allmulticast mode [ 165.136157][T17352] tmpfs: Bad value for 'mpol' [ 165.256113][ T29] kauditd_printk_skb: 1118 callbacks suppressed [ 165.256127][ T29] audit: type=1326 audit(1758143776.885:35601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.289346][ T29] audit: type=1326 audit(1758143776.885:35602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.313095][ T29] audit: type=1326 audit(1758143776.885:35603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.336898][ T29] audit: type=1326 audit(1758143776.885:35604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.360606][ T29] audit: type=1326 audit(1758143776.885:35605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.384209][ T29] audit: type=1326 audit(1758143776.885:35606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.407964][ T29] audit: type=1326 audit(1758143776.915:35607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.431957][ T29] audit: type=1326 audit(1758143776.915:35608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.432406][T17366] bond0: (slave dummy0): Releasing backup interface [ 165.455705][ T29] audit: type=1326 audit(1758143776.915:35609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.486227][ T29] audit: type=1326 audit(1758143776.915:35610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.5.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 165.532178][T17368] team0: Unable to change to the same mode the team is in [ 165.560364][T17370] loop9: detected capacity change from 0 to 7 [ 165.567334][ T3289] buffer_io_error: 24 callbacks suppressed [ 165.567348][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.581282][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.589234][ T3289] loop9: unable to read partition table [ 165.595266][T17370] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.603961][T17370] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.611851][T17370] loop9: unable to read partition table [ 165.618734][T17370] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 165.618734][T17370] ) failed (rc=-5) [ 165.626291][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.652606][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.669887][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.680303][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.689162][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.719220][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4745'. [ 165.750739][T17392] netlink: 'syz.2.4749': attribute type 1 has an invalid length. [ 165.797317][T17392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.858352][T17438] netlink: 'syz.2.4750': attribute type 10 has an invalid length. [ 165.898057][T17438] bond0: (slave dummy0): Releasing backup interface [ 165.924941][T17438] team0: Port device dummy0 added [ 166.058150][T17448] pim6reg: left allmulticast mode [ 166.369277][T17477] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 166.379011][T17477] SELinux: failed to load policy [ 166.388143][T17477] pim6reg: entered allmulticast mode [ 166.395071][T17477] pim6reg: left allmulticast mode [ 166.444825][T17487] netlink: 'syz.6.4769': attribute type 10 has an invalid length. [ 166.454468][T17487] team0: Port device dummy0 added [ 166.461809][T17487] netlink: 'syz.6.4769': attribute type 10 has an invalid length. [ 166.472374][T17487] team0: Port device dummy0 removed [ 166.480299][T17487] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.862623][T17499] team0: Port device dummy0 removed [ 166.894426][T17499] team0: Unable to change to the same mode the team is in [ 166.960345][T17505] netlink: 'syz.5.4777': attribute type 10 has an invalid length. [ 166.971027][T17501] team0: Unable to change to the same mode the team is in [ 166.982430][T17505] bond0: (slave dummy0): Releasing backup interface [ 166.995651][T17505] team0: Port device dummy0 added [ 167.031375][T17514] netlink: 'syz.5.4781': attribute type 10 has an invalid length. [ 167.044342][T17514] team0: Port device dummy0 removed [ 167.054254][T17514] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 167.100956][T17523] bond0: (slave dummy0): Releasing backup interface [ 167.139326][T17523] team0: Unable to change to the same mode the team is in [ 167.225625][T17536] team0: Port device dummy0 added [ 167.412485][T17552] IPv6: Can't replace route, no match found [ 167.451489][T17554] bond0: (slave dummy0): Releasing backup interface [ 167.499456][T17554] team0: Unable to change to the same mode the team is in [ 167.542507][T17569] bond0: (slave dummy0): Releasing backup interface [ 167.552503][T17569] team0: Port device dummy0 added [ 167.618517][T17581] IPv6: Can't replace route, no match found [ 167.700869][T17592] team0: Port device dummy0 added [ 167.770940][T17597] team0: Port device dummy0 removed [ 167.809654][T17608] team0: Unable to change to the same mode the team is in [ 167.842964][T17614] IPv6: Can't replace route, no match found [ 167.944641][T17629] SELinux: ebitmap: truncated map [ 167.953125][T17629] SELinux: failed to load policy [ 167.962818][T17629] pim6reg: entered allmulticast mode [ 167.969585][T17629] pim6reg: left allmulticast mode [ 168.000031][T17647] IPv6: Can't replace route, no match found [ 168.044700][T17651] pim6reg: left allmulticast mode [ 168.060096][T17656] team0: Port device dummy0 added [ 168.158860][T17680] IPv6: Can't replace route, no match found [ 168.179193][T17682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4846'. [ 168.190606][T17682] loop9: detected capacity change from 0 to 7 [ 168.197299][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.205296][ T3289] loop9: unable to read partition table [ 168.211307][T17682] loop9: unable to read partition table [ 168.217140][T17682] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 168.217140][T17682] ) failed (rc=-5) [ 168.984661][T17737] SELinux: ebitmap: truncated map [ 168.990272][T17737] SELinux: failed to load policy [ 168.999023][T17737] pim6reg: entered allmulticast mode [ 169.005175][T17737] pim6reg: left allmulticast mode [ 169.377326][T17778] usb usb8: usbfs: process 17778 (syz.1.4878) did not claim interface 0 before use [ 169.845425][T17827] validate_nla: 9 callbacks suppressed [ 169.845438][T17827] netlink: 'syz.2.4895': attribute type 10 has an invalid length. [ 169.853969][T17829] netlink: 'syz.3.4896': attribute type 10 has an invalid length. [ 169.859420][T17827] netlink: 'syz.2.4895': attribute type 10 has an invalid length. [ 169.874702][T17829] netlink: 'syz.3.4896': attribute type 10 has an invalid length. [ 169.883258][T17827] team0: Port device dummy0 removed [ 169.891561][T17827] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.900852][T17829] team0: Port device dummy0 removed [ 169.909407][T17829] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 170.016322][T17843] bond0: (slave dummy0): Releasing backup interface [ 170.073068][T17846] team0: Unable to change to the same mode the team is in [ 170.117595][T17848] SELinux: ebitmap: truncated map [ 170.123385][T17848] SELinux: failed to load policy [ 170.132620][T17848] pim6reg: entered allmulticast mode [ 170.139302][T17848] pim6reg: left allmulticast mode [ 170.261891][T17870] sch_fq: defrate 0 ignored. [ 170.290546][ T29] kauditd_printk_skb: 1824 callbacks suppressed [ 170.290561][ T29] audit: type=1326 audit(1758143781.915:37435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 170.327276][ T29] audit: type=1326 audit(1758143781.925:37436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 170.350931][ T29] audit: type=1326 audit(1758143781.925:37437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 170.374536][ T29] audit: type=1326 audit(1758143781.925:37438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 170.398251][ T29] audit: type=1326 audit(1758143781.925:37439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 170.421833][ T29] audit: type=1326 audit(1758143781.925:37440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 170.445511][ T29] audit: type=1326 audit(1758143781.925:37441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 170.469339][ T29] audit: type=1326 audit(1758143781.925:37442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 170.492959][ T29] audit: type=1326 audit(1758143781.955:37443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 170.516648][ T29] audit: type=1326 audit(1758143781.955:37444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.5.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 171.083122][T17882] usb usb8: usbfs: process 17882 (syz.6.4914) did not claim interface 0 before use [ 171.433109][T17930] FAULT_INJECTION: forcing a failure. [ 171.433109][T17930] name failslab, interval 1, probability 0, space 0, times 0 [ 171.446009][T17930] CPU: 0 UID: 0 PID: 17930 Comm: syz.2.4917 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.446037][T17930] Tainted: [W]=WARN [ 171.446043][T17930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.446056][T17930] Call Trace: [ 171.446084][T17930] [ 171.446091][T17930] __dump_stack+0x1d/0x30 [ 171.446111][T17930] dump_stack_lvl+0xe8/0x140 [ 171.446128][T17930] dump_stack+0x15/0x1b [ 171.446142][T17930] should_fail_ex+0x265/0x280 [ 171.446163][T17930] should_failslab+0x8c/0xb0 [ 171.446235][T17930] kmem_cache_alloc_noprof+0x50/0x310 [ 171.446328][T17930] ? dst_alloc+0xbd/0x100 [ 171.446351][T17930] dst_alloc+0xbd/0x100 [ 171.446371][T17930] ? ip_vs_lblcr_schedule+0x212/0x1100 [ 171.446477][T17930] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 171.446538][T17930] ip_route_output_key_hash+0x7a/0xb0 [ 171.446613][T17930] tcp_v4_connect+0x3e2/0xad0 [ 171.446644][T17930] __inet_stream_connect+0x169/0x7e0 [ 171.446668][T17930] ? _raw_spin_unlock_bh+0x36/0x40 [ 171.446766][T17930] ? release_sock+0x116/0x150 [ 171.446917][T17930] ? _raw_spin_unlock_bh+0x36/0x40 [ 171.446939][T17930] ? lock_sock_nested+0x112/0x140 [ 171.446965][T17930] ? selinux_netlbl_socket_connect+0x115/0x130 [ 171.447064][T17930] inet_stream_connect+0x44/0x70 [ 171.447088][T17930] ? __pfx_inet_stream_connect+0x10/0x10 [ 171.447108][T17930] __sys_connect+0x1ef/0x2b0 [ 171.447178][T17930] __x64_sys_connect+0x3f/0x50 [ 171.447198][T17930] x64_sys_call+0x2c08/0x2ff0 [ 171.447216][T17930] do_syscall_64+0xd2/0x200 [ 171.447254][T17930] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.447277][T17930] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.447332][T17930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.447424][T17930] RIP: 0033:0x7f37529ceba9 [ 171.447478][T17930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.447494][T17930] RSP: 002b:00007f3751437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 171.447513][T17930] RAX: ffffffffffffffda RBX: 00007f3752c15fa0 RCX: 00007f37529ceba9 [ 171.447526][T17930] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 171.447607][T17930] RBP: 00007f3751437090 R08: 0000000000000000 R09: 0000000000000000 [ 171.447619][T17930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.447630][T17930] R13: 00007f3752c16038 R14: 00007f3752c15fa0 R15: 00007fff07235fe8 [ 171.447647][T17930] [ 171.722554][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4921'. [ 171.750466][T17943] loop9: detected capacity change from 0 to 7 [ 171.757566][T17940] bond0: (slave dummy0): Releasing backup interface [ 171.777704][T17943] buffer_io_error: 8 callbacks suppressed [ 171.777717][T17943] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.804735][T17948] sch_fq: defrate 0 ignored. [ 171.809696][T17943] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.809953][T17949] team0: Unable to change to the same mode the team is in [ 171.817883][T17943] loop9: unable to read partition table [ 171.839322][T17943] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 171.839322][T17943] ) failed (rc=-5) [ 171.841560][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.867133][T17938] sctp: [Deprecated]: syz.2.4919 (pid 17938) Use of int in max_burst socket option. [ 171.867133][T17938] Use struct sctp_assoc_value instead [ 171.895964][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.904239][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.912657][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 171.921837][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.007256][T17967] netlink: 'syz.6.4928': attribute type 10 has an invalid length. [ 172.018448][T17967] team0: Port device dummy0 added [ 172.027376][T17967] netlink: 'syz.6.4928': attribute type 10 has an invalid length. [ 172.040979][T17967] team0: Port device dummy0 removed [ 172.049375][T17967] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.091709][T17973] SELinux: ebitmap: truncated map [ 172.101567][T17973] SELinux: failed to load policy [ 172.112396][T17973] pim6reg: entered allmulticast mode [ 172.118316][T17973] pim6reg: left allmulticast mode [ 172.204955][T17986] sch_fq: defrate 0 ignored. [ 172.393527][T17997] loop9: detected capacity change from 0 to 7 [ 172.401164][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.409299][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.417233][ T3289] loop9: unable to read partition table [ 172.423082][T17997] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.431587][T17997] loop9: unable to read partition table [ 172.437311][T17997] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 172.437311][T17997] ) failed (rc=-5) [ 172.505980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.526545][T18007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4941'. [ 172.606810][T18015] IPv6: Can't replace route, no match found [ 173.526090][T18091] IPv6: Can't replace route, no match found [ 173.763892][T18097] team0: Unable to change to the same mode the team is in [ 173.806588][T18118] netlink: 'syz.2.4975': attribute type 1 has an invalid length. [ 173.817983][T18111] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4973'. [ 173.828855][T18111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=18111 comm=syz.3.4973 [ 173.873595][T18115] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4974'. [ 174.045714][T18143] team0: Unable to change to the same mode the team is in [ 174.106929][T18161] netlink: 'syz.2.4990': attribute type 1 has an invalid length. [ 174.290517][T18175] team0: Unable to change to the same mode the team is in [ 174.868283][T18243] netlink: 'syz.3.5008': attribute type 10 has an invalid length. [ 174.894874][T18243] team0: Port device dummy0 added [ 174.911276][T18241] team0: Unable to change to the same mode the team is in [ 174.919231][T18243] netlink: 'syz.3.5008': attribute type 10 has an invalid length. [ 174.933811][T18243] team0: Port device dummy0 removed [ 174.949786][T18243] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 175.095508][T18270] FAULT_INJECTION: forcing a failure. [ 175.095508][T18270] name failslab, interval 1, probability 0, space 0, times 0 [ 175.108364][T18270] CPU: 0 UID: 0 PID: 18270 Comm: syz.3.5021 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.108392][T18270] Tainted: [W]=WARN [ 175.108463][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.108488][T18270] Call Trace: [ 175.108495][T18270] [ 175.108549][T18270] __dump_stack+0x1d/0x30 [ 175.108672][T18270] dump_stack_lvl+0xe8/0x140 [ 175.108690][T18270] dump_stack+0x15/0x1b [ 175.108702][T18270] should_fail_ex+0x265/0x280 [ 175.108716][T18270] should_failslab+0x8c/0xb0 [ 175.108755][T18270] kmem_cache_alloc_node_noprof+0x57/0x320 [ 175.108771][T18270] ? __alloc_skb+0x101/0x320 [ 175.108796][T18270] __alloc_skb+0x101/0x320 [ 175.108807][T18270] ? audit_log_start+0x365/0x6c0 [ 175.108863][T18270] audit_log_start+0x380/0x6c0 [ 175.108880][T18270] audit_seccomp+0x48/0x100 [ 175.108894][T18270] ? __seccomp_filter+0x68c/0x10d0 [ 175.108974][T18270] __seccomp_filter+0x69d/0x10d0 [ 175.108987][T18270] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.109002][T18270] ? vfs_write+0x7e8/0x960 [ 175.109017][T18270] __secure_computing+0x82/0x150 [ 175.109029][T18270] syscall_trace_enter+0xcf/0x1e0 [ 175.109045][T18270] do_syscall_64+0xac/0x200 [ 175.109095][T18270] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.109108][T18270] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.109186][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.109198][T18270] RIP: 0033:0x7ff57feaeba9 [ 175.109207][T18270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.109246][T18270] RSP: 002b:00007ff57e90f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 175.109257][T18270] RAX: ffffffffffffffda RBX: 00007ff5800f5fa0 RCX: 00007ff57feaeba9 [ 175.109264][T18270] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 175.109271][T18270] RBP: 00007ff57e90f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.109278][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.109295][T18270] R13: 00007ff5800f6038 R14: 00007ff5800f5fa0 R15: 00007ffc93c5a118 [ 175.109305][T18270] [ 175.332811][T18273] team0: Port device dummy0 removed [ 175.362996][T18278] netlink: 'syz.3.5024': attribute type 10 has an invalid length. [ 175.364271][T18274] team0: Unable to change to the same mode the team is in [ 175.382988][T18278] bond0: (slave dummy0): Releasing backup interface [ 175.402405][T18278] team0: Port device dummy0 added [ 175.414479][T18280] netlink: 'syz.3.5024': attribute type 10 has an invalid length. [ 175.426995][ T29] kauditd_printk_skb: 1445 callbacks suppressed [ 175.427008][ T29] audit: type=1326 audit(1758143787.055:38888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 175.458274][ T29] audit: type=1326 audit(1758143787.055:38889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 175.482121][ T29] audit: type=1326 audit(1758143787.055:38890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 175.506038][ T29] audit: type=1326 audit(1758143787.055:38891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f577aa9d510 code=0x7ffc0000 [ 175.529992][ T29] audit: type=1326 audit(1758143787.055:38892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 175.544890][T18280] team0: Port device dummy0 removed [ 175.553696][ T29] audit: type=1326 audit(1758143787.055:38893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 175.564257][T18280] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 175.582598][ T29] audit: type=1326 audit(1758143787.055:38894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 175.582625][ T29] audit: type=1326 audit(1758143787.055:38895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 175.639216][ T29] audit: type=1326 audit(1758143787.055:38896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 175.663240][ T29] audit: type=1326 audit(1758143787.055:38897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18279 comm="syz.5.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f577aa9eba9 code=0x7ffc0000 [ 175.735636][T18287] team0: Unable to change to the same mode the team is in [ 176.245814][T18334] netlink: 'syz.5.5037': attribute type 10 has an invalid length. [ 176.258000][T18334] team0: Port device dummy0 added [ 176.267723][T18334] netlink: 'syz.5.5037': attribute type 10 has an invalid length. [ 176.280034][T18334] team0: Port device dummy0 removed [ 176.288505][T18334] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 176.361651][T18341] rdma_op ffff88812507fd80 conn xmit_rdma 0000000000000000 [ 176.391011][T18340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5039'. [ 176.910907][T18379] loop9: detected capacity change from 0 to 7 [ 176.917263][T18379] buffer_io_error: 6 callbacks suppressed [ 176.917274][T18379] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.931639][T18379] Buffer I/O error on dev loop9, logical block 0, async page read [ 176.939625][T18379] loop9: unable to read partition table [ 176.947827][T18379] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 176.947827][T18379] ) failed (rc=-5) [ 176.948909][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.004503][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.014689][T18385] netlink: 'wޣ': attribute type 1 has an invalid length. [ 177.022846][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.039537][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.058098][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.106885][T18392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5055'. [ 177.204445][T18417] netlink: 'wޣ': attribute type 1 has an invalid length. [ 177.379549][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5067'. [ 177.635670][T18458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5073'. [ 177.789786][T18474] bond0: (slave dummy0): Releasing backup interface [ 177.889865][T18479] team0: Unable to change to the same mode the team is in [ 178.048900][T18492] loop9: detected capacity change from 0 to 7 [ 178.057036][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.076673][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.084543][ T3289] loop9: unable to read partition table [ 178.119736][T18492] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.171602][T18492] loop9: unable to read partition table [ 178.186626][T18492] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 178.186626][T18492] ) failed (rc=-5) [ 178.258450][T18507] netlink: 'syz.6.5088': attribute type 10 has an invalid length. [ 178.269324][T18507] bond0: (slave dummy0): Releasing backup interface [ 178.279056][T18507] team0: Port device dummy0 added [ 178.298246][T18512] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5089'. [ 178.309280][T18507] netlink: 'syz.6.5088': attribute type 10 has an invalid length. [ 178.323116][T18507] team0: Port device dummy0 removed [ 178.333533][T18507] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 178.366990][T18524] FAULT_INJECTION: forcing a failure. [ 178.366990][T18524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.380163][T18524] CPU: 0 UID: 0 PID: 18524 Comm: syz.6.5093 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.380191][T18524] Tainted: [W]=WARN [ 178.380197][T18524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.380295][T18524] Call Trace: [ 178.380301][T18524] [ 178.380309][T18524] __dump_stack+0x1d/0x30 [ 178.380331][T18524] dump_stack_lvl+0xe8/0x140 [ 178.380347][T18524] dump_stack+0x15/0x1b [ 178.380361][T18524] should_fail_ex+0x265/0x280 [ 178.380432][T18524] should_fail+0xb/0x20 [ 178.380451][T18524] should_fail_usercopy+0x1a/0x20 [ 178.380473][T18524] _copy_from_user+0x1c/0xb0 [ 178.380501][T18524] __sys_bind+0x106/0x2a0 [ 178.380523][T18524] __x64_sys_bind+0x3f/0x50 [ 178.380593][T18524] x64_sys_call+0x2b6e/0x2ff0 [ 178.380605][T18524] do_syscall_64+0xd2/0x200 [ 178.380623][T18524] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 178.380636][T18524] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.380660][T18524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.380672][T18524] RIP: 0033:0x7f521b62eba9 [ 178.380704][T18524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.380714][T18524] RSP: 002b:00007f521a097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 178.380726][T18524] RAX: ffffffffffffffda RBX: 00007f521b875fa0 RCX: 00007f521b62eba9 [ 178.380733][T18524] RDX: 000000000000006e RSI: 0000200000000200 RDI: 0000000000000004 [ 178.380740][T18524] RBP: 00007f521a097090 R08: 0000000000000000 R09: 0000000000000000 [ 178.380815][T18524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.380822][T18524] R13: 00007f521b876038 R14: 00007f521b875fa0 R15: 00007ffe2ee39698 [ 178.380832][T18524] [ 178.587092][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5094'. [ 178.714967][T18559] loop9: detected capacity change from 0 to 7 [ 178.761325][T18562] SELinux: failed to load policy [ 178.785988][T18559] loop9: unable to read partition table [ 178.802386][T18559] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 178.802386][T18559] ) failed (rc=-5) [ 178.820693][T18549] bond0: (slave dummy0): Releasing backup interface [ 178.914609][T18563] team0: Unable to change to the same mode the team is in [ 178.929135][T18567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5107'. [ 179.381375][T18617] team0: Unable to change to the same mode the team is in [ 180.135183][T18682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5150'. [ 180.447022][T18698] usb usb8: usbfs: process 18698 (syz.3.5152) did not claim interface 0 before use [ 180.575797][ T29] kauditd_printk_skb: 1723 callbacks suppressed [ 180.575814][ T29] audit: type=1326 audit(1758143792.195:40621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 180.605739][ T29] audit: type=1326 audit(1758143792.195:40622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 180.843449][ T29] audit: type=1326 audit(1758143792.265:40623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 180.867110][ T29] audit: type=1326 audit(1758143792.265:40624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 180.890703][ T29] audit: type=1326 audit(1758143792.265:40625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 180.914262][ T29] audit: type=1326 audit(1758143792.265:40626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 180.937923][ T29] audit: type=1326 audit(1758143792.265:40627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 180.961651][ T29] audit: type=1326 audit(1758143792.265:40628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 180.985408][ T29] audit: type=1326 audit(1758143792.265:40629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 181.009061][ T29] audit: type=1326 audit(1758143792.265:40630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18722 comm="syz.2.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 181.109175][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5161'. [ 181.171908][T18741] validate_nla: 1 callbacks suppressed [ 181.171923][T18741] netlink: 'syz.6.5164': attribute type 10 has an invalid length. [ 181.198525][T18741] team0: Port device dummy0 added [ 181.236921][T18741] netlink: 'syz.6.5164': attribute type 10 has an invalid length. [ 181.269528][T18741] team0: Port device dummy0 removed [ 181.277802][T18741] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 181.332521][T18754] bond0: (slave dummy0): Releasing backup interface [ 181.414755][T18759] team0: Unable to change to the same mode the team is in [ 181.430323][T18761] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5172'. [ 181.806450][T18783] usb usb8: usbfs: process 18783 (syz.5.5174) did not claim interface 0 before use [ 182.384010][T18789] netlink: 'syz.3.5179': attribute type 10 has an invalid length. [ 182.394686][T18789] team0: Port device dummy0 added [ 182.403500][T18789] netlink: 'syz.3.5179': attribute type 10 has an invalid length. [ 182.459351][T18789] team0: Port device dummy0 removed [ 182.471595][T18789] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.586851][T18841] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5185'. [ 182.606902][T18850] SELinux: ebitmap: truncated map [ 182.615823][T18853] netlink: 'syz.3.5186': attribute type 1 has an invalid length. [ 182.621325][T18850] SELinux: failed to load policy [ 182.634267][T18850] pim6reg: entered allmulticast mode [ 182.657757][T18850] pim6reg: left allmulticast mode [ 182.691749][T18871] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 182.704297][T18839] team0: Unable to change to the same mode the team is in [ 182.713590][T18871] SELinux: failed to load policy [ 182.734889][T18871] pim6reg: entered allmulticast mode [ 182.748497][T18871] pim6reg: left allmulticast mode [ 182.758864][T18878] loop9: detected capacity change from 0 to 7 [ 182.765189][T18878] buffer_io_error: 23 callbacks suppressed [ 182.765201][T18878] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.780965][T18878] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.788830][T18878] loop9: unable to read partition table [ 182.798850][T18878] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 182.798850][T18878] ) failed (rc=-5) [ 182.814687][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.823263][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.842738][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.862648][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.892449][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.916454][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.924773][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.938260][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.972572][T18901] netlink: 'syz.1.5195': attribute type 10 has an invalid length. [ 182.982293][T18901] team0: Port device dummy0 added [ 182.989927][T18901] netlink: 'syz.1.5195': attribute type 10 has an invalid length. [ 182.991557][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5196'. [ 183.007235][T18901] team0: Port device dummy0 removed [ 183.014220][T18903] netlink: 'syz.2.5196': attribute type 1 has an invalid length. [ 183.015555][T18901] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.046568][T18903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.068624][T18903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.076571][T18903] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.088655][T18903] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 183.114584][T18953] gretap1: entered promiscuous mode [ 183.121883][T18953] bond2: (slave gretap1): making interface the new active one [ 183.129811][T18953] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 183.145603][T18953] macvlan2: entered promiscuous mode [ 183.150974][T18953] macvlan2: entered allmulticast mode [ 183.157504][T18953] bond2: entered promiscuous mode [ 183.162970][T18953] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.173102][T18953] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 183.185245][T18953] bond2: left promiscuous mode [ 183.219995][T18964] bond0: (slave dummy0): Releasing backup interface [ 183.255501][T18964] team0: Unable to change to the same mode the team is in [ 183.283461][T18968] loop9: detected capacity change from 0 to 7 [ 183.286100][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5201'. [ 183.290187][T18968] loop9: unable to read partition table [ 183.304354][T18968] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 183.304354][T18968] ) failed (rc=-5) [ 183.463230][T18989] SELinux: ebitmap: truncated map [ 183.474688][T18989] SELinux: failed to load policy [ 183.485258][T18989] pim6reg: entered allmulticast mode [ 183.501707][T18985] team0: Unable to change to the same mode the team is in [ 183.509322][T18989] pim6reg: left allmulticast mode [ 183.750606][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5217'. [ 184.221961][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5225'. [ 184.231413][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5225'. [ 184.534681][T19097] bond2: (slave gretap1): Releasing active interface [ 184.579621][T19100] team0: Unable to change to the same mode the team is in [ 184.916301][T19131] sch_fq: defrate 0 ignored. [ 185.100636][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5250'. [ 185.388859][T19160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5256'. [ 185.502444][T19166] SELinux: ebitmap: truncated map [ 185.510581][T19166] SELinux: failed to load policy [ 185.530948][T19166] pim6reg: entered allmulticast mode [ 185.537020][T19166] pim6reg: left allmulticast mode [ 185.612965][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 185.612978][ T29] audit: type=1326 audit(1758143797.235:41296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.643915][ T29] audit: type=1326 audit(1758143797.235:41297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.667587][ T29] audit: type=1326 audit(1758143797.235:41298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.691209][ T29] audit: type=1326 audit(1758143797.235:41299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.714885][ T29] audit: type=1326 audit(1758143797.235:41300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.738480][ T29] audit: type=1326 audit(1758143797.235:41301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.762805][ T29] audit: type=1326 audit(1758143797.235:41302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.786516][ T29] audit: type=1326 audit(1758143797.235:41303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.810176][ T29] audit: type=1326 audit(1758143797.235:41304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.834090][ T29] audit: type=1326 audit(1758143797.235:41305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.6.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 185.926374][T19187] netlink: 'syz.1.5264': attribute type 10 has an invalid length. [ 185.935718][T19187] team0: Port device dummy0 added [ 185.943803][T19187] netlink: 'syz.1.5264': attribute type 10 has an invalid length. [ 185.961541][T19187] team0: Port device dummy0 removed [ 185.969279][T19187] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.307760][T19207] usb usb8: usbfs: process 19207 (syz.3.5270) did not claim interface 0 before use [ 186.728427][T19245] netlink: 'syz.2.5277': attribute type 10 has an invalid length. [ 186.738125][T19245] team0: Port device dummy0 added [ 186.744654][T19245] netlink: 'syz.2.5277': attribute type 10 has an invalid length. [ 186.756439][T19245] team0: Port device dummy0 removed [ 186.763983][T19245] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.784300][T19249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5279'. [ 186.847357][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5283'. [ 187.002798][T19282] netlink: 'syz.5.5290': attribute type 10 has an invalid length. [ 187.014852][T19282] bond0: (slave dummy0): Releasing backup interface [ 187.025528][T19282] team0: Port device dummy0 added [ 187.032705][T19282] netlink: 'syz.5.5290': attribute type 10 has an invalid length. [ 187.056362][T19282] team0: Port device dummy0 removed [ 187.067931][T19282] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 187.139612][T19301] sch_fq: defrate 0 ignored. [ 187.313755][T19317] bond0: (slave dummy0): Releasing backup interface [ 187.375541][T19327] team0: Unable to change to the same mode the team is in [ 187.391357][T19329] netlink: 'syz.6.5305': attribute type 10 has an invalid length. [ 187.413883][T19329] team0: Port device dummy0 added [ 187.424479][T19329] netlink: 'syz.6.5305': attribute type 10 has an invalid length. [ 187.466381][T19329] team0: Port device dummy0 removed [ 187.474631][T19329] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 187.999290][T19362] bond0: (slave dummy0): Releasing backup interface [ 188.049019][T19367] team0: Unable to change to the same mode the team is in [ 188.134062][T19369] __nla_validate_parse: 3 callbacks suppressed [ 188.134155][T19369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5318'. [ 188.221985][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5320'. [ 188.231255][T19388] netlink: 312 bytes leftover after parsing attributes in process `syz.6.5320'. [ 188.240650][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5320'. [ 188.466628][T19397] usb usb8: usbfs: process 19397 (syz.3.5323) did not claim interface 0 before use [ 188.588270][T19420] netlink: 'syz.2.5325': attribute type 10 has an invalid length. [ 188.603723][T19420] bond0: (slave dummy0): Releasing backup interface [ 188.634708][T19420] team0: Port device dummy0 added [ 188.653057][T19423] netlink: 'syz.2.5325': attribute type 10 has an invalid length. [ 188.698120][T19423] team0: Port device dummy0 removed [ 188.734573][T19423] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.854404][T19430] bond0: (slave dummy0): Releasing backup interface [ 188.898996][T19430] team0: Unable to change to the same mode the team is in [ 189.002124][T19440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5333'. [ 189.222944][T19462] bond0: (slave dummy0): Releasing backup interface [ 189.289909][T19468] team0: Unable to change to the same mode the team is in [ 189.364589][T19474] netlink: 'wޣ': attribute type 1 has an invalid length. [ 189.400175][T19481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5347'. [ 189.627050][T19496] usb usb8: usbfs: process 19496 (syz.1.5346) did not claim interface 0 before use [ 189.920610][T19523] netlink: 'syz.3.5352': attribute type 1 has an invalid length. [ 190.049048][T19537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5360'. [ 190.220434][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5368'. [ 190.271315][T19570] bond0: (slave dummy0): Releasing backup interface [ 190.355267][T19577] team0: Unable to change to the same mode the team is in [ 190.434663][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5377'. [ 190.458952][T19586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5376'. [ 190.736916][T19624] team0: Port device dummy0 added [ 190.750144][T19624] team0: Port device dummy0 removed [ 190.759294][T19624] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.831840][ T29] kauditd_printk_skb: 1461 callbacks suppressed [ 190.831855][ T29] audit: type=1326 audit(1758143802.455:42767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 190.864397][ T29] audit: type=1326 audit(1758143802.455:42768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 190.888051][ T29] audit: type=1326 audit(1758143802.455:42769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 190.911717][ T29] audit: type=1326 audit(1758143802.455:42770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 190.935401][ T29] audit: type=1326 audit(1758143802.455:42771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 190.959048][ T29] audit: type=1326 audit(1758143802.455:42772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 190.982648][ T29] audit: type=1326 audit(1758143802.455:42773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 191.006692][ T29] audit: type=1326 audit(1758143802.455:42774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 191.030387][ T29] audit: type=1326 audit(1758143802.455:42775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 191.053966][ T29] audit: type=1326 audit(1758143802.455:42776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.3.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff57feaeba9 code=0x7ffc0000 [ 191.167361][T19654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.317757][T19671] SELinux: ebitmap: truncated map [ 191.323583][T19671] SELinux: failed to load policy [ 191.326417][T19675] loop9: detected capacity change from 0 to 7 [ 191.337447][ T3289] buffer_io_error: 9 callbacks suppressed [ 191.337460][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.351957][T19671] pim6reg: entered allmulticast mode [ 191.362777][T19671] pim6reg: left allmulticast mode [ 191.366010][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.375718][ T3289] loop9: unable to read partition table [ 191.436815][T19675] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.444717][T19675] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.452617][T19675] loop9: unable to read partition table [ 191.459709][T19675] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 191.459709][T19675] ) failed (rc=-5) [ 191.485655][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.494657][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.502840][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.511222][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.541580][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 191.724094][T19724] FAULT_INJECTION: forcing a failure. [ 191.724094][T19724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.737313][T19724] CPU: 1 UID: 0 PID: 19724 Comm: syz.5.5423 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.737349][T19724] Tainted: [W]=WARN [ 191.737355][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.737392][T19724] Call Trace: [ 191.737398][T19724] [ 191.737405][T19724] __dump_stack+0x1d/0x30 [ 191.737428][T19724] dump_stack_lvl+0xe8/0x140 [ 191.737447][T19724] dump_stack+0x15/0x1b [ 191.737543][T19724] should_fail_ex+0x265/0x280 [ 191.737566][T19724] should_fail+0xb/0x20 [ 191.737586][T19724] should_fail_usercopy+0x1a/0x20 [ 191.737611][T19724] _copy_from_user+0x1c/0xb0 [ 191.737694][T19724] ___sys_sendmsg+0xc1/0x1d0 [ 191.737731][T19724] __x64_sys_sendmsg+0xd4/0x160 [ 191.737760][T19724] x64_sys_call+0x191e/0x2ff0 [ 191.737792][T19724] do_syscall_64+0xd2/0x200 [ 191.737822][T19724] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.737846][T19724] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 191.737946][T19724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.737967][T19724] RIP: 0033:0x7f577aa9eba9 [ 191.737983][T19724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.738060][T19724] RSP: 002b:00007f57794ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.738079][T19724] RAX: ffffffffffffffda RBX: 00007f577ace5fa0 RCX: 00007f577aa9eba9 [ 191.738090][T19724] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 191.738101][T19724] RBP: 00007f57794ff090 R08: 0000000000000000 R09: 0000000000000000 [ 191.738113][T19724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.738161][T19724] R13: 00007f577ace6038 R14: 00007f577ace5fa0 R15: 00007ffdc4ccb018 [ 191.738179][T19724] [ 191.947491][T19727] usb usb8: usbfs: process 19727 (syz.2.5419) did not claim interface 0 before use [ 192.108318][T19738] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 192.128821][T19753] FAULT_INJECTION: forcing a failure. [ 192.128821][T19753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.141997][T19753] CPU: 0 UID: 0 PID: 19753 Comm: syz.6.5426 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.142031][T19753] Tainted: [W]=WARN [ 192.142039][T19753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.142051][T19753] Call Trace: [ 192.142058][T19753] [ 192.142066][T19753] __dump_stack+0x1d/0x30 [ 192.142088][T19753] dump_stack_lvl+0xe8/0x140 [ 192.142109][T19753] dump_stack+0x15/0x1b [ 192.142127][T19753] should_fail_ex+0x265/0x280 [ 192.142152][T19753] should_fail+0xb/0x20 [ 192.142253][T19753] should_fail_usercopy+0x1a/0x20 [ 192.142291][T19753] _copy_to_user+0x20/0xa0 [ 192.142320][T19753] simple_read_from_buffer+0xb5/0x130 [ 192.142410][T19753] proc_fail_nth_read+0x10e/0x150 [ 192.142440][T19753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.142467][T19753] vfs_read+0x1a8/0x770 [ 192.142486][T19753] ? __fput+0x555/0x650 [ 192.142590][T19753] ? __rcu_read_unlock+0x4f/0x70 [ 192.142612][T19753] ? __fget_files+0x184/0x1c0 [ 192.142704][T19753] ksys_read+0xda/0x1a0 [ 192.142728][T19753] __x64_sys_read+0x40/0x50 [ 192.142772][T19753] x64_sys_call+0x27bc/0x2ff0 [ 192.142855][T19753] do_syscall_64+0xd2/0x200 [ 192.142888][T19753] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 192.142913][T19753] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 192.142943][T19753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.142999][T19753] RIP: 0033:0x7f521b62d5bc [ 192.143015][T19753] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.143033][T19753] RSP: 002b:00007f521a097030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.143053][T19753] RAX: ffffffffffffffda RBX: 00007f521b875fa0 RCX: 00007f521b62d5bc [ 192.143067][T19753] RDX: 000000000000000f RSI: 00007f521a0970a0 RDI: 0000000000000007 [ 192.143152][T19753] RBP: 00007f521a097090 R08: 0000000000000000 R09: 0000000000000000 [ 192.143165][T19753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.143179][T19753] R13: 00007f521b876038 R14: 00007f521b875fa0 R15: 00007ffe2ee39698 [ 192.143199][T19753] [ 192.148611][T19738] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 192.597859][T19784] team0: Unable to change to the same mode the team is in [ 192.688017][T19806] bond0: (slave dummy0): Releasing backup interface [ 192.748704][T19818] team0: Unable to change to the same mode the team is in [ 192.785387][T19826] validate_nla: 6 callbacks suppressed [ 192.785401][T19826] netlink: 'syz.5.5445': attribute type 1 has an invalid length. [ 192.955486][T19855] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 193.124688][T19867] team0: Unable to change to the same mode the team is in [ 193.169790][T19876] __nla_validate_parse: 7 callbacks suppressed [ 193.169805][T19876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5462'. [ 193.305507][T19891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5469'. [ 193.363022][T19903] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 193.373222][T19903] SELinux: failed to load policy [ 193.387408][T19903] pim6reg: entered allmulticast mode [ 193.396307][T19894] usb usb8: usbfs: process 19894 (syz.5.5467) did not claim interface 0 before use [ 193.438593][T19903] pim6reg: left allmulticast mode [ 193.453606][T19907] team0: Unable to change to the same mode the team is in [ 193.630282][T19943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5478'. [ 193.849417][T19955] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5484'. [ 193.918264][T19963] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 193.928227][T19963] SELinux: failed to load policy [ 193.938622][T19963] pim6reg: entered allmulticast mode [ 193.945634][T19963] pim6reg: left allmulticast mode [ 194.033578][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5489'. [ 194.271613][T19989] team0: Unable to change to the same mode the team is in [ 194.354348][T19998] SELinux: ebitmap: truncated map [ 194.364821][T19998] SELinux: failed to load policy [ 194.393886][T19998] pim6reg: entered allmulticast mode [ 194.406408][T20001] usb usb8: usbfs: process 20001 (syz.3.5498) did not claim interface 0 before use [ 194.455100][T20004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5501'. [ 194.466315][T19998] pim6reg: left allmulticast mode [ 194.499408][T20009] usb usb8: usbfs: process 20009 (syz.5.5497) did not claim interface 0 before use [ 194.891807][T20088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5514'. [ 195.037753][T20105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5516'. [ 195.185626][T20115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5524'. [ 195.275633][T20128] bond3: entered promiscuous mode [ 195.280887][T20128] bond3: entered allmulticast mode [ 195.286526][T20128] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.339687][T20128] bond3 (unregistering): Released all slaves [ 195.395427][T20206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.404576][T20206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.416384][T20166] usb usb8: usbfs: process 20166 (syz.3.5529) did not claim interface 0 before use [ 195.490618][T20128] !: renamed from dummy0 [ 195.567231][T20235] usb usb8: usbfs: process 20235 (syz.5.5535) did not claim interface 0 before use [ 195.960677][ T29] kauditd_printk_skb: 1137 callbacks suppressed [ 195.960725][ T29] audit: type=1326 audit(1758143807.585:43914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 195.991247][ T29] audit: type=1326 audit(1758143807.585:43915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 196.014840][ T29] audit: type=1326 audit(1758143807.585:43916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 196.017965][T20266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5539'. [ 196.038425][ T29] audit: type=1326 audit(1758143807.585:43917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 196.070979][ T29] audit: type=1326 audit(1758143807.585:43918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 196.094594][ T29] audit: type=1326 audit(1758143807.585:43919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 196.118351][ T29] audit: type=1326 audit(1758143807.585:43920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 196.142089][ T29] audit: type=1326 audit(1758143807.595:43921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 196.165687][ T29] audit: type=1326 audit(1758143807.595:43922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 196.189522][ T29] audit: type=1326 audit(1758143807.595:43923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b62eba9 code=0x7ffc0000 [ 196.327477][T20279] loop9: detected capacity change from 0 to 7 [ 196.334037][T20279] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.344520][T20279] loop9: unable to read partition table [ 196.363023][T20279] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 196.363023][T20279] ) failed (rc=-5) [ 196.367126][ T3289] buffer_io_error: 1 callbacks suppressed [ 196.367139][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.450246][T20286] netlink: 'syz.2.5547': attribute type 1 has an invalid length. [ 196.455347][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.473212][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.502790][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.503076][T20292] !: renamed from dummy0 [ 196.519582][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.786416][T20334] netlink: 'syz.5.5566': attribute type 1 has an invalid length. [ 196.840056][T20343] netlink: 'syz.5.5567': attribute type 10 has an invalid length. [ 196.849862][T20343] team0: Port device dummy0 added [ 196.858292][T20343] netlink: 'syz.5.5567': attribute type 10 has an invalid length. [ 196.871048][T20343] team0: Port device dummy0 removed [ 196.880143][T20343] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 196.956381][T20341] usb usb8: usbfs: process 20341 (syz.6.5564) did not claim interface 0 before use [ 197.204017][T20398] netlink: 'syz.1.5580': attribute type 10 has an invalid length. [ 197.213409][T20398] team0: Port device 0! added [ 197.221216][T20398] netlink: 'syz.1.5580': attribute type 10 has an invalid length. [ 197.232333][T20398] team0: Port device 0! removed [ 197.240442][T20398] bond0: (slave 0!): Enslaving as an active interface with an up link [ 197.289858][T20406] SELinux: ebitmap: truncated map [ 197.296370][T20406] SELinux: failed to load policy [ 197.305444][T20406] pim6reg: entered allmulticast mode [ 197.313856][T20406] pim6reg: left allmulticast mode [ 197.489702][T20441] tipc: Enabled bearer , priority 0 [ 197.510298][T20441] syzkaller0: entered promiscuous mode [ 197.515837][T20441] syzkaller0: entered allmulticast mode [ 197.527422][T20441] tipc: Resetting bearer [ 197.534469][T20441] tipc: Resetting bearer [ 197.542042][T20441] tipc: Disabling bearer [ 197.798694][T20479] bond0: (slave 0!): Releasing backup interface [ 197.847242][T20479] team0: Unable to change to the same mode the team is in [ 197.943094][T20491] FAULT_INJECTION: forcing a failure. [ 197.943094][T20491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.956450][T20491] CPU: 0 UID: 0 PID: 20491 Comm: syz.1.5611 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.956479][T20491] Tainted: [W]=WARN [ 197.956486][T20491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.956498][T20491] Call Trace: [ 197.956505][T20491] [ 197.956513][T20491] __dump_stack+0x1d/0x30 [ 197.956592][T20491] dump_stack_lvl+0xe8/0x140 [ 197.956609][T20491] dump_stack+0x15/0x1b [ 197.956622][T20491] should_fail_ex+0x265/0x280 [ 197.956646][T20491] should_fail+0xb/0x20 [ 197.956675][T20491] should_fail_usercopy+0x1a/0x20 [ 197.956699][T20491] _copy_from_user+0x1c/0xb0 [ 197.956724][T20491] ___sys_sendmsg+0xc1/0x1d0 [ 197.956757][T20491] __x64_sys_sendmsg+0xd4/0x160 [ 197.956825][T20491] x64_sys_call+0x191e/0x2ff0 [ 197.956843][T20491] do_syscall_64+0xd2/0x200 [ 197.956949][T20491] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 197.956973][T20491] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 197.957000][T20491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.957072][T20491] RIP: 0033:0x7f9b8cf7eba9 [ 197.957086][T20491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.957165][T20491] RSP: 002b:00007f9b8b9df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.957184][T20491] RAX: ffffffffffffffda RBX: 00007f9b8d1c5fa0 RCX: 00007f9b8cf7eba9 [ 197.957197][T20491] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 197.957210][T20491] RBP: 00007f9b8b9df090 R08: 0000000000000000 R09: 0000000000000000 [ 197.957224][T20491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.957249][T20491] R13: 00007f9b8d1c6038 R14: 00007f9b8d1c5fa0 R15: 00007ffe38254238 [ 197.957268][T20491] [ 198.183253][T20496] netlink: 'syz.5.5613': attribute type 1 has an invalid length. [ 198.228367][T20498] __nla_validate_parse: 3 callbacks suppressed [ 198.228392][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5614'. [ 198.275678][T20504] loop9: detected capacity change from 0 to 7 [ 198.292231][T20504] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.300253][T20504] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.308165][T20504] loop9: unable to read partition table [ 198.314253][T20504] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 198.314253][T20504] ) failed (rc=-5) [ 198.316710][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.336461][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.344791][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.492283][T20524] netlink: 'syz.1.5623': attribute type 1 has an invalid length. [ 198.633152][T20545] team0: Unable to change to the same mode the team is in [ 198.671195][T20547] bond1: entered promiscuous mode [ 198.676534][T20547] bond1: entered allmulticast mode [ 198.683252][T20547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.697407][T20547] bond1 (unregistering): Released all slaves [ 199.425386][T20662] bond3: entered promiscuous mode [ 199.430495][T20662] bond3: entered allmulticast mode [ 199.436061][T20662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.446269][T20662] bond3 (unregistering): Released all slaves [ 199.716234][T20750] usb usb8: usbfs: process 20750 (syz.1.5651) did not claim interface 0 before use [ 199.826325][T20776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5658'. [ 200.074379][T20800] SELinux: ebitmap: truncated map [ 200.080339][T20800] SELinux: failed to load policy [ 200.095899][T20800] pim6reg: entered allmulticast mode [ 200.102119][T20800] pim6reg: left allmulticast mode [ 200.213913][T20821] netlink: 'syz.3.5678': attribute type 26 has an invalid length. [ 200.273782][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5682'. [ 200.476378][T20851] bond0: (slave dummy0): Releasing backup interface [ 200.533876][T20851] team0: Unable to change to the same mode the team is in [ 200.620069][ T5215] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.719191][ T5215] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.790969][T20866] team0: Unable to change to the same mode the team is in [ 200.812968][ T5215] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.862218][ T5215] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.894397][T20915] loop9: detected capacity change from 0 to 7 [ 200.900821][T20915] loop9: unable to read partition table [ 200.906566][T20915] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 200.906566][T20915] ) failed (rc=-5) [ 201.009581][ T29] kauditd_printk_skb: 1917 callbacks suppressed [ 201.009597][ T29] audit: type=1400 audit(1758143812.635:45841): avc: denied { search } for pid=3032 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.037396][ T29] audit: type=1400 audit(1758143812.635:45842): avc: denied { search } for pid=3032 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.052175][T20846] chnl_net:caif_netlink_parms(): no params data found [ 201.059286][ T29] audit: type=1400 audit(1758143812.635:45843): avc: denied { search } for pid=3032 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.087896][ T29] audit: type=1400 audit(1758143812.635:45844): avc: denied { read } for pid=3032 comm="dhcpcd" name="n37" dev="tmpfs" ino=5581 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.109652][ T29] audit: type=1400 audit(1758143812.635:45845): avc: denied { open } for pid=3032 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=5581 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.133573][ T29] audit: type=1400 audit(1758143812.695:45846): avc: denied { getattr } for pid=3032 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=5581 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.168012][ T29] audit: type=1326 audit(1758143812.765:45847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.2.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 201.191723][ T29] audit: type=1326 audit(1758143812.765:45848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.2.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 201.215538][ T29] audit: type=1326 audit(1758143812.765:45849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.2.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 201.239609][ T29] audit: type=1326 audit(1758143812.765:45850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.2.5707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37529ceba9 code=0x7ffc0000 [ 201.337208][T21056] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5711'. [ 201.348095][T21056] netlink: 'syz.2.5711': attribute type 10 has an invalid length. [ 201.387600][ T5215] bond0 (unregistering): Released all slaves [ 201.399276][T21066] netlink: 'syz.2.5711': attribute type 10 has an invalid length. [ 201.412328][T21059] bond1: entered promiscuous mode [ 201.417435][T21059] bond1: entered allmulticast mode [ 201.427729][T21059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.437620][T21059] bond1 (unregistering): Released all slaves [ 201.451882][T21056] team0: Port device 0! added [ 201.463737][T21066] team0: Port device 0! removed [ 201.472813][T21066] bond0: (slave 0!): Enslaving as an active interface with an up link [ 201.484881][ T5215] tipc: Left network mode [ 201.525428][ T5215] hsr_slave_0: left promiscuous mode [ 201.531423][ T5215] hsr_slave_1: left promiscuous mode [ 201.538577][ T5215] veth1_macvtap: left promiscuous mode [ 201.544046][ T5215] veth0_macvtap: left promiscuous mode [ 201.549766][ T5215] veth1_vlan: left promiscuous mode [ 201.555125][ T5215] veth0_vlan: left promiscuous mode [ 201.653762][T21059] !: renamed from dummy0 [ 201.660911][T20846] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.668111][T20846] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.681977][T20846] bridge_slave_0: entered allmulticast mode [ 201.692764][T20846] bridge_slave_0: entered promiscuous mode [ 201.700352][T20846] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.707455][T20846] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.715017][T20846] bridge_slave_1: entered allmulticast mode [ 201.721854][T20846] bridge_slave_1: entered promiscuous mode [ 201.764820][T21179] block device autoloading is deprecated and will be removed. [ 201.786590][T20658] infiniband syz1: ib_query_port failed (-19) [ 201.794610][T20846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.819521][T20846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.890147][T20846] team0: Port device team_slave_0 added [ 201.900415][T21239] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5722'. [ 201.916044][T20846] team0: Port device team_slave_1 added [ 201.926658][T21249] netlink: 'syz.5.5724': attribute type 10 has an invalid length. [ 201.932359][T21239] netlink: 'syz.6.5722': attribute type 10 has an invalid length. [ 201.934512][T21249] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5724'. [ 201.978489][T21249] team0: Port device geneve1 added [ 201.994212][T21268] netlink: 'syz.6.5722': attribute type 10 has an invalid length. [ 202.012610][T20846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.019642][T20846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.045567][T20846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.056715][T21284] loop9: detected capacity change from 0 to 7 [ 202.061714][T21239] team0: Port device dummy0 added [ 202.063023][T21284] buffer_io_error: 9 callbacks suppressed [ 202.063034][T21284] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.090283][T21284] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.097433][T21268] team0: Port device dummy0 removed [ 202.098248][T21284] loop9: unable to read partition table [ 202.109380][T21284] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 202.109380][T21284] ) failed (rc=-5) [ 202.123863][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.134858][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.143141][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.151462][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.151759][T21268] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 202.159572][ T3289] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.176334][T20846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.183353][T20846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.209473][T20846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.253024][T21304] loop6: detected capacity change from 0 to 512 [ 202.310199][T20846] hsr_slave_0: entered promiscuous mode [ 202.318833][T21304] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 202.320898][T20846] hsr_slave_1: entered promiscuous mode [ 202.332075][T21304] EXT4-fs (loop6): orphan cleanup on readonly fs [ 202.334168][T20846] debugfs: 'hsr0' already exists in 'hsr' [ 202.342933][T21304] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.5728: corrupted inode contents [ 202.344674][T20846] Cannot create hsr debugfs directory [ 202.358131][T21304] EXT4-fs (loop6): Remounting filesystem read-only [ 202.367428][T21341] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 202.368689][T21304] EXT4-fs (loop6): 1 truncate cleaned up [ 202.381458][ T2588] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.392078][ T2588] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.412624][ T2588] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 202.423443][T21304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.515416][T12230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.558114][ T2993] ================================================================== [ 202.566230][ T2993] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 202.572818][ T2993] [ 202.575129][ T2993] read-write to 0xffff8881004b5900 of 4 bytes by task 3289 on cpu 0: [ 202.583174][ T2993] dont_mount+0x2a/0x40 [ 202.587318][ T2993] vfs_unlink+0x28f/0x420 [ 202.591728][ T2993] do_unlinkat+0x24e/0x480 [ 202.596132][ T2993] __x64_sys_unlink+0x2e/0x40 [ 202.600799][ T2993] x64_sys_call+0x2dc0/0x2ff0 [ 202.605466][ T2993] do_syscall_64+0xd2/0x200 [ 202.609966][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.615846][ T2993] [ 202.618154][ T2993] read to 0xffff8881004b5900 of 4 bytes by task 2993 on cpu 1: [ 202.625678][ T2993] lookup_fast+0xf0/0x320 [ 202.630002][ T2993] walk_component+0x3f/0x220 [ 202.634583][ T2993] path_lookupat+0xfe/0x2a0 [ 202.639113][ T2993] filename_lookup+0x147/0x340 [ 202.643872][ T2993] do_readlinkat+0x7d/0x320 [ 202.648379][ T2993] __x64_sys_readlink+0x47/0x60 [ 202.653231][ T2993] x64_sys_call+0x28da/0x2ff0 [ 202.657899][ T2993] do_syscall_64+0xd2/0x200 [ 202.662401][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.668640][ T2993] [ 202.670946][ T2993] value changed: 0x00300080 -> 0x00004080 [ 202.676645][ T2993] [ 202.678949][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 202.685083][ T2993] CPU: 1 UID: 0 PID: 2993 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.696037][ T2993] Tainted: [W]=WARN [ 202.699823][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.709862][ T2993] ================================================================== [ 202.750848][T21440] loop6: detected capacity change from 0 to 512 [ 202.777793][T21440] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 202.785866][T21440] EXT4-fs (loop6): orphan cleanup on readonly fs [ 202.793831][T21440] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.5734: corrupted inode contents [ 202.808208][T21440] EXT4-fs (loop6): Remounting filesystem read-only [ 202.814969][T21440] EXT4-fs (loop6): 1 truncate cleaned up [ 202.820797][ T5218] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.831534][ T5218] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.842619][ T5218] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 202.853387][T21440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.883608][T12230] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.020125][T20846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.028686][T20846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.040249][T20846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.050830][T20846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.090019][T20846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.102005][T20846] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.111201][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.118573][ T5233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.133902][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.141074][ T5252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.167756][T20846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.223419][T20846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.288696][T20846] veth0_vlan: entered promiscuous mode [ 203.296246][T20846] veth1_vlan: entered promiscuous mode [ 203.309850][T20846] veth0_macvtap: entered promiscuous mode [ 203.317010][T20846] veth1_macvtap: entered promiscuous mode [ 203.327204][T20846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.338620][T20846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.349165][ T5215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.358186][ T5215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.367295][ T5215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.377922][ T5252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0