last executing test programs: 3m1.816494036s ago: executing program 2 (id=7134): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000010000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 3m0.715765014s ago: executing program 2 (id=7147): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)="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", 0x447}, {&(0x7f0000002180)="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", 0x135}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mlxsw_sp_acl_tcam_vregion_migrate\x00', r0, 0x0, 0xf}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',cache=fscache,aname=@,']) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r10, 0x0, 0x0, 0x0, 0x40010020}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 3m0.066677866s ago: executing program 2 (id=7152): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 3m0.037607518s ago: executing program 2 (id=7154): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) r0 = timerfd_create(0x1, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) chroot(&(0x7f0000000100)='./file1\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 3m0.001980922s ago: executing program 2 (id=7155): syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x7c8e57edab868d16, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) 2m59.833081035s ago: executing program 2 (id=7160): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='hrtimer_start\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x157, 0x0, 0xfff, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2m59.803434058s ago: executing program 32 (id=7160): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='hrtimer_start\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x157, 0x0, 0xfff, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 4.367554369s ago: executing program 1 (id=10391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYBLOB='showassoc,map=acorn,showassoc,utf8,check=relaxed,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c636865636b3d7374726963742c7569643d014ddfd7528e2abb611ab9a6f0020c71e7e4e129d3efc1207d122e24d0e5aa9f74b3e95844d340377ad31e1f1e55ff56785ca0655fe348172e188e19180ebcd1c5f60e6bfb3d4b232394a70ed43896502c1fad07eca5cc4ad532127749fa88b2dcb188a93734b11220cfed988675869e05f19923", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',unhide,hide,session=0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x943, &(0x7f0000001500)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010002000000080002007f0000010c00028005000100000000000800074000000000080003400000100e0c000f800800014000000000"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500040000002020207b1a31616474abb4a4dbe248d1f8ff00000000bfa100000000000007010000f8ffffffb70200008500000070000000850000000500"/96], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsmount(r1, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x7fffffffffffffff}, 0x18) close(r6) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101201) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) 3.780852506s ago: executing program 3 (id=10402): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000040)="1ba2b4f68af75ffe49385fa5a34cf145e3aa93b92314066a5b9c7c61f0bcc4ec7320c3cebc7921ee6a1060542a9f0f1a7a90f6971262bfad71d2fce7f9ac", &(0x7f0000000340)=""/230}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r4, 0x0, 0x4ab}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES64=r10, @ANYRESOCT=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYRESHEX=r8, @ANYRES32=r10, @ANYBLOB="c81ec563031168986277fb16c40517fa0fa35b5276eaba7e5a0113ae671f62b0b1bad830194c3d2a8011c40257a87f8d3e472f48b4031873934e3f419f08a02f70cb24a79e138a43b5a684d281ddae230b737efb50dca00afe68c4dc45fc2178f7a220a2bab737babdcfdc58b5b4b9418d1b21fc4b7cdb0b310a67315b43bd5a1b5ff5134159ca4cee368452b50a973120d81f678f", @ANYRESHEX=r5], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[], 0x24}}, 0x20008000) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r13}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3.602956621s ago: executing program 1 (id=10407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xf8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001500)='/proc/slabinfo\x00', 0x0, 0x0) read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r7, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x20) read$hiddev(r7, &(0x7f0000001100)=""/234, 0xea) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x6, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[r6, r8, r9, 0xffffffffffffffff, r10, r11], &(0x7f0000000800)=[{0x1, 0x3, 0x2, 0x2}, {0x2, 0x2, 0xd, 0x7}], 0x10, 0x4}, 0x94) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="44f9", 0xffffffffffffff3d, 0x404c0d5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x80) r12 = memfd_secret(0x80000) fcntl$setlease(r12, 0x400, 0x0) 3.4839362s ago: executing program 3 (id=10409): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xe3b9}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x8a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0x7ffff088) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r6, &(0x7f0000000040)=""/181, 0xb5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x40000022) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@jqfmt_vfsv1}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f0000000a00)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r8 = timerfd_create(0x8, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 3.398307307s ago: executing program 3 (id=10410): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000200)='./file0\x00', 0x122) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.351764881s ago: executing program 3 (id=10412): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xe3b9}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x8a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0x7ffff088) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r6, &(0x7f0000000040)=""/181, 0xb5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef", 0xd2}], 0x1}, 0x4000000) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x40000022) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@jqfmt_vfsv1}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f0000000a00)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r8 = timerfd_create(0x8, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.687041444s ago: executing program 0 (id=10416): setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="37d11f3449c5a3f2c93993b1766e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) get_mempolicy(&(0x7f0000000040), &(0x7f0000000140), 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x5) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) gettid() read$ptp(0xffffffffffffffff, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.663315646s ago: executing program 1 (id=10417): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) r1 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000140)={{0x77359400}}, 0x0) io_getevents(r2, 0x4, 0x3, &(0x7f00000019c0)=[{}, {}, {}], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000003c0)="1638ed960905d217f5ab342a1a194c82a932b5b3104fa55c1e04cd34f9a9381630d5e6f1063c44f16f29b7b10e354749212d2ffc8db92f85b6c0ad4ccce2a1cfa8b5030bb9cab112cb7c600b5956d39d45b45a441eec6446c2d110799f7d63107554d95f5135225f7eaef8fa2b0b8714aa6d6bf04d6b24461ddba3a3546fcbf50f563c69909416f5c4de", 0x8a) syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x410000) capset(&(0x7f0000000200)={0x19980330, r3}, &(0x7f00000004c0)={0x1ff, 0x1, 0x3, 0x7f, 0x7, 0x2}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) io_pgetevents(r2, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 2.331952773s ago: executing program 0 (id=10419): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000040)="1ba2b4f68af75ffe49385fa5a34cf145e3aa93b92314066a5b9c7c61f0bcc4ec7320c3cebc7921ee6a1060542a9f0f1a7a90f6971262bfad71d2fce7f9ac", &(0x7f0000000340)=""/230}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r4, 0x0, 0x4ab}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES64=r10, @ANYRESOCT=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYRESHEX=r8, @ANYRES32=r10, @ANYBLOB="c81ec563031168986277fb16c40517fa0fa35b5276eaba7e5a0113ae671f62b0b1bad830194c3d2a8011c40257a87f8d3e472f48b4031873934e3f419f08a02f70cb24a79e138a43b5a684d281ddae230b737efb50dca00afe68c4dc45fc2178f7a220a2bab737babdcfdc58b5b4b9418d1b21fc4b7cdb0b310a67315b43bd5a1b5ff5134159ca4cee368452b50a973120d81f678f", @ANYRESHEX=r5], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[], 0x24}}, 0x20008000) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r13}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.319695424s ago: executing program 5 (id=10421): open(0x0, 0x60840, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x0, 0x8, 0x4, 0x3, 0xfffffffffffffffc, 0xffffffff, 0x3, 0x3, 0x9, 0xffffffff, 0xdc, 0x5a1, 0x1, 0xdc7c, 0x82d]}, &(0x7f0000001180)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x0, &(0x7f00000011c0)}, &(0x7f0000000180)=0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4000, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) sendmsg$inet(r0, &(0x7f0000001440)={&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001240)=[{&(0x7f00000011c0)="c5981438564a40f9a8b290bd9eda6e57fdb947a0fb723235f537fb63ad2139ab63e7838e3cdc5317360c244e8ba48adf7490a111031ed8dd635950a295e11d5323e464e5ebc34540a87579d11c203d7f5c041bbe11b231bae042343f09dbae7f9953295cbe3bdd914817819174ae2367445e6e397afa376bc7", 0x79}], 0x1, &(0x7f0000001280)=[@ip_retopts={{0xf4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x7f, 0x0, 0xa, [0x7, 0x7, 0xb, 0x6, 0x400, 0x5, 0x2, 0x96a, 0x1]}, @timestamp={0x44, 0x10, 0xa3, 0x0, 0xe, [0x6, 0x4, 0x3]}, @timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0xffff}, {@multicast1, 0x4}, {@remote, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x5e, 0x3, 0x6, [{@rand_addr=0x64010100, 0x7fff}, {@loopback, 0x7fffffff}, {@loopback, 0x4}, {@remote, 0x3}, {@empty, 0x8}, {@multicast2, 0xfff}, {@private=0xa010100, 0x9509}]}, @noop, @end, @cipso={0x86, 0x30, 0x1, [{0x2, 0x6, "fd02f069"}, {0x2, 0x8, "c733f5d37ba1"}, {0x2, 0x3, "ba"}, {0x2, 0xd, "dda52525dbad77831971ae"}, {0x1, 0xc, "254caeccfaf45d18424e"}]}, @noop, @lsrr={0x83, 0x17, 0x4e, [@private=0xa010101, @loopback, @broadcast, @rand_addr=0x64010102, @local]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xfa, [@remote, @loopback, @empty, @remote]}, @rr={0x7, 0x13, 0x1e, [@loopback, @broadcast, @empty, @loopback]}, @lsrr={0x83, 0xb, 0x4a, [@broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}], 0x1c0}, 0x60040800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.082100863s ago: executing program 0 (id=10425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 2.016157798s ago: executing program 0 (id=10426): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0xfc, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0xf, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xcc, 0x2, [@TCA_BASIC_EMATCHES={0xc0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xc295}, {0x2, 0x5, 0x401, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x7, 0x80000000, 0x2, 0x7, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0xdb, 0x9, 0x151}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{}, {0x5, 0x5, 0x2, "55b04e12a1"}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x2, 0x0, 0x0, {{0x8}, "8b1166457a264998ad3e427117253bc7e25f2b88ea8bc788adf0c5dc54e449e8b9b68b3bbe944fde370e8fdcd934fa8ccf0cc5f740f8ed728ecc0964b1"}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x1}}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000280)='@\x00', 0x2, 0x3) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000640)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x3, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x7, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}]}}}}}}, 0x46) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r10}]}]}, 0x28}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040)=@sg0, r10, &(0x7f0000000080)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x94) 1.656076277s ago: executing program 1 (id=10427): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000002, 0xd2932, 0xffffffffffffffff, 0x100000000) syz_emit_ethernet(0xec, &(0x7f0000000800)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@llc_tr={0x11, {@snap={0xab, 0x154, "6093", "a281cd", 0x6004, "7cc526eae2fecc3c0c1ebbb302aef63bcea80959fd659169652f08b9b2425a37994ce4db805291a6783b3c5b5f4cac13542d67bd1dc3cb2445a414a10a03fa9dd3a608a8b515c52b7821f9d92d5f6ba1cb1de37aa65bc7dd9705917ce031d2f2c60c9318a3c6b99b49650d857108075905ca2dfab5e75a427f528ac50d49cc271730ea65dfb597a98e26033476ddeee2c8e2835fa9765f449544a886e0d47d0e1e2013a4e8fd1ae1f35257d7a0bde769ff3e4daa7f1763577846e266c29d72d130b65fd66a81abebf0d5ccbdb9ad1abad0"}}}}}, &(0x7f0000000280)={0x0, 0x2, [0xaa1, 0x223, 0x8b0, 0x229]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@inlinecrypt}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x8, 0xd, 0x3, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x64, 0x0, 0xa6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x6, [{@rand_addr=0x64010100}, {@loopback, 0x1}, {@loopback}, {@multicast2, 0x100}, {@remote, 0x7f}]}, @end, @cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "5b09fbc87fb9072a"}]}]}}}}}) 1.433378715s ago: executing program 0 (id=10428): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x1, &(0x7f0000000380)=[{0x1c, 0x5, 0x6, 0x3ff}]}) lseek(r1, 0x2004, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0x8c24}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/sockstat\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write(r2, &(0x7f0000001c00)="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", 0x599) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYRES16=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) io_setup(0x8f0, &(0x7f0000002400)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000002c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000f4ff26e820f02ae4e25c0000001f1d510e4e9eb3c038ac1036c3f5bf096a2b4748d7f8fe2f126e263363cb146f06e5b6e206697210ffd11c2656d70cefcac5707c195f2549d364f1b90bb01f661a1dafb0e1a511a16658977e71beabda20587f5d68118b1d24df876422dd0bfefd8713f81ce60b568deb89abaf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 1.092938482s ago: executing program 5 (id=10429): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@errors_remount}, {@nouid32}, {@noauto_da_alloc}]}, 0x1, 0x510, &(0x7f0000000f40)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)=')', 0x1}], 0x2, 0x17, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x738a}, 0x18) unshare(0x24040400) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x19c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x64, 0x14, {{'cmac(aes)\x00'}, 0xc0, 0x0, "e80c857b65087dea03da4c290569c738c39dac5defb806ba"}}]}, 0x19c}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r2, 0x541b, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000003c0)='memory.swap.current\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000007a800000000009514dae3f377e0cf8c43db7d5fa900efff4522270c7948914d5d9c697ab5f822f28a7ae0a9e21f256da53c11593a0055d2a4c77c8863ca0f6665de8e78a74d09169feaa5e94bae"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.092090492s ago: executing program 1 (id=10438): open(0x0, 0x60840, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x0, 0x8, 0x4, 0x3, 0xfffffffffffffffc, 0xffffffff, 0x3, 0x3, 0x9, 0xffffffff, 0xdc, 0x5a1, 0x1, 0xdc7c, 0x82d]}, &(0x7f0000001180)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x0, &(0x7f00000011c0)}, &(0x7f0000000180)=0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4000, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) sendmsg$inet(r0, &(0x7f0000001440)={&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001240)=[{&(0x7f00000011c0)="c5981438564a40f9a8b290bd9eda6e57fdb947a0fb723235f537fb63ad2139ab63e7838e3cdc5317360c244e8ba48adf7490a111031ed8dd635950a295e11d5323e464e5ebc34540a87579d11c203d7f5c041bbe11b231bae042343f09dbae7f9953295cbe3bdd914817819174ae2367445e6e397afa376bc7", 0x79}], 0x1, &(0x7f0000001280)=[@ip_retopts={{0xf4, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x7f, 0x0, 0xa, [0x7, 0x7, 0xb, 0x6, 0x400, 0x5, 0x2, 0x96a, 0x1]}, @timestamp={0x44, 0x10, 0xa3, 0x0, 0xe, [0x6, 0x4, 0x3]}, @timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0xffff}, {@multicast1, 0x4}, {@remote, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x5e, 0x3, 0x6, [{@rand_addr=0x64010100, 0x7fff}, {@loopback, 0x7fffffff}, {@loopback, 0x4}, {@remote, 0x3}, {@empty, 0x8}, {@multicast2, 0xfff}, {@private=0xa010100, 0x9509}]}, @noop, @end, @cipso={0x86, 0x30, 0x1, [{0x2, 0x6, "fd02f069"}, {0x2, 0x8, "c733f5d37ba1"}, {0x2, 0x3, "ba"}, {0x2, 0xd, "dda52525dbad77831971ae"}, {0x1, 0xc, "254caeccfaf45d18424e"}]}, @noop, @lsrr={0x83, 0x17, 0x4e, [@private=0xa010101, @loopback, @broadcast, @rand_addr=0x64010102, @local]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xfa, [@remote, @loopback, @empty, @remote]}, @rr={0x7, 0x13, 0x1e, [@loopback, @broadcast, @empty, @loopback]}, @lsrr={0x83, 0xb, 0x4a, [@broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}], 0x1c0}, 0x60040800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 832.619853ms ago: executing program 4 (id=10430): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d70000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 776.084728ms ago: executing program 4 (id=10431): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) fchdir(r1) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x305043, 0x84, 0x1e}, 0x18) getdents64(r2, &(0x7f00000003c0)=""/160, 0xa0) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x3, 0x0, 0x7f, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 633.724699ms ago: executing program 4 (id=10432): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) write(0xffffffffffffffff, &(0x7f00000004c0)="050c865b34aae757c1cd2479043701ba5d9863c79a4c184f4268b78ecb5dfaef95f55b40d7be474bf494ceecfbe1559bb9a5b03a0ca35464645a0c4ff2e1edccec9129da4d29bbce7e14e79d864841865506afc7c80f9dc9cc683ef7d7a2c7793a9e6895c71799299f0249ea3839e1aa4c9f1091f65185e604bc60b4d1de58eb3f345f98511703164cc29f69bd5b942316790f4ac3a5bc4c37ff6306a820174fbc07aef579972e7ab35c45148a9edfb2cb23eadc61c58329c5", 0xb9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000180)={0x0, 0x5, 0x8}) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000000)) 585.817803ms ago: executing program 4 (id=10433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 573.605004ms ago: executing program 5 (id=10434): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000200)='./file0\x00', 0x122) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065"], 0x15) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 554.961675ms ago: executing program 5 (id=10435): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1000, 0xa}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 517.809248ms ago: executing program 0 (id=10436): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x9, 0x4) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0), 0x10) read(r2, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 494.51817ms ago: executing program 5 (id=10437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 478.659621ms ago: executing program 4 (id=10439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000680)=@random={'os2.', 'team0\x00\xe0\x12\x11\x11\xe1\x19\xe0\xe8{UJS(\xf7\t\x89\xc2\xf6\xc9.\xdf\xe7\xe8\xd4%\x01\xecR\xcfA\xbd\xfe\xf5\xbc\xde\xbb\x0fT\xa6\xbbCS\xdd\x91We\af\xf2\xa8p\xe93(5\x8c|\xa7N\xdd\xb4\xa7\xfe\xbc\xc7\xad\xcd\xbd\xd6R\b#\xb3}\x97\x17*O\xa4T\xad8\x06l\xaa\xb2\x1a\x91/\xa6\xde\tJ?\x82\xc1\r\x04\x13\xb0T\x0eb7\xf5\"\x8f\xfb_\xcdN\xbe~\xddI0|\xb1T\x1bgA\xde\xfc]6|\x9a\xdb^\xb6\xfa\x9d\xe5\x13\x8b\x9fM\xb3\x1fH\x13\x87R;\xf5[\xb3\xbc\xfd\xdd\x1c5\x97\x1f\xdf$\xa7\x81\xe9\xc2\xab\x18\xab\xfb\x8f\xacD\xc3*\x94\xdd\xd5_\xfe\x1c\xa3\x8e\xe3\\\xca\x9bf,\xa1PW\b\xd1\x80F\x94m\xd7=\xe4\x986IK\xd2\xe3[\xab\xa5\x03Xj\xf2!\b:\xd9\';\x1d\x9e<\xee\xb7\xa42\x101\xf5\x8a6\x05Y\x04\xa2\xf3K:\x88wJU\xd7 \xc9\xadL7&\x1f\x8a\x86\xd5C\xb5\x85\x83w\xcd\xb3\x1c\xc8\xaf\x83\x87^\xb2rO\xce\xc7$\x91a3\x13\xfc\xc6a\xc2\x03{\xee\xadG\xfa\xb2\x1d\x02Anr\x88\x16\x85O\xf7\x92\xa5\x15\xeb_\xb4@z\x1e\xf0\x92\xc0\xe6,\x1f=@\x01\xe4\xdan\xc5\x8c\x04\xc3\x8d2\xb8\xd6\x17\xcf7$\xd0\xbd\n\xf07P\xc0o\x88Y7K!\xd3W%\xf1\xf7\x89[R\xe6\xe2Q\xc5<\xaa\x1a#VI\xfc;\xe4\a\"\x92@dm\xda\xce gj\xdf]C\xe6\xa3\x96\x19\x9fw\xdb\xdei~'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3067, 0x2025}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x107}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040082) 319.085834ms ago: executing program 5 (id=10440): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYBLOB='showassoc,map=acorn,showassoc,utf8,check=relaxed,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c636865636b3d7374726963742c7569643d014ddfd7528e2abb611ab9a6f0020c71e7e4e129d3efc1207d122e24d0e5aa9f74b3e95844d340377ad31e1f1e55ff56785ca0655fe348172e188e19180ebcd1c5f60e6bfb3d4b232394a70ed43896502c1fad07eca5cc4ad532127749fa88b2dcb188a93734b11220cfed988675869e05f19923", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',unhide,hide,session=0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x943, &(0x7f0000001500)="$eJzs3c1vHGcZAPBnNl7iuFWakrRx3ENXTYxMBM7uRkmIcsHxrp0tthfZjtSKi4G4KIqhiIIUKg5BQpyI4IA4wC1HThG99ITyV3Dgkj+AS8TJN1fv7PojzX44luN13d9Pmp2dmWfe55l9Z+eVP3Yn+Crb2NjIpz0u3/7nQRbL4XOz9vTR44dp+v1afCOOxZXs84jhiChFDEXEaERxurbYnO/T0L2IlYh4EpFFxPFozXdlJbI/x+vby08i+0fK29uum6eHDb7WBn3+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAYZRN18rlShZzjYXbH5S6y28B3mP7ZnvNQnosNPvmjcjSFMPDm7f6Hj29vfmt9PBenG0tnc1vSB7D8elrb5+6cXqosLl/j4IOxCe//fTej9fWVn816EIGZLa+0FhqNuanZuulxlKzdP3q1fKlWzNLpZnGXH3pw6Xl+nxperE+tdxcLE1Mf7tUuX79cqk++WHz9sJsbWquvrny2ner5fLV0vuTP6xPLS41Fy69P7k0fasxN9dYmM1j0uYUcy2diD9oLJeW61PzpdJHd9dWL/crMgVVdhNU7RdULVerlUq1Wrl65fqVa+Xy0Asryl8SL0QM/qRlsPb9Gg57tdEe/wEAAICjK8t/x55+/i/mv4fPYqYxVy8PuiwAAABgH+V/+T+bZsWIONFe6+d/AAAAOEr6f8aub0T2nTjXijh3pzW/04741/E8YmSmMVefnG7O3ajEt7Y+7de5tWL+7wcXY6wVNTbSmo+0o9qfHBxOUZXJG5W4GO+0It6ZOJ9m5yd2RGYR+b8zVFuR7U/elDYji1uvwlabl1MkABx17/UZj3cz/l+M8VbE+FgadmNorMNoXTayAsBhsfUNNq/wyaCPEQB4nlEaAAAAAAAAAAAAAAAAAAAAAAAAAAAA9t9BfP+/J5548lV7MugrEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA11MWcazT+kLE8YgoR8Slg6/q1Xkw6AIGLFuP9bgfJwddBwAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUdP+/v9CtOavtVbFUCFiPCJWIuJHg65xTzre1SBi/aDrOGR2fP9/6vPYyGKo1e2RFadri8351P35vR8KTx89fpim9q4/f5k8qYGU4bluaGfovteb+V4jtdVP7v3641+WajfzIm8uz8zV5mcXv78d+Hb2WUQpWtOmE+16fzf+7790OPLP0pHuLu9Mnrf2Yt6znfZ+2jNvL3fXVqsp03L9g+Xf/OLu/R2bvhljEecnIiaez/SzNHXJNBbFXtmyZ9kfs5Pxt1jJ+z+9GtlGlrrojfz4T3x0d2118qcfr93pUtOpGI2IOxHDu69pNL+edJSfdYViylrOg9LDmT7t9bSjxUqXY3gzzkXEyEsdw7nux5Dr87q3K7rcpaLT8e5L9/S7fTJ2lD3L/pvdiv/EH3bc/6OQ+n88dvPuTDF55I4zpWtkoRWZH3m1Z5td35XsTaHXxj/FT+J7W/1f2HH9b/fVwVyPdmR89e+L7UHozJdGpPbVp1uV7TrPtKK61PlWXIgYGnupK8qFPleUF/cv7uI4+8ieZX/PJuL/8cD9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMMvizjWaX0hYjwiTkXEG2m5FLGxH/kKI1n87+R+tLQ3DwaX+lDI1mM97scAewAAAAAAAACA/XSz9vTR44dpytLisbiQfR4x3PpL/1BEnMr+WpyuLTbn+zRUjFiJiCd7qCHtF69vLz9JS6N7aAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPriwAAAP//hO21Ig==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010002000000080002007f0000010c00028005000100000000000800074000000000080003400000100e0c000f800800014000000000"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500040000002020207b1a31616474abb4a4dbe248d1f8ff00000000bfa100000000000007010000f8ffffffb70200008500000070000000850000000500"/96], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(r1, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7fffffffffffffff}, 0x18) close(r5) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) 305.493495ms ago: executing program 4 (id=10441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYBLOB='showassoc,map=acorn,showassoc,utf8,check=relaxed,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c636865636b3d7374726963742c7569643d014ddfd7528e2abb611ab9a6f0020c71e7e4e129d3efc1207d122e24d0e5aa9f74b3e95844d340377ad31e1f1e55ff56785ca0655fe348172e188e19180ebcd1c5f60e6bfb3d4b232394a70ed43896502c1fad07eca5cc4ad532127749fa88b2dcb188a93734b11220cfed988675869e05f19923", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',unhide,hide,session=0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x943, &(0x7f0000001500)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010002000000080002007f0000010c00028005000100000000000800074000000000080003400000100e0c000f800800014000000000"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500040000002020207b1a31616474abb4a4dbe248d1f8ff00000000bfa100000000000007010000f8ffffffb70200008500000070000000850000000500"/96], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(r1, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7fffffffffffffff}, 0x18) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) 174.904116ms ago: executing program 1 (id=10442): r0 = open(0x0, 0x2, 0x38) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x40, 0xfffffffc, 0x85}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x6}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) close(r1) flock(r0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd']) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f0000000040)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27) 110.404911ms ago: executing program 3 (id=10413): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a"], 0x3c}}, 0x0) 0s ago: executing program 3 (id=10443): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) write(0xffffffffffffffff, &(0x7f00000004c0)="050c865b34aae757c1cd2479043701ba5d9863c79a4c184f4268b78ecb5dfaef95f55b40d7be474bf494ceecfbe1559bb9a5b03a0ca35464645a0c4ff2e1edccec9129da4d29bbce7e14e79d864841865506afc7c80f9dc9cc683ef7d7a2c7793a9e6895c71799299f0249ea3839e1aa4c9f1091f65185e604bc60b4d1de58eb3f345f98511703164cc29f69bd5b942316790f4ac3a5bc4c37ff6306a820174fbc07aef579972e7ab35c45148a9edfb2cb23eadc61c58329c5", 0xb9) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000180)={0x0, 0x5, 0x8}) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000000)) kernel console output (not intermixed with test programs): an invalid length. [ 508.904728][ T6249] vhci_hcd: stop threads [ 508.916552][ T6249] vhci_hcd: release socket [ 508.921047][ T6249] vhci_hcd: disconnect device [ 508.970217][ T2957] vhci_hcd: vhci_device speed not set [ 509.043975][T30196] team0: Device ipvlan0 failed to register rx_handler [ 509.128887][ T29] audit: type=1400 audit(509.103:51419): avc: granted { setsecparam } for pid=30203 comm="syz.5.9726" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 509.171057][ T29] audit: type=1400 audit(509.143:51420): avc: denied { setopt } for pid=30204 comm="syz.1.9727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.190210][ T29] audit: type=1400 audit(509.143:51421): avc: denied { write } for pid=30204 comm="syz.1.9727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 509.248781][ T29] audit: type=1326 audit(509.223:51422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30215 comm="syz.3.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c865ebe9 code=0x7ffc0000 [ 509.271808][ T29] audit: type=1326 audit(509.223:51423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30215 comm="syz.3.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c865ebe9 code=0x7ffc0000 [ 509.294982][ T29] audit: type=1326 audit(509.233:51424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30215 comm="syz.3.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60c865ebe9 code=0x7ffc0000 [ 509.317992][ T29] audit: type=1326 audit(509.233:51425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30215 comm="syz.3.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c865ebe9 code=0x7ffc0000 [ 509.341084][ T29] audit: type=1326 audit(509.233:51426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30215 comm="syz.3.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c865ebe9 code=0x7ffc0000 [ 509.365727][ T29] audit: type=1326 audit(509.323:51427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30215 comm="syz.3.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60c865ebe9 code=0x7ffc0000 [ 509.367497][T30216] random: crng reseeded on system resumption [ 509.474820][T30222] syzkaller0: entered promiscuous mode [ 509.480367][T30222] syzkaller0: entered allmulticast mode [ 509.561319][T30230] ipvlan0: entered allmulticast mode [ 509.566727][T30230] veth0_vlan: entered allmulticast mode [ 509.600929][T30230] team0: Device ipvlan0 failed to register rx_handler [ 509.767094][T30240] program syz.3.9738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.061214][T30266] FAULT_INJECTION: forcing a failure. [ 510.061214][T30266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.074422][T30266] CPU: 0 UID: 0 PID: 30266 Comm: syz.5.9750 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 510.074456][T30266] Tainted: [W]=WARN [ 510.074492][T30266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.074506][T30266] Call Trace: [ 510.074512][T30266] [ 510.074521][T30266] __dump_stack+0x1d/0x30 [ 510.074619][T30266] dump_stack_lvl+0xe8/0x140 [ 510.074642][T30266] dump_stack+0x15/0x1b [ 510.074670][T30266] should_fail_ex+0x265/0x280 [ 510.074836][T30266] should_fail+0xb/0x20 [ 510.074856][T30266] should_fail_usercopy+0x1a/0x20 [ 510.074911][T30266] _copy_from_iter+0xd2/0xe80 [ 510.074941][T30266] ? __build_skb_around+0x1a0/0x200 [ 510.074976][T30266] ? __alloc_skb+0x223/0x320 [ 510.075078][T30266] netlink_sendmsg+0x471/0x6b0 [ 510.075111][T30266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.075131][T30266] __sock_sendmsg+0x145/0x180 [ 510.075233][T30266] ____sys_sendmsg+0x31e/0x4e0 [ 510.075285][T30266] ___sys_sendmsg+0x17b/0x1d0 [ 510.075324][T30266] __x64_sys_sendmsg+0xd4/0x160 [ 510.075424][T30266] x64_sys_call+0x191e/0x2ff0 [ 510.075468][T30266] do_syscall_64+0xd2/0x200 [ 510.075497][T30266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 510.075526][T30266] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 510.075555][T30266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.075575][T30266] RIP: 0033:0x7f1c6241ebe9 [ 510.075590][T30266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.075611][T30266] RSP: 002b:00007f1c60e87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.075701][T30266] RAX: ffffffffffffffda RBX: 00007f1c62645fa0 RCX: 00007f1c6241ebe9 [ 510.075713][T30266] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 510.075725][T30266] RBP: 00007f1c60e87090 R08: 0000000000000000 R09: 0000000000000000 [ 510.075737][T30266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.075750][T30266] R13: 00007f1c62646038 R14: 00007f1c62645fa0 R15: 00007ffee8458818 [ 510.075770][T30266] [ 510.318987][T30272] __nla_validate_parse: 3 callbacks suppressed [ 510.319035][T30272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9751'. [ 510.368642][T30269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 510.375198][T30269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.382837][T30269] vhci_hcd vhci_hcd.0: Device attached [ 510.395409][T30276] vhci_hcd: connection closed [ 510.396417][ T6231] vhci_hcd: stop threads [ 510.405443][ T6231] vhci_hcd: release socket [ 510.410026][ T6231] vhci_hcd: disconnect device [ 510.467082][T30284] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(15) [ 510.473982][T30284] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 510.481636][T30284] vhci_hcd vhci_hcd.0: Device attached [ 510.489097][T30281] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 510.495728][T30281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.503320][T30281] vhci_hcd vhci_hcd.0: Device attached [ 510.523566][T30272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9751'. [ 510.555403][T30274] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 510.561956][T30274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.569489][T30274] vhci_hcd vhci_hcd.0: Device attached [ 510.619436][T30285] vhci_hcd: connection closed [ 510.619700][T30282] vhci_hcd: connection closed [ 510.624512][T30278] vhci_hcd: connection closed [ 510.630703][ T6285] vhci_hcd: stop threads [ 510.639677][ T6285] vhci_hcd: release socket [ 510.644113][ T6285] vhci_hcd: disconnect device [ 510.650555][ T6285] vhci_hcd: stop threads [ 510.654885][ T6285] vhci_hcd: release socket [ 510.659358][ T6285] vhci_hcd: disconnect device [ 510.664123][T27000] vhci_hcd: vhci_device speed not set [ 510.755757][ T6285] vhci_hcd: stop threads [ 510.760085][ T6285] vhci_hcd: release socket [ 510.764568][ T6285] vhci_hcd: disconnect device [ 510.888983][T30313] syzkaller0: entered promiscuous mode [ 510.894524][T30313] syzkaller0: entered allmulticast mode [ 510.927264][T30316] pim6reg1: entered promiscuous mode [ 510.932749][T30316] pim6reg1: entered allmulticast mode [ 510.935761][T30318] program syz.1.9765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.970973][T30321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9766'. [ 511.133308][T30333] validate_nla: 9 callbacks suppressed [ 511.133327][T30333] netlink: 'syz.1.9772': attribute type 10 has an invalid length. [ 511.149290][T30333] team0: Device ipvlan0 failed to register rx_handler [ 511.290775][T30345] program syz.1.9777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.441090][T30355] pim6reg1: entered promiscuous mode [ 511.446452][T30355] pim6reg1: entered allmulticast mode [ 511.727832][T30362] syzkaller0: entered promiscuous mode [ 511.733423][T30362] syzkaller0: entered allmulticast mode [ 511.962880][T30381] 9pnet: Could not find request transport: fd0x0000000000000007 [ 512.297504][T30402] syzkaller0: entered promiscuous mode [ 512.303075][T30402] syzkaller0: entered allmulticast mode [ 512.946603][T30441] program syz.1.9816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.988659][T30447] program syz.1.9819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.990964][T30449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9820'. [ 513.022268][T30449] netlink: 'syz.0.9820': attribute type 21 has an invalid length. [ 513.113967][T30465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9827'. [ 513.128009][T30465] netlink: 'syz.3.9827': attribute type 21 has an invalid length. [ 513.129825][T30467] program syz.0.9828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.197649][T30473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9830'. [ 513.303028][T30477] netlink: 'syz.1.9832': attribute type 10 has an invalid length. [ 513.335355][T30477] team0: Device ipvlan0 failed to register rx_handler [ 513.357761][T30484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9835'. [ 513.373902][T30484] netlink: 'syz.4.9835': attribute type 21 has an invalid length. [ 513.414127][T30486] netlink: 'syz.1.9836': attribute type 4 has an invalid length. [ 513.428633][T30486] netlink: 'syz.1.9836': attribute type 4 has an invalid length. [ 513.460818][T30492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9838'. [ 513.493647][T30495] program syz.1.9839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.535358][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9841'. [ 513.650278][T30499] netlink: 'syz.3.9841': attribute type 21 has an invalid length. [ 513.703476][T30510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9844'. [ 513.823036][ T29] kauditd_printk_skb: 1189 callbacks suppressed [ 513.823055][ T29] audit: type=1326 audit(513.803:52615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 513.903224][ T29] audit: type=1326 audit(513.833:52616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 513.926372][ T29] audit: type=1326 audit(513.833:52617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 513.949573][ T29] audit: type=1326 audit(513.833:52618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 513.972637][ T29] audit: type=1326 audit(513.833:52619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 513.995613][ T29] audit: type=1326 audit(513.833:52620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 514.018574][ T29] audit: type=1326 audit(513.843:52621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 514.041658][ T29] audit: type=1326 audit(513.843:52622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 514.064866][ T29] audit: type=1326 audit(513.843:52623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 514.087950][ T29] audit: type=1326 audit(513.843:52624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30507 comm="syz.5.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 514.167617][T30520] netlink: 'syz.1.9848': attribute type 21 has an invalid length. [ 514.216137][T30525] netlink: 'syz.3.9850': attribute type 4 has an invalid length. [ 514.246572][T30529] program syz.0.9852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.308059][T30533] syzkaller0: entered promiscuous mode [ 514.313701][T30533] syzkaller0: entered allmulticast mode [ 514.647897][T30559] pim6reg1: entered promiscuous mode [ 514.653312][T30559] pim6reg1: entered allmulticast mode [ 514.856962][T30575] syzkaller0: entered promiscuous mode [ 514.862625][T30575] syzkaller0: entered allmulticast mode [ 515.186579][T30581] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 515.193211][T30581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 515.200777][T30581] vhci_hcd vhci_hcd.0: Device attached [ 515.385756][T30594] vhci_hcd: connection closed [ 515.386017][ T6285] vhci_hcd: stop threads [ 515.395081][ T6285] vhci_hcd: release socket [ 515.399574][ T6285] vhci_hcd: disconnect device [ 515.592632][T30619] team0: Device ipvlan0 failed to register rx_handler [ 515.629830][T30621] syzkaller0: entered promiscuous mode [ 515.635356][T30621] syzkaller0: entered allmulticast mode [ 515.703467][T30625] __nla_validate_parse: 2 callbacks suppressed [ 515.703485][T30625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9889'. [ 515.819658][T30636] random: crng reseeded on system resumption [ 515.833880][T30636] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9894'. [ 516.018145][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9898'. [ 516.095599][T30654] program syz.4.9901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.341102][T30669] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 516.347811][T30669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 516.355554][T30669] vhci_hcd vhci_hcd.0: Device attached [ 516.363119][T30674] vhci_hcd: connection closed [ 516.363458][ T6277] vhci_hcd: stop threads [ 516.372649][ T6277] vhci_hcd: release socket [ 516.377168][ T6277] vhci_hcd: disconnect device [ 516.645818][T30686] validate_nla: 7 callbacks suppressed [ 516.645838][T30686] netlink: 'syz.4.9912': attribute type 10 has an invalid length. [ 516.672085][T30686] ipvlan0: entered allmulticast mode [ 516.677447][T30686] veth0_vlan: entered allmulticast mode [ 516.696037][T30686] team0: Device ipvlan0 failed to register rx_handler [ 516.704812][T30689] program syz.0.9913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.733188][T30691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9914'. [ 516.744738][T30691] netlink: 'syz.0.9914': attribute type 21 has an invalid length. [ 516.897721][T30705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9919'. [ 516.925254][T30705] netlink: 'syz.0.9919': attribute type 21 has an invalid length. [ 516.941350][T30709] pim6reg1: entered promiscuous mode [ 516.946708][T30709] pim6reg1: entered allmulticast mode [ 517.019393][T30720] program syz.5.9924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.031389][T30712] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 517.037921][T30712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.045525][T30712] vhci_hcd vhci_hcd.0: Device attached [ 517.061588][T30712] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 517.068258][T30712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.075872][T30712] vhci_hcd vhci_hcd.0: Device attached [ 517.093535][T30724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9926'. [ 517.107577][T30718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9925'. [ 517.120271][T30712] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 517.126902][T30712] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 517.134562][T30712] vhci_hcd vhci_hcd.0: Device attached [ 517.141466][T30724] netlink: 'syz.0.9926': attribute type 21 has an invalid length. [ 517.144482][T30730] vhci_hcd: connection closed [ 517.150570][T30718] macvtap1: entered promiscuous mode [ 517.160786][T30718] batadv0: entered promiscuous mode [ 517.166083][T30718] macvtap1: entered allmulticast mode [ 517.171487][T30718] batadv0: entered allmulticast mode [ 517.177130][T30725] vhci_hcd: connection closed [ 517.177377][T30721] vhci_hcd: connection closed [ 517.179871][T30735] FAULT_INJECTION: forcing a failure. [ 517.179871][T30735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.182743][T30718] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 517.186790][T30735] CPU: 0 UID: 0 PID: 30735 Comm: syz.3.9925 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 517.186843][T30735] Tainted: [W]=WARN [ 517.186851][T30735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.186863][T30735] Call Trace: [ 517.186869][T30735] [ 517.186879][T30735] __dump_stack+0x1d/0x30 [ 517.186902][T30735] dump_stack_lvl+0xe8/0x140 [ 517.186924][T30735] dump_stack+0x15/0x1b [ 517.186941][T30735] should_fail_ex+0x265/0x280 [ 517.186972][T30735] should_fail+0xb/0x20 [ 517.186990][T30735] should_fail_usercopy+0x1a/0x20 [ 517.187012][T30735] _copy_from_iter+0xd2/0xe80 [ 517.187053][T30735] ? __build_skb_around+0x1a0/0x200 [ 517.187085][T30735] ? __alloc_skb+0x223/0x320 [ 517.187105][T30735] netlink_sendmsg+0x471/0x6b0 [ 517.187144][T30735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.187166][T30735] __sock_sendmsg+0x145/0x180 [ 517.187295][T30735] ____sys_sendmsg+0x31e/0x4e0 [ 517.187320][T30735] ___sys_sendmsg+0x17b/0x1d0 [ 517.187353][T30735] __x64_sys_sendmsg+0xd4/0x160 [ 517.187451][T30735] x64_sys_call+0x191e/0x2ff0 [ 517.187471][T30735] do_syscall_64+0xd2/0x200 [ 517.187498][T30735] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 517.187576][T30735] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 517.187637][T30735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.187659][T30735] RIP: 0033:0x7f60c865ebe9 [ 517.187675][T30735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.187693][T30735] RSP: 002b:00007f60c709e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.187764][T30735] RAX: ffffffffffffffda RBX: 00007f60c8886090 RCX: 00007f60c865ebe9 [ 517.187793][T30735] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000012 [ 517.187806][T30735] RBP: 00007f60c709e090 R08: 0000000000000000 R09: 0000000000000000 [ 517.187819][T30735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.187831][T30735] R13: 00007f60c8886128 R14: 00007f60c8886090 R15: 00007ffddf6e72b8 [ 517.187850][T30735] [ 517.187945][ T6285] vhci_hcd: stop threads [ 517.211870][T30733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9927'. [ 517.218114][ T6285] vhci_hcd: release socket [ 517.429214][ T6285] vhci_hcd: disconnect device [ 517.440438][ T6285] vhci_hcd: stop threads [ 517.444767][ T6285] vhci_hcd: release socket [ 517.449239][ T6285] vhci_hcd: disconnect device [ 517.456768][ T6285] vhci_hcd: stop threads [ 517.461172][ T6285] vhci_hcd: release socket [ 517.465630][ T6285] vhci_hcd: disconnect device [ 517.472652][T30742] netlink: 'syz.0.9929': attribute type 4 has an invalid length. [ 517.492729][T30742] netlink: 'syz.0.9929': attribute type 4 has an invalid length. [ 517.501217][T27009] usb 9-1: new low-speed USB device number 21 using vhci_hcd [ 517.520127][T27009] usb 9-1: enqueue for inactive port 0 [ 517.525842][T27009] usb 9-1: enqueue for inactive port 0 [ 517.531713][T27009] usb 9-1: enqueue for inactive port 0 [ 517.589051][T30744] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 517.595607][T30744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.603237][T30744] vhci_hcd vhci_hcd.0: Device attached [ 517.618771][T27009] vhci_hcd: vhci_device speed not set [ 517.634627][T30755] FAULT_INJECTION: forcing a failure. [ 517.634627][T30755] name failslab, interval 1, probability 0, space 0, times 0 [ 517.642253][T30751] vhci_hcd: connection closed [ 517.647476][T30755] CPU: 1 UID: 0 PID: 30755 Comm: syz.0.9933 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 517.647511][T30755] Tainted: [W]=WARN [ 517.647519][T30755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.647532][T30755] Call Trace: [ 517.647539][T30755] [ 517.647547][T30755] __dump_stack+0x1d/0x30 [ 517.647588][T30755] dump_stack_lvl+0xe8/0x140 [ 517.647606][T30755] dump_stack+0x15/0x1b [ 517.647622][T30755] should_fail_ex+0x265/0x280 [ 517.647641][T30755] should_failslab+0x8c/0xb0 [ 517.647693][T30755] kmem_cache_alloc_noprof+0x50/0x310 [ 517.647722][T30755] ? alloc_empty_file+0x76/0x200 [ 517.647755][T30755] alloc_empty_file+0x76/0x200 [ 517.647782][T30755] path_openat+0x68/0x2170 [ 517.647848][T30755] ? mntput+0x4b/0x80 [ 517.647889][T30755] ? terminate_walk+0x27f/0x2a0 [ 517.647991][T30755] ? path_openat+0x1bf8/0x2170 [ 517.648030][T30755] ? _parse_integer_limit+0x170/0x190 [ 517.648054][T30755] do_filp_open+0x109/0x230 [ 517.648080][T30755] do_open_execat+0xd8/0x260 [ 517.648099][T30755] alloc_bprm+0x25/0x350 [ 517.648173][T30755] do_execveat_common+0x12e/0x750 [ 517.648203][T30755] __x64_sys_execve+0x5c/0x70 [ 517.648291][T30755] x64_sys_call+0x2716/0x2ff0 [ 517.648316][T30755] do_syscall_64+0xd2/0x200 [ 517.648391][T30755] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 517.648413][T30755] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 517.648442][T30755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.648543][T30755] RIP: 0033:0x7f557a23ebe9 [ 517.648560][T30755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.648581][T30755] RSP: 002b:00007f5578ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 517.648604][T30755] RAX: ffffffffffffffda RBX: 00007f557a465fa0 RCX: 00007f557a23ebe9 [ 517.648619][T30755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 517.648635][T30755] RBP: 00007f5578ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 517.648649][T30755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.648685][T30755] R13: 00007f557a466038 R14: 00007f557a465fa0 R15: 00007fff29f8be28 [ 517.648757][T30755] [ 517.649010][ T6247] vhci_hcd: stop threads [ 517.876788][ T6247] vhci_hcd: release socket [ 517.876801][ T6247] vhci_hcd: disconnect device [ 517.927101][T30760] syzkaller0: entered promiscuous mode [ 517.932654][T30760] syzkaller0: entered allmulticast mode [ 517.997976][T30770] pim6reg1: entered promiscuous mode [ 518.003414][T30770] pim6reg1: entered allmulticast mode [ 518.029682][T30773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9940'. [ 518.038932][T30763] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 518.045461][T30763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 518.053034][T30763] vhci_hcd vhci_hcd.0: Device attached [ 518.061141][T30773] netlink: 'syz.4.9940': attribute type 21 has an invalid length. [ 518.070253][T30774] vhci_hcd: connection closed [ 518.070708][ T6285] vhci_hcd: stop threads [ 518.079808][ T6285] vhci_hcd: release socket [ 518.084241][ T6285] vhci_hcd: disconnect device [ 518.111852][T30778] FAULT_INJECTION: forcing a failure. [ 518.111852][T30778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.125022][T30778] CPU: 0 UID: 0 PID: 30778 Comm: syz.3.9941 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 518.125060][T30778] Tainted: [W]=WARN [ 518.125068][T30778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.125082][T30778] Call Trace: [ 518.125090][T30778] [ 518.125174][T30778] __dump_stack+0x1d/0x30 [ 518.125198][T30778] dump_stack_lvl+0xe8/0x140 [ 518.125220][T30778] dump_stack+0x15/0x1b [ 518.125240][T30778] should_fail_ex+0x265/0x280 [ 518.125340][T30778] should_fail+0xb/0x20 [ 518.125361][T30778] should_fail_usercopy+0x1a/0x20 [ 518.125384][T30778] _copy_to_user+0x20/0xa0 [ 518.125423][T30778] simple_read_from_buffer+0xb5/0x130 [ 518.125505][T30778] proc_fail_nth_read+0x10e/0x150 [ 518.125539][T30778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 518.125588][T30778] vfs_read+0x1a8/0x770 [ 518.125612][T30778] ? __rcu_read_unlock+0x4f/0x70 [ 518.125636][T30778] ? __fget_files+0x184/0x1c0 [ 518.125734][T30778] ksys_read+0xda/0x1a0 [ 518.125842][T30778] __x64_sys_read+0x40/0x50 [ 518.125868][T30778] x64_sys_call+0x27bc/0x2ff0 [ 518.125892][T30778] do_syscall_64+0xd2/0x200 [ 518.125917][T30778] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 518.125945][T30778] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 518.125989][T30778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.126014][T30778] RIP: 0033:0x7f60c865d5fc [ 518.126042][T30778] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 518.126059][T30778] RSP: 002b:00007f60c70bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 518.126080][T30778] RAX: ffffffffffffffda RBX: 00007f60c8885fa0 RCX: 00007f60c865d5fc [ 518.126128][T30778] RDX: 000000000000000f RSI: 00007f60c70bf0a0 RDI: 0000000000000004 [ 518.126140][T30778] RBP: 00007f60c70bf090 R08: 0000000000000000 R09: 0000000000000018 [ 518.126153][T30778] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 518.126168][T30778] R13: 00007f60c8886038 R14: 00007f60c8885fa0 R15: 00007ffddf6e72b8 [ 518.126190][T30778] [ 518.359829][T30784] netlink: 'syz.0.9944': attribute type 10 has an invalid length. [ 518.388486][T30784] team0: Device ipvlan0 failed to register rx_handler [ 518.513215][T30790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9947'. [ 518.652519][T30810] netlink: 'syz.5.9950': attribute type 4 has an invalid length. [ 518.670234][T30810] netlink: 'syz.5.9950': attribute type 4 has an invalid length. [ 518.924337][ T29] kauditd_printk_skb: 748 callbacks suppressed [ 518.924361][ T29] audit: type=1326 audit(518.903:53373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30812 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 519.015768][ T29] audit: type=1326 audit(518.943:53374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30812 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 519.039045][ T29] audit: type=1326 audit(518.943:53375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30812 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 519.062260][ T29] audit: type=1326 audit(518.943:53376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30812 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 519.085277][ T29] audit: type=1326 audit(518.943:53377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30812 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 519.108744][ T29] audit: type=1326 audit(518.943:53378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30812 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 519.131792][ T29] audit: type=1326 audit(518.943:53379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30817 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c624514a5 code=0x7ffc0000 [ 519.154900][ T29] audit: type=1326 audit(518.963:53380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30812 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c6241d550 code=0x7ffc0000 [ 519.178022][ T29] audit: type=1326 audit(518.963:53381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30812 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c6241d550 code=0x7ffc0000 [ 519.201099][ T29] audit: type=1326 audit(518.963:53382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30812 comm="syz.5.9951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6241ebe9 code=0x7ffc0000 [ 519.466219][T30821] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 519.472777][T30821] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 519.480412][T30821] vhci_hcd vhci_hcd.0: Device attached [ 519.507286][T30828] vhci_hcd: connection closed [ 519.508058][ T6285] vhci_hcd: stop threads [ 519.517086][ T6285] vhci_hcd: release socket [ 519.521584][ T6285] vhci_hcd: disconnect device [ 519.581890][T30836] FAULT_INJECTION: forcing a failure. [ 519.581890][T30836] name failslab, interval 1, probability 0, space 0, times 0 [ 519.594595][T30836] CPU: 1 UID: 0 PID: 30836 Comm: syz.5.9958 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 519.594630][T30836] Tainted: [W]=WARN [ 519.594637][T30836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.594650][T30836] Call Trace: [ 519.594658][T30836] [ 519.594668][T30836] __dump_stack+0x1d/0x30 [ 519.594693][T30836] dump_stack_lvl+0xe8/0x140 [ 519.594750][T30836] dump_stack+0x15/0x1b [ 519.594769][T30836] should_fail_ex+0x265/0x280 [ 519.594827][T30836] should_failslab+0x8c/0xb0 [ 519.594903][T30836] __kmalloc_noprof+0xa5/0x3e0 [ 519.594931][T30836] ? security_inode_init_security+0xc5/0x330 [ 519.594968][T30836] security_inode_init_security+0xc5/0x330 [ 519.595057][T30836] ? __pfx_shmem_initxattrs+0x10/0x10 [ 519.595085][T30836] shmem_tmpfile+0x78/0x110 [ 519.595111][T30836] vfs_tmpfile+0x226/0x4d0 [ 519.595194][T30836] do_tmpfile+0xa8/0x190 [ 519.595340][T30836] path_openat+0x1dd7/0x2170 [ 519.595360][T30836] ? path_openat+0x1bf8/0x2170 [ 519.595380][T30836] ? _parse_integer_limit+0x170/0x190 [ 519.595443][T30836] ? _parse_integer+0x27/0x40 [ 519.595467][T30836] do_filp_open+0x109/0x230 [ 519.595495][T30836] do_sys_openat2+0xa6/0x110 [ 519.595527][T30836] __se_sys_openat2+0x194/0x1f0 [ 519.595629][T30836] __x64_sys_openat2+0x55/0x70 [ 519.595661][T30836] x64_sys_call+0x1121/0x2ff0 [ 519.595684][T30836] do_syscall_64+0xd2/0x200 [ 519.595731][T30836] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 519.595836][T30836] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 519.595862][T30836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.595886][T30836] RIP: 0033:0x7f1c6241ebe9 [ 519.595903][T30836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.595970][T30836] RSP: 002b:00007f1c60e87038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 519.596070][T30836] RAX: ffffffffffffffda RBX: 00007f1c62645fa0 RCX: 00007f1c6241ebe9 [ 519.596082][T30836] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 519.596094][T30836] RBP: 00007f1c60e87090 R08: 0000000000000000 R09: 0000000000000000 [ 519.596106][T30836] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 519.596119][T30836] R13: 00007f1c62646038 R14: 00007f1c62645fa0 R15: 00007ffee8458818 [ 519.596139][T30836] [ 520.208754][T30845] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 520.215319][T30845] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 520.222918][T30845] vhci_hcd vhci_hcd.0: Device attached [ 520.268159][T30847] vhci_hcd: connection closed [ 520.268585][ T6285] vhci_hcd: stop threads [ 520.277617][ T6285] vhci_hcd: release socket [ 520.282076][ T6285] vhci_hcd: disconnect device [ 520.335335][T30854] pim6reg1: entered promiscuous mode [ 520.340757][T30854] pim6reg1: entered allmulticast mode [ 520.522687][T30870] FAULT_INJECTION: forcing a failure. [ 520.522687][T30870] name failslab, interval 1, probability 0, space 0, times 0 [ 520.535494][T30870] CPU: 1 UID: 0 PID: 30870 Comm: syz.0.9970 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 520.535528][T30870] Tainted: [W]=WARN [ 520.535535][T30870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.535550][T30870] Call Trace: [ 520.535557][T30870] [ 520.535566][T30870] __dump_stack+0x1d/0x30 [ 520.535622][T30870] dump_stack_lvl+0xe8/0x140 [ 520.535643][T30870] dump_stack+0x15/0x1b [ 520.535661][T30870] should_fail_ex+0x265/0x280 [ 520.535755][T30870] should_failslab+0x8c/0xb0 [ 520.535782][T30870] kmem_cache_alloc_noprof+0x50/0x310 [ 520.535812][T30870] ? skb_clone+0x151/0x1f0 [ 520.535838][T30870] skb_clone+0x151/0x1f0 [ 520.535890][T30870] nfnetlink_rcv+0x305/0x1690 [ 520.535921][T30870] ? __account_obj_stock+0x211/0x350 [ 520.535947][T30870] ? try_charge_memcg+0x200/0x9e0 [ 520.535971][T30870] ? xas_load+0x413/0x430 [ 520.536002][T30870] ? __rcu_read_unlock+0x4f/0x70 [ 520.536024][T30870] ? xa_load+0xb1/0xe0 [ 520.536054][T30870] ? __account_obj_stock+0x211/0x350 [ 520.536090][T30870] ? obj_cgroup_charge_account+0x122/0x1a0 [ 520.536172][T30870] ? should_fail_ex+0x30/0x280 [ 520.536192][T30870] ? __rcu_read_unlock+0x4f/0x70 [ 520.536213][T30870] ? should_fail_ex+0xdb/0x280 [ 520.536241][T30870] netlink_unicast+0x5bd/0x690 [ 520.536348][T30870] netlink_sendmsg+0x58b/0x6b0 [ 520.536450][T30870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.536473][T30870] __sock_sendmsg+0x145/0x180 [ 520.536503][T30870] ____sys_sendmsg+0x31e/0x4e0 [ 520.536537][T30870] ___sys_sendmsg+0x17b/0x1d0 [ 520.536574][T30870] __x64_sys_sendmsg+0xd4/0x160 [ 520.536602][T30870] x64_sys_call+0x191e/0x2ff0 [ 520.536625][T30870] do_syscall_64+0xd2/0x200 [ 520.536684][T30870] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 520.536709][T30870] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 520.536737][T30870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.536778][T30870] RIP: 0033:0x7f557a23ebe9 [ 520.536795][T30870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.536872][T30870] RSP: 002b:00007f5578ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.536893][T30870] RAX: ffffffffffffffda RBX: 00007f557a465fa0 RCX: 00007f557a23ebe9 [ 520.536907][T30870] RDX: 0000000000044110 RSI: 0000200000000080 RDI: 0000000000000003 [ 520.537021][T30870] RBP: 00007f5578ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 520.537035][T30870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.537048][T30870] R13: 00007f557a466038 R14: 00007f557a465fa0 R15: 00007fff29f8be28 [ 520.537096][T30870] [ 520.892849][T30873] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 520.899416][T30873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 520.907091][T30873] vhci_hcd vhci_hcd.0: Device attached [ 520.936030][T30873] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 520.942856][T30873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 520.950463][T30873] vhci_hcd vhci_hcd.0: Device attached [ 520.956403][T30876] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 520.962952][T30876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 520.970515][T30876] vhci_hcd vhci_hcd.0: Device attached [ 520.976580][T30873] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 520.980198][T30884] vhci_hcd: connection closed [ 520.983212][T30873] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 520.984614][ T6257] vhci_hcd: stop threads [ 520.988133][T30873] vhci_hcd vhci_hcd.0: Device attached [ 520.995686][ T6257] vhci_hcd: release socket [ 520.995716][ T6257] vhci_hcd: disconnect device [ 521.022929][T30889] __nla_validate_parse: 4 callbacks suppressed [ 521.022948][T30889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9975'. [ 521.036817][T30886] vhci_hcd: connection closed [ 521.038495][ T6247] vhci_hcd: stop threads [ 521.038541][T30882] vhci_hcd: connection closed [ 521.043360][ T6247] vhci_hcd: release socket [ 521.056787][ T6247] vhci_hcd: disconnect device [ 521.062253][T30879] vhci_hcd: connection closed [ 521.069982][ T6247] vhci_hcd: stop threads [ 521.079029][ T6247] vhci_hcd: release socket [ 521.083459][ T6247] vhci_hcd: disconnect device [ 521.088416][ T6247] vhci_hcd: stop threads [ 521.092700][ T6247] vhci_hcd: release socket [ 521.097126][ T6247] vhci_hcd: disconnect device [ 521.102055][T27009] vhci_hcd: vhci_device speed not set [ 521.260027][T30901] pim6reg1: entered promiscuous mode [ 521.265402][T30901] pim6reg1: entered allmulticast mode [ 521.396009][T30914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9984'. [ 521.489929][T30918] program syz.5.9986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.543016][T30922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9988'. [ 521.586546][T30920] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 521.593098][T30920] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 521.600712][T30920] vhci_hcd vhci_hcd.0: Device attached [ 521.619071][T30924] vhci_hcd: connection closed [ 521.621230][ T6247] vhci_hcd: stop threads [ 521.630322][ T6247] vhci_hcd: release socket [ 521.634759][ T6247] vhci_hcd: disconnect device [ 521.848431][T30939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9994'. [ 521.876084][T30939] hsr_slave_1 (unregistering): left promiscuous mode [ 521.956191][T30943] pim6reg1: entered promiscuous mode [ 521.961673][T30943] pim6reg1: entered allmulticast mode [ 522.046799][T30945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9996'. [ 522.088171][T30950] program syz.3.9998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.134298][T30952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10000'. [ 522.159528][T30947] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 522.166073][T30947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 522.173686][T30947] vhci_hcd vhci_hcd.0: Device attached [ 522.205759][T30954] vhci_hcd: connection closed [ 522.206000][ T6277] vhci_hcd: stop threads [ 522.215002][ T6277] vhci_hcd: release socket [ 522.219478][ T6277] vhci_hcd: disconnect device [ 522.324605][T30965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10005'. [ 522.361167][T30971] random: crng reseeded on system resumption [ 522.377785][T30971] validate_nla: 1 callbacks suppressed [ 522.377799][T30971] netlink: 'syz.1.10006': attribute type 1 has an invalid length. [ 522.391277][T30971] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10006'. [ 522.475273][T30975] pim6reg1: entered promiscuous mode [ 522.480736][T30975] pim6reg1: entered allmulticast mode [ 522.647030][T30980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10008'. [ 522.670694][T30979] FAULT_INJECTION: forcing a failure. [ 522.670694][T30979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.683913][T30979] CPU: 1 UID: 0 PID: 30979 Comm: syz.1.10009 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 522.683951][T30979] Tainted: [W]=WARN [ 522.683958][T30979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.683972][T30979] Call Trace: [ 522.684016][T30979] [ 522.684024][T30979] __dump_stack+0x1d/0x30 [ 522.684046][T30979] dump_stack_lvl+0xe8/0x140 [ 522.684069][T30979] dump_stack+0x15/0x1b [ 522.684088][T30979] should_fail_ex+0x265/0x280 [ 522.684115][T30979] should_fail+0xb/0x20 [ 522.684168][T30979] should_fail_usercopy+0x1a/0x20 [ 522.684188][T30979] _copy_from_iter+0xd2/0xe80 [ 522.684258][T30979] ? __build_skb_around+0x1a0/0x200 [ 522.684296][T30979] ? __alloc_skb+0x223/0x320 [ 522.684391][T30979] netlink_sendmsg+0x471/0x6b0 [ 522.684415][T30979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.684435][T30979] __sock_sendmsg+0x145/0x180 [ 522.684465][T30979] ____sys_sendmsg+0x31e/0x4e0 [ 522.684493][T30979] ___sys_sendmsg+0x17b/0x1d0 [ 522.684589][T30979] __x64_sys_sendmsg+0xd4/0x160 [ 522.684627][T30979] x64_sys_call+0x191e/0x2ff0 [ 522.684650][T30979] do_syscall_64+0xd2/0x200 [ 522.684713][T30979] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 522.684737][T30979] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 522.684760][T30979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.684785][T30979] RIP: 0033:0x7faa76ecebe9 [ 522.684800][T30979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.684816][T30979] RSP: 002b:00007faa7592f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.684835][T30979] RAX: ffffffffffffffda RBX: 00007faa770f5fa0 RCX: 00007faa76ecebe9 [ 522.684849][T30979] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 522.684861][T30979] RBP: 00007faa7592f090 R08: 0000000000000000 R09: 0000000000000000 [ 522.684872][T30979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.684935][T30979] R13: 00007faa770f6038 R14: 00007faa770f5fa0 R15: 00007ffd28a3cfd8 [ 522.684959][T30979] [ 522.916566][T30983] program syz.0.10010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.943042][T30989] netlink: 'syz.5.10012': attribute type 10 has an invalid length. [ 522.957755][T30989] team0: Device ipvlan0 failed to register rx_handler [ 522.968019][T30993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10013'. [ 522.999146][T30999] FAULT_INJECTION: forcing a failure. [ 522.999146][T30999] name failslab, interval 1, probability 0, space 0, times 0 [ 523.012007][T30999] CPU: 1 UID: 0 PID: 30999 Comm: syz.5.10016 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 523.012040][T30999] Tainted: [W]=WARN [ 523.012047][T30999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.012109][T30999] Call Trace: [ 523.012117][T30999] [ 523.012125][T30999] __dump_stack+0x1d/0x30 [ 523.012196][T30999] dump_stack_lvl+0xe8/0x140 [ 523.012215][T30999] dump_stack+0x15/0x1b [ 523.012231][T30999] should_fail_ex+0x265/0x280 [ 523.012253][T30999] should_failslab+0x8c/0xb0 [ 523.012277][T30999] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 523.012387][T30999] ? sidtab_sid2str_get+0xa0/0x130 [ 523.012410][T30999] kmemdup_noprof+0x2b/0x70 [ 523.012435][T30999] sidtab_sid2str_get+0xa0/0x130 [ 523.012579][T30999] security_sid_to_context_core+0x1eb/0x2e0 [ 523.012605][T30999] security_sid_to_context+0x27/0x40 [ 523.012627][T30999] avc_audit_post_callback+0x9d/0x520 [ 523.012724][T30999] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 523.012747][T30999] common_lsm_audit+0x1b8/0x230 [ 523.012778][T30999] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 523.012805][T30999] slow_avc_audit+0x104/0x140 [ 523.012854][T30999] avc_has_extended_perms+0x6d0/0x940 [ 523.012887][T30999] ioctl_has_perm+0x257/0x2a0 [ 523.012973][T30999] selinux_file_ioctl+0x308/0x3a0 [ 523.012995][T30999] ? __fget_files+0x184/0x1c0 [ 523.013022][T30999] security_file_ioctl+0x48/0x90 [ 523.013107][T30999] __se_sys_ioctl+0x47/0x140 [ 523.013127][T30999] __x64_sys_ioctl+0x43/0x50 [ 523.013210][T30999] x64_sys_call+0x1816/0x2ff0 [ 523.013230][T30999] do_syscall_64+0xd2/0x200 [ 523.013303][T30999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 523.013332][T30999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 523.013360][T30999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.013430][T30999] RIP: 0033:0x7f1c6241ebe9 [ 523.013449][T30999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.013497][T30999] RSP: 002b:00007f1c60e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.013520][T30999] RAX: ffffffffffffffda RBX: 00007f1c62645fa0 RCX: 00007f1c6241ebe9 [ 523.013535][T30999] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000004 [ 523.013557][T30999] RBP: 00007f1c60e87090 R08: 0000000000000000 R09: 0000000000000000 [ 523.013571][T30999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.013584][T30999] R13: 00007f1c62646038 R14: 00007f1c62645fa0 R15: 00007ffee8458818 [ 523.013604][T30999] [ 523.287337][T31001] netlink: 'syz.4.10017': attribute type 21 has an invalid length. [ 523.442641][T31021] program syz.4.10024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.457830][T31018] netlink: 'syz.0.10023': attribute type 21 has an invalid length. [ 523.606032][T31030] netlink: 'syz.5.10025': attribute type 21 has an invalid length. [ 524.046112][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 524.046131][ T29] audit: type=1326 audit(524.023:53790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 524.080648][ T29] audit: type=1326 audit(524.053:53791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 524.104300][ T29] audit: type=1326 audit(524.053:53792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 524.127506][ T29] audit: type=1326 audit(524.053:53793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 524.150567][ T29] audit: type=1326 audit(524.053:53794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 524.173723][ T29] audit: type=1326 audit(524.053:53795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 524.196911][ T29] audit: type=1326 audit(524.053:53796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 524.220226][ T29] audit: type=1326 audit(524.053:53797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 524.243453][ T29] audit: type=1326 audit(524.053:53798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 524.266514][ T29] audit: type=1326 audit(524.053:53799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31039 comm="syz.0.10030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f557a23d550 code=0x7ffc0000 [ 524.411680][T31050] bond0: (slave bond_slave_1): Releasing backup interface [ 524.485521][T31053] netlink: 'syz.1.10034': attribute type 21 has an invalid length. [ 524.503279][T31055] syzkaller0: entered promiscuous mode [ 524.508910][T31055] syzkaller0: entered allmulticast mode [ 524.772826][T31063] syzkaller0: entered promiscuous mode [ 524.778371][T31063] syzkaller0: entered allmulticast mode [ 524.850458][T31065] netlink: 'syz.5.10037': attribute type 21 has an invalid length. [ 524.991706][T31071] netlink: 'syz.5.10039': attribute type 21 has an invalid length. [ 525.143011][T31082] program syz.0.10043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.833064][T31099] netlink: 'syz.3.10049': attribute type 21 has an invalid length. [ 525.959213][T31105] netlink: 'syz.0.10052': attribute type 21 has an invalid length. [ 526.180139][T31115] program syz.3.10055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.351770][T31114] block device autoloading is deprecated and will be removed. [ 526.362900][T31114] __nla_validate_parse: 12 callbacks suppressed [ 526.362916][T31114] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10054'. [ 526.494175][T31124] loop1: detected capacity change from 0 to 2364 [ 526.677280][T31124] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 526.683928][T31124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 526.691824][T31124] vhci_hcd vhci_hcd.0: Device attached [ 526.699003][T31131] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 526.705701][T31131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 526.713384][T31131] vhci_hcd vhci_hcd.0: Device attached [ 526.834462][T31136] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 526.841112][T31136] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 526.848838][T31136] vhci_hcd vhci_hcd.0: Device attached [ 526.858036][T31133] vhci_hcd: connection closed [ 526.858259][T31129] vhci_hcd: connection closed [ 526.863305][ T6266] vhci_hcd: stop threads [ 526.872444][ T6266] vhci_hcd: release socket [ 526.876873][ T6266] vhci_hcd: disconnect device [ 526.881693][T31139] vhci_hcd: connection closed [ 526.925578][T31143] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10061'. [ 527.081115][ T2957] usb 3-1: new low-speed USB device number 21 using vhci_hcd [ 527.120531][T31130] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 527.419466][ T6266] vhci_hcd: stop threads [ 527.423766][ T6266] vhci_hcd: release socket [ 527.428222][ T6266] vhci_hcd: disconnect device [ 527.433137][ T6266] vhci_hcd: stop threads [ 527.437423][ T6266] vhci_hcd: release socket [ 527.441907][ T6266] vhci_hcd: disconnect device [ 527.483657][T31153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10065'. [ 527.496065][T31153] validate_nla: 1 callbacks suppressed [ 527.496083][T31153] netlink: 'syz.1.10065': attribute type 21 has an invalid length. [ 527.511880][T31149] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 527.518419][T31149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.526005][T31149] vhci_hcd vhci_hcd.0: Device attached [ 527.537428][T31155] vhci_hcd: connection closed [ 527.537702][ T6266] vhci_hcd: stop threads [ 527.546812][ T6266] vhci_hcd: release socket [ 527.551426][ T6266] vhci_hcd: disconnect device [ 527.560577][T31159] loop1: detected capacity change from 0 to 1024 [ 527.579289][T31159] EXT4-fs: Ignoring removed bh option [ 527.584739][T31159] EXT4-fs: inline encryption not supported [ 527.595260][T31159] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 527.608738][T31159] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 527.667540][T31168] program syz.4.10069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.698005][T31159] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.10065: lblock 1 mapped to illegal pblock 1 (length 1) [ 527.728157][T31159] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.10065: Failed to acquire dquot type 0 [ 527.744835][T31159] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.10065: Freeing blocks not in datazone - block = 0, count = 4096 [ 527.768822][T31159] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.10065: Invalid inode bitmap blk 0 in block_group 0 [ 527.790285][T31159] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 527.799033][ T6266] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 527.818988][T31159] EXT4-fs (loop1): 1 orphan inode deleted [ 527.829302][T31159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.844611][ T6266] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:37: Failed to release dquot type 0 [ 527.859558][T31159] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.923019][T31180] netlink: 'syz.0.10074': attribute type 10 has an invalid length. [ 527.941737][T31180] team0: Device ipvlan0 failed to register rx_handler [ 528.168837][T31189] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 528.175483][T31189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 528.183037][T31189] vhci_hcd vhci_hcd.0: Device attached [ 528.212976][T31193] vhci_hcd: connection closed [ 528.213127][ T6266] vhci_hcd: stop threads [ 528.222179][ T6266] vhci_hcd: release socket [ 528.226643][ T6266] vhci_hcd: disconnect device [ 528.260566][T31196] bond0: (slave bond_slave_1): Releasing backup interface [ 528.362590][T31201] program syz.1.10081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.421504][T31206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10083'. [ 529.056596][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 529.056614][ T29] audit: type=1400 audit(529.033:54132): avc: denied { prog_run } for pid=31227 comm="syz.5.10090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 529.112204][ T29] audit: type=1400 audit(529.043:54133): avc: denied { map_create } for pid=31222 comm="syz.0.10089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 529.131254][ T29] audit: type=1400 audit(529.073:54134): avc: denied { map_read map_write } for pid=31227 comm="syz.5.10090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 529.188090][ T29] audit: type=1400 audit(529.163:54135): avc: denied { append } for pid=31236 comm="syz.4.10094" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 529.198953][T31237] program syz.4.10094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.211697][ T29] audit: type=1400 audit(529.163:54136): avc: denied { open } for pid=31236 comm="syz.4.10094" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 529.244572][ T29] audit: type=1400 audit(529.163:54137): avc: denied { read write } for pid=28138 comm="syz-executor" name="loop1" dev="devtmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 529.267557][ T29] audit: type=1400 audit(529.163:54138): avc: denied { open } for pid=28138 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 529.290352][ T29] audit: type=1400 audit(529.163:54139): avc: denied { ioctl } for pid=28138 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=830 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 529.326226][ T29] audit: type=1400 audit(529.303:54140): avc: denied { create } for pid=31238 comm="syz.1.10095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 529.348484][ T29] audit: type=1400 audit(529.323:54141): avc: denied { read } for pid=31240 comm="syz.0.10096" dev="nsfs" ino=4026533142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 529.359665][T31241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10096'. [ 529.406187][T31244] loop1: detected capacity change from 0 to 512 [ 529.424015][T31244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 529.451963][T31244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.498768][T31250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10097'. [ 530.175229][T28138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.360687][T31273] loop1: detected capacity change from 0 to 2364 [ 530.480343][T31279] random: crng reseeded on system resumption [ 530.554650][T31282] program syz.1.10108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.557921][T31279] netlink: 'syz.0.10107': attribute type 1 has an invalid length. [ 530.572503][T31279] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10107'. [ 530.643983][T31287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10110'. [ 530.710369][T31287] loop1: detected capacity change from 0 to 1024 [ 530.737218][T31287] EXT4-fs: Ignoring removed bh option [ 530.750375][T31287] EXT4-fs: inline encryption not supported [ 530.769937][T31287] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 530.809030][T31287] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 530.881319][T31287] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.10110: lblock 1 mapped to illegal pblock 1 (length 1) [ 530.910763][T31287] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.10110: Failed to acquire dquot type 0 [ 530.939018][T31287] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.10110: Freeing blocks not in datazone - block = 0, count = 4096 [ 531.004332][T31287] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.10110: Invalid inode bitmap blk 0 in block_group 0 [ 531.023698][ T6249] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 531.049742][ T6249] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:23: Failed to release dquot type 0 [ 531.081428][T31287] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 531.150751][T31287] EXT4-fs (loop1): 1 orphan inode deleted [ 531.171111][T31287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.239738][T31287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.108878][ T2957] usb 3-1: enqueue for inactive port 0 [ 532.144945][ T2957] usb 3-1: enqueue for inactive port 0 [ 532.162786][T31317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10120'. [ 532.200979][T31311] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 532.207522][T31311] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.215117][T31311] vhci_hcd vhci_hcd.0: Device attached [ 532.226623][T31311] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 532.226903][T31317] netlink: 'syz.3.10120': attribute type 21 has an invalid length. [ 532.233305][T31311] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.233416][T31311] vhci_hcd vhci_hcd.0: Device attached [ 532.256078][ T2957] vhci_hcd: vhci_device speed not set [ 532.318574][T31311] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 532.325225][T31311] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 532.332956][T31311] vhci_hcd vhci_hcd.0: Device attached [ 532.369922][T31324] vhci_hcd: connection closed [ 532.370090][ T6266] vhci_hcd: stop threads [ 532.370093][T31322] vhci_hcd: connection closed [ 532.370914][T31331] vhci_hcd: connection closed [ 532.374858][ T6266] vhci_hcd: release socket [ 532.392953][ T6266] vhci_hcd: disconnect device [ 532.419083][ T6266] vhci_hcd: stop threads [ 532.423476][ T6266] vhci_hcd: release socket [ 532.428128][ T6266] vhci_hcd: disconnect device [ 532.440941][T31336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10125'. [ 532.453051][T31340] program syz.5.10127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.459972][T27015] usb 1-1: new low-speed USB device number 15 using vhci_hcd [ 532.470624][ T6266] vhci_hcd: stop threads [ 532.474908][ T6266] vhci_hcd: release socket [ 532.479417][ T6266] vhci_hcd: disconnect device [ 532.492832][T27015] usb 1-1: enqueue for inactive port 0 [ 532.504377][T27015] usb 1-1: enqueue for inactive port 0 [ 532.513575][T31336] netlink: 'syz.3.10125': attribute type 21 has an invalid length. [ 532.519027][T27015] usb 1-1: enqueue for inactive port 0 [ 532.619876][T27015] vhci_hcd: vhci_device speed not set [ 533.235067][T31360] random: crng reseeded on system resumption [ 533.360184][T31360] netlink: 'syz.3.10133': attribute type 1 has an invalid length. [ 533.368201][T31360] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10133'. [ 533.564932][T31370] netlink: 'syz.4.10138': attribute type 10 has an invalid length. [ 533.597929][T31370] team0: Device ipvlan0 failed to register rx_handler [ 533.723606][T31384] SELinux: failed to load policy [ 533.796050][T31388] FAULT_INJECTION: forcing a failure. [ 533.796050][T31388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.809197][T31388] CPU: 0 UID: 0 PID: 31388 Comm: syz.3.10146 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 533.809283][T31388] Tainted: [W]=WARN [ 533.809291][T31388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.809304][T31388] Call Trace: [ 533.809362][T31388] [ 533.809372][T31388] __dump_stack+0x1d/0x30 [ 533.809529][T31388] dump_stack_lvl+0xe8/0x140 [ 533.809551][T31388] dump_stack+0x15/0x1b [ 533.809570][T31388] should_fail_ex+0x265/0x280 [ 533.809594][T31388] should_fail+0xb/0x20 [ 533.809614][T31388] should_fail_usercopy+0x1a/0x20 [ 533.809637][T31388] strncpy_from_user+0x25/0x230 [ 533.809705][T31388] __se_sys_add_key+0x86/0x350 [ 533.809730][T31388] ? __secure_computing+0x82/0x150 [ 533.809818][T31388] __x64_sys_add_key+0x67/0x80 [ 533.809843][T31388] x64_sys_call+0x28c4/0x2ff0 [ 533.809881][T31388] do_syscall_64+0xd2/0x200 [ 533.809911][T31388] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 533.809956][T31388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.809978][T31388] RIP: 0033:0x7f60c865ebe9 [ 533.809994][T31388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.810014][T31388] RSP: 002b:00007f60c70bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 533.810065][T31388] RAX: ffffffffffffffda RBX: 00007f60c8885fa0 RCX: 00007f60c865ebe9 [ 533.810079][T31388] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000100 [ 533.810092][T31388] RBP: 00007f60c70bf090 R08: ffffffffffffffff R09: 0000000000000000 [ 533.810105][T31388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.810119][T31388] R13: 00007f60c8886038 R14: 00007f60c8885fa0 R15: 00007ffddf6e72b8 [ 533.810139][T31388] [ 534.068562][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 534.068587][ T29] audit: type=1400 audit(534.043:54473): avc: denied { ioctl } for pid=31392 comm="syz.3.10148" path="socket:[111198]" dev="sockfs" ino=111198 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 534.144812][ T29] audit: type=1400 audit(534.043:54474): avc: denied { setopt } for pid=31392 comm="syz.3.10148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 534.176107][T31394] veth0: entered promiscuous mode [ 534.178732][T31397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10148'. [ 534.191325][T31397] veth0 (unregistering): left promiscuous mode [ 534.201104][ T29] audit: type=1400 audit(534.183:54475): avc: denied { read write } for pid=31395 comm="syz.5.10149" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 534.237705][T31399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10150'. [ 534.250185][ T29] audit: type=1400 audit(534.183:54476): avc: denied { open } for pid=31395 comm="syz.5.10149" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 534.299397][T31401] random: crng reseeded on system resumption [ 534.318171][T31404] netlink: 'syz.5.10150': attribute type 21 has an invalid length. [ 534.331674][ T29] audit: type=1326 audit(534.273:54477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.0.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 534.336490][T31401] netlink: 'syz.0.10151': attribute type 1 has an invalid length. [ 534.354828][ T29] audit: type=1326 audit(534.273:54478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.0.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 534.362744][T31401] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10151'. [ 534.385731][ T29] audit: type=1326 audit(534.273:54479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.0.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 534.385797][ T29] audit: type=1326 audit(534.273:54480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.0.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 534.385824][ T29] audit: type=1326 audit(534.273:54481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.0.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 534.464291][ T29] audit: type=1326 audit(534.273:54482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.0.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557a23ebe9 code=0x7ffc0000 [ 534.531247][T31417] netlink: 'syz.1.10154': attribute type 10 has an invalid length. [ 534.541261][ T2957] IPVS: starting estimator thread 0... [ 534.541624][T31417] team0: Device ipvlan0 failed to register rx_handler [ 534.638953][T31419] IPVS: using max 2976 ests per chain, 148800 per kthread [ 534.754260][T31436] FAULT_INJECTION: forcing a failure. [ 534.754260][T31436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.767399][T31436] CPU: 0 UID: 0 PID: 31436 Comm: syz.1.10161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 534.767439][T31436] Tainted: [W]=WARN [ 534.767448][T31436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.767461][T31436] Call Trace: [ 534.767528][T31436] [ 534.767538][T31436] __dump_stack+0x1d/0x30 [ 534.767571][T31436] dump_stack_lvl+0xe8/0x140 [ 534.767595][T31436] dump_stack+0x15/0x1b [ 534.767615][T31436] should_fail_ex+0x265/0x280 [ 534.767648][T31436] should_fail+0xb/0x20 [ 534.767748][T31436] should_fail_usercopy+0x1a/0x20 [ 534.767775][T31436] _copy_to_user+0x20/0xa0 [ 534.767863][T31436] simple_read_from_buffer+0xb5/0x130 [ 534.767884][T31436] proc_fail_nth_read+0x10e/0x150 [ 534.767990][T31436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.768029][T31436] vfs_read+0x1a8/0x770 [ 534.768083][T31436] ? __cond_resched+0x4e/0x90 [ 534.768102][T31436] ksys_read+0xda/0x1a0 [ 534.768124][T31436] __x64_sys_read+0x40/0x50 [ 534.768143][T31436] x64_sys_call+0x27bc/0x2ff0 [ 534.768203][T31436] do_syscall_64+0xd2/0x200 [ 534.768233][T31436] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 534.768269][T31436] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 534.768363][T31436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.768459][T31436] RIP: 0033:0x7faa76ecd5fc [ 534.768475][T31436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 534.768491][T31436] RSP: 002b:00007faa758ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.768557][T31436] RAX: ffffffffffffffda RBX: 00007faa770f6180 RCX: 00007faa76ecd5fc [ 534.768570][T31436] RDX: 000000000000000f RSI: 00007faa758ed0a0 RDI: 000000000000000f [ 534.768582][T31436] RBP: 00007faa758ed090 R08: 0000000000000000 R09: 0000000000000000 [ 534.768594][T31436] R10: 000000008000002b R11: 0000000000000246 R12: 0000000000000001 [ 534.768607][T31436] R13: 00007faa770f6218 R14: 00007faa770f6180 R15: 00007ffd28a3cfd8 [ 534.768627][T31436] [ 535.020238][T31440] FAULT_INJECTION: forcing a failure. [ 535.020238][T31440] name failslab, interval 1, probability 0, space 0, times 0 [ 535.032983][T31440] CPU: 0 UID: 0 PID: 31440 Comm: syz.1.10164 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.033076][T31440] Tainted: [W]=WARN [ 535.033084][T31440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.033096][T31440] Call Trace: [ 535.033104][T31440] [ 535.033114][T31440] __dump_stack+0x1d/0x30 [ 535.033139][T31440] dump_stack_lvl+0xe8/0x140 [ 535.033181][T31440] dump_stack+0x15/0x1b [ 535.033218][T31440] should_fail_ex+0x265/0x280 [ 535.033240][T31440] should_failslab+0x8c/0xb0 [ 535.033267][T31440] __kvmalloc_node_noprof+0x123/0x4e0 [ 535.033391][T31440] ? nf_hook_entries_grow+0x1bc/0x450 [ 535.033427][T31440] nf_hook_entries_grow+0x1bc/0x450 [ 535.033452][T31440] __nf_register_net_hook+0x18e/0x480 [ 535.033477][T31440] nf_register_net_hook+0x88/0x130 [ 535.033500][T31440] nf_register_net_hooks+0x44/0x150 [ 535.033590][T31440] ip_vs_register_hooks+0x9b/0xe0 [ 535.033615][T31440] ip_vs_add_service+0x244/0xa70 [ 535.033646][T31440] ? selinux_capable+0x31/0x40 [ 535.033676][T31440] ? should_fail_ex+0xdb/0x280 [ 535.033726][T31440] do_ip_vs_set_ctl+0x6ec/0x8c0 [ 535.033763][T31440] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 535.033785][T31440] ? ip4_datagram_release_cb+0x351/0x380 [ 535.033814][T31440] nf_setsockopt+0x199/0x1b0 [ 535.033899][T31440] ip_setsockopt+0x102/0x110 [ 535.033927][T31440] raw_setsockopt+0xbd/0x150 [ 535.033945][T31440] sock_common_setsockopt+0x66/0x80 [ 535.033973][T31440] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 535.034019][T31440] __sys_setsockopt+0x184/0x200 [ 535.034041][T31440] __x64_sys_setsockopt+0x64/0x80 [ 535.034065][T31440] x64_sys_call+0x20ec/0x2ff0 [ 535.034149][T31440] do_syscall_64+0xd2/0x200 [ 535.034173][T31440] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 535.034196][T31440] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 535.034222][T31440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.034275][T31440] RIP: 0033:0x7faa76ecebe9 [ 535.034291][T31440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.034311][T31440] RSP: 002b:00007faa7592f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 535.034333][T31440] RAX: ffffffffffffffda RBX: 00007faa770f5fa0 RCX: 00007faa76ecebe9 [ 535.034359][T31440] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 535.034373][T31440] RBP: 00007faa7592f090 R08: 000000000000002c R09: 0000000000000000 [ 535.034387][T31440] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.034400][T31440] R13: 00007faa770f6038 R14: 00007faa770f5fa0 R15: 00007ffd28a3cfd8 [ 535.034448][T31440] [ 535.380245][T31447] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.428963][T31449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10168'. [ 535.473438][T31449] netlink: 'syz.1.10168': attribute type 21 has an invalid length. [ 535.539714][T31452] loop1: detected capacity change from 0 to 1024 [ 535.566247][T31452] EXT4-fs: Ignoring removed bh option [ 535.581280][T31452] EXT4-fs: inline encryption not supported [ 535.610171][T31452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 535.637393][T31452] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 535.650888][T31460] sd 0:0:1:0: device reset [ 535.657119][T31452] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.10168: lblock 1 mapped to illegal pblock 1 (length 1) [ 535.696604][T31452] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.10168: Failed to acquire dquot type 0 [ 535.712263][T31467] netlink: 'syz.3.10174': attribute type 10 has an invalid length. [ 535.720865][T31452] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.10168: Freeing blocks not in datazone - block = 0, count = 4096 [ 535.736533][T31467] team0: Device ipvlan0 failed to register rx_handler [ 535.743840][T31469] FAULT_INJECTION: forcing a failure. [ 535.743840][T31469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.746397][T31452] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.10168: Invalid inode bitmap blk 0 in block_group 0 [ 535.757031][T31469] CPU: 0 UID: 0 PID: 31469 Comm: syz.5.10175 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.757114][T31469] Tainted: [W]=WARN [ 535.757121][T31469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.757133][T31469] Call Trace: [ 535.757141][T31469] [ 535.757198][T31469] __dump_stack+0x1d/0x30 [ 535.757220][T31469] dump_stack_lvl+0xe8/0x140 [ 535.757239][T31469] dump_stack+0x15/0x1b [ 535.757256][T31469] should_fail_ex+0x265/0x280 [ 535.757277][T31469] should_fail+0xb/0x20 [ 535.757373][T31469] should_fail_usercopy+0x1a/0x20 [ 535.757394][T31469] _copy_from_user+0x1c/0xb0 [ 535.757420][T31469] __se_sys_mount+0x10d/0x2e0 [ 535.757442][T31469] ? fput+0x8f/0xc0 [ 535.757523][T31469] ? ksys_write+0x192/0x1a0 [ 535.757546][T31469] __x64_sys_mount+0x67/0x80 [ 535.757624][T31469] x64_sys_call+0x2b4d/0x2ff0 [ 535.757645][T31469] do_syscall_64+0xd2/0x200 [ 535.757671][T31469] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 535.757697][T31469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.757724][T31469] RIP: 0033:0x7f1c6241ebe9 [ 535.757740][T31469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.757757][T31469] RSP: 002b:00007f1c60e87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 535.757794][T31469] RAX: ffffffffffffffda RBX: 00007f1c62645fa0 RCX: 00007f1c6241ebe9 [ 535.757808][T31469] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 535.757821][T31469] RBP: 00007f1c60e87090 R08: 0000200000000300 R09: 0000000000000000 [ 535.757834][T31469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.757847][T31469] R13: 00007f1c62646038 R14: 00007f1c62645fa0 R15: 00007ffee8458818 [ 535.757866][T31469] [ 535.828956][ T6249] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 535.834870][T31452] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 535.921929][ T6249] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:23: Failed to release dquot type 0 [ 535.939931][T31452] EXT4-fs (loop1): 1 orphan inode deleted [ 536.012175][T31476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10178'. [ 536.124944][T31452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.174290][T31487] program syz.0.10182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.185183][T31485] sd 0:0:1:0: device reset [ 536.197719][T31452] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.208192][T31485] FAULT_INJECTION: forcing a failure. [ 536.208192][T31485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.221445][T31485] CPU: 0 UID: 0 PID: 31485 Comm: syz.3.10181 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 536.221551][T31485] Tainted: [W]=WARN [ 536.221559][T31485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.221571][T31485] Call Trace: [ 536.221578][T31485] [ 536.221587][T31485] __dump_stack+0x1d/0x30 [ 536.221610][T31485] dump_stack_lvl+0xe8/0x140 [ 536.221632][T31485] dump_stack+0x15/0x1b [ 536.221688][T31485] should_fail_ex+0x265/0x280 [ 536.221711][T31485] should_fail+0xb/0x20 [ 536.221783][T31485] should_fail_usercopy+0x1a/0x20 [ 536.221805][T31485] _copy_to_user+0x20/0xa0 [ 536.221835][T31485] simple_read_from_buffer+0xb5/0x130 [ 536.221860][T31485] proc_fail_nth_read+0x10e/0x150 [ 536.221890][T31485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.221934][T31485] vfs_read+0x1a8/0x770 [ 536.221957][T31485] ? __rcu_read_unlock+0x4f/0x70 [ 536.221980][T31485] ? __fget_files+0x184/0x1c0 [ 536.222070][T31485] ksys_read+0xda/0x1a0 [ 536.222122][T31485] __x64_sys_read+0x40/0x50 [ 536.222146][T31485] x64_sys_call+0x27bc/0x2ff0 [ 536.222169][T31485] do_syscall_64+0xd2/0x200 [ 536.222208][T31485] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 536.222257][T31485] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 536.222284][T31485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.222307][T31485] RIP: 0033:0x7f60c865d5fc [ 536.222324][T31485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 536.222341][T31485] RSP: 002b:00007f60c70bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.222387][T31485] RAX: ffffffffffffffda RBX: 00007f60c8885fa0 RCX: 00007f60c865d5fc [ 536.222401][T31485] RDX: 000000000000000f RSI: 00007f60c70bf0a0 RDI: 0000000000000007 [ 536.222414][T31485] RBP: 00007f60c70bf090 R08: 0000000000000000 R09: 0000000000000000 [ 536.222427][T31485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.222440][T31485] R13: 00007f60c8886038 R14: 00007f60c8885fa0 R15: 00007ffddf6e72b8 [ 536.222461][T31485] [ 536.344053][T31489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31489 comm=syz.0.10182 [ 536.574355][T31498] netlink: 'syz.0.10186': attribute type 10 has an invalid length. [ 536.619704][T31498] team0: Device ipvlan0 failed to register rx_handler [ 536.700646][T31519] sd 0:0:1:0: device reset [ 536.743720][T31519] syzkaller1: entered promiscuous mode [ 536.749278][T31519] syzkaller1: entered allmulticast mode [ 536.772071][T31512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 536.778612][T31512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.786235][T31512] vhci_hcd vhci_hcd.0: Device attached [ 536.798369][T31516] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 536.802527][T31521] vhci_hcd: connection closed [ 536.804910][T31516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.810819][ T6249] vhci_hcd: stop threads [ 536.817257][T31516] vhci_hcd vhci_hcd.0: Device attached [ 536.821391][ T6249] vhci_hcd: release socket [ 536.821405][ T6249] vhci_hcd: disconnect device [ 536.837522][T31516] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 536.844275][T31516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.851887][T31516] vhci_hcd vhci_hcd.0: Device attached [ 536.857619][T31525] vhci_hcd: connection closed [ 536.858232][T31523] vhci_hcd: connection closed [ 536.858908][ T6247] vhci_hcd: stop threads [ 536.871924][ T6247] vhci_hcd: release socket [ 536.876349][ T6247] vhci_hcd: disconnect device [ 536.890296][T31528] FAULT_INJECTION: forcing a failure. [ 536.890296][T31528] name failslab, interval 1, probability 0, space 0, times 0 [ 536.904679][T31528] CPU: 1 UID: 0 PID: 31528 Comm: syz.4.10194 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 536.904732][T31528] Tainted: [W]=WARN [ 536.904740][T31528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.904752][T31528] Call Trace: [ 536.904759][T31528] [ 536.904808][T31528] __dump_stack+0x1d/0x30 [ 536.904834][T31528] dump_stack_lvl+0xe8/0x140 [ 536.904856][T31528] dump_stack+0x15/0x1b [ 536.904875][T31528] should_fail_ex+0x265/0x280 [ 536.904943][T31528] should_failslab+0x8c/0xb0 [ 536.904969][T31528] kmem_cache_alloc_noprof+0x50/0x310 [ 536.904997][T31528] ? getname_flags+0x80/0x3b0 [ 536.905051][T31528] getname_flags+0x80/0x3b0 [ 536.905082][T31528] user_path_at+0x28/0x130 [ 536.905117][T31528] do_fchownat+0xb0/0x210 [ 536.905189][T31528] __x64_sys_chown+0x47/0x60 [ 536.905213][T31528] x64_sys_call+0x2840/0x2ff0 [ 536.905232][T31528] do_syscall_64+0xd2/0x200 [ 536.905257][T31528] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 536.905326][T31528] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 536.905370][T31528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.905389][T31528] RIP: 0033:0x7fab1ac7ebe9 [ 536.905404][T31528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.905420][T31528] RSP: 002b:00007fab196e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 536.905511][T31528] RAX: ffffffffffffffda RBX: 00007fab1aea5fa0 RCX: 00007fab1ac7ebe9 [ 536.905526][T31528] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000200000000240 [ 536.905539][T31528] RBP: 00007fab196e7090 R08: 0000000000000000 R09: 0000000000000000 [ 536.905552][T31528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.905565][T31528] R13: 00007fab1aea6038 R14: 00007fab1aea5fa0 R15: 00007ffcc9a567f8 [ 536.905586][T31528] [ 536.906769][ T6247] vhci_hcd: stop threads [ 537.096006][ T6247] vhci_hcd: release socket [ 537.100449][ T6247] vhci_hcd: disconnect device [ 537.112933][T31536] FAULT_INJECTION: forcing a failure. [ 537.112933][T31536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.126085][T31536] CPU: 0 UID: 0 PID: 31536 Comm: syz.1.10198 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 537.126120][T31536] Tainted: [W]=WARN [ 537.126202][T31536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.126213][T31536] Call Trace: [ 537.126220][T31536] [ 537.126228][T31536] __dump_stack+0x1d/0x30 [ 537.126252][T31536] dump_stack_lvl+0xe8/0x140 [ 537.126275][T31536] dump_stack+0x15/0x1b [ 537.126303][T31536] should_fail_ex+0x265/0x280 [ 537.126325][T31536] should_fail+0xb/0x20 [ 537.126344][T31536] should_fail_usercopy+0x1a/0x20 [ 537.126436][T31536] _copy_from_user+0x1c/0xb0 [ 537.126469][T31536] ___sys_sendmsg+0xc1/0x1d0 [ 537.126626][T31536] __x64_sys_sendmsg+0xd4/0x160 [ 537.126656][T31536] x64_sys_call+0x191e/0x2ff0 [ 537.126681][T31536] do_syscall_64+0xd2/0x200 [ 537.126712][T31536] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 537.126741][T31536] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 537.126784][T31536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.126805][T31536] RIP: 0033:0x7faa76ecebe9 [ 537.126820][T31536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.126914][T31536] RSP: 002b:00007faa7592f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.126938][T31536] RAX: ffffffffffffffda RBX: 00007faa770f5fa0 RCX: 00007faa76ecebe9 [ 537.126953][T31536] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 537.126966][T31536] RBP: 00007faa7592f090 R08: 0000000000000000 R09: 0000000000000000 [ 537.126978][T31536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.126999][T31536] R13: 00007faa770f6038 R14: 00007faa770f5fa0 R15: 00007ffd28a3cfd8 [ 537.127017][T31536] [ 537.410655][T31543] loop1: detected capacity change from 0 to 1024 [ 537.430774][T31543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.453866][T31543] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.472614][T31552] IPVS: Error connecting to the multicast addr [ 537.535938][T31557] netlink: 'syz.3.10206': attribute type 21 has an invalid length. [ 537.613568][T31564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10209'. [ 537.622822][T31564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10209'. [ 537.796801][T31584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10212'. [ 537.941998][T31601] random: crng reseeded on system resumption [ 537.969926][T31601] netlink: 'syz.4.10222': attribute type 1 has an invalid length. [ 537.977791][T31601] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10222'. [ 538.007953][T31597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10221'. [ 538.043862][T31613] netlink: 'syz.1.10226': attribute type 30 has an invalid length. [ 538.204737][T31620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10228'. [ 538.243997][T31620] loop1: detected capacity change from 0 to 1024 [ 538.255668][T31620] EXT4-fs: Ignoring removed bh option [ 538.261419][T31620] EXT4-fs: inline encryption not supported [ 538.282063][T31620] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 538.311164][T31620] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 538.360099][T31620] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.10228: lblock 1 mapped to illegal pblock 1 (length 1) [ 538.444315][T31628] infiniband syz1: set down [ 538.448891][T31628] infiniband syz1: added syz_tun [ 538.467017][T31632] Invalid option length (1048247) for dns_resolver key [ 538.474955][T31620] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.10228: Failed to acquire dquot type 0 [ 538.520608][T31628] RDS/IB: syz1: added [ 538.527244][T31620] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.10228: Freeing blocks not in datazone - block = 0, count = 4096 [ 538.548815][T31628] smc: adding ib device syz1 with port count 1 [ 538.560462][T31628] smc: ib device syz1 port 1 has pnetid [ 538.588898][T31620] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.10228: Invalid inode bitmap blk 0 in block_group 0 [ 538.612249][ T6247] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 538.647897][T31620] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 538.672836][ T6247] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:21: Failed to release dquot type 0 [ 538.691161][T31620] EXT4-fs (loop1): 1 orphan inode deleted [ 538.710413][T31620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.759763][T31620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.924677][T31649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10238'. [ 539.162960][ T29] kauditd_printk_skb: 1012 callbacks suppressed [ 539.162978][ T29] audit: type=1400 audit(539.143:55489): avc: denied { read } for pid=31652 comm="syz.1.10239" dev="nsfs" ino=4026532640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 539.190437][ T29] audit: type=1400 audit(539.143:55490): avc: denied { open } for pid=31652 comm="syz.1.10239" path="net:[4026532640]" dev="nsfs" ino=4026532640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 539.213327][ T29] audit: type=1400 audit(539.143:55491): avc: denied { create } for pid=31652 comm="syz.1.10239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 539.270781][T31653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=31653 comm=syz.1.10239 [ 539.385749][T31659] netlink: 'syz.1.10242': attribute type 21 has an invalid length. [ 539.398911][ T29] audit: type=1400 audit(539.273:55492): avc: denied { create } for pid=31652 comm="syz.1.10239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 539.418317][ T29] audit: type=1400 audit(539.303:55493): avc: denied { create } for pid=31654 comm="syz.5.10240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 539.437407][ T29] audit: type=1400 audit(539.323:55494): avc: denied { connect } for pid=31654 comm="syz.5.10240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 539.456773][ T29] audit: type=1400 audit(539.373:55495): avc: denied { write } for pid=31654 comm="syz.5.10240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 539.596298][T31662] audit: audit_backlog=65 > audit_backlog_limit=64 [ 539.602935][T31662] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 539.610699][T31662] audit: backlog limit exceeded [ 539.873636][T31668] pim6reg1: entered promiscuous mode [ 539.879122][T31668] pim6reg1: entered allmulticast mode [ 540.064108][T31672] netlink: 'syz.0.10246': attribute type 27 has an invalid length. [ 540.089650][T31672] ipvlan0: left allmulticast mode [ 540.094739][T31672] veth0_vlan: left allmulticast mode [ 540.131280][T31672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.141026][T31672] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.150777][T31672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.182283][T31672] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10246'. [ 540.251670][T31680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10250'. [ 540.264757][T31676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10249'. [ 540.277068][T31680] netlink: 'syz.5.10250': attribute type 21 has an invalid length. [ 540.292368][T31682] netlink: 'syz.0.10251': attribute type 10 has an invalid length. [ 540.300697][T31682] ipvlan0: entered allmulticast mode [ 540.306054][T31682] veth0_vlan: entered allmulticast mode [ 540.316668][T31682] team0: Device ipvlan0 failed to register rx_handler [ 540.457237][T31707] loop1: detected capacity change from 0 to 512 [ 540.523193][T31707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 540.543391][T31707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.759908][T31735] netlink: 'syz.4.10266': attribute type 21 has an invalid length. [ 540.877083][T31738] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 540.883712][T31738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 540.891375][T31738] vhci_hcd vhci_hcd.0: Device attached [ 540.901618][ T6249] bridge_slave_1: left allmulticast mode [ 540.907308][T31738] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 540.907286][ T6249] bridge_slave_1: left promiscuous mode [ 540.914000][T31738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 540.914091][T31738] vhci_hcd vhci_hcd.0: Device attached [ 540.919945][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.942019][ T6249] bridge_slave_0: left allmulticast mode [ 540.947687][ T6249] bridge_slave_0: left promiscuous mode [ 540.953392][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.962713][T31753] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 540.969387][T31753] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 540.977135][T31753] vhci_hcd vhci_hcd.0: Device attached [ 541.001524][T31754] vhci_hcd: connection closed [ 541.001562][T31751] vhci_hcd: connection closed [ 541.001695][ T6247] vhci_hcd: stop threads [ 541.015222][ T6247] vhci_hcd: release socket [ 541.019710][ T6247] vhci_hcd: disconnect device [ 541.024412][T31749] vhci_hcd: connection closed [ 541.027460][ T6247] vhci_hcd: stop threads [ 541.036483][ T6247] vhci_hcd: release socket [ 541.040954][ T6247] vhci_hcd: disconnect device [ 541.046713][ T6247] vhci_hcd: stop threads [ 541.051106][ T6247] vhci_hcd: release socket [ 541.055650][ T6247] vhci_hcd: disconnect device [ 541.063014][T31761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31761 comm=syz.4.10273 [ 541.075771][T31761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31761 comm=syz.4.10273 [ 541.088716][ T2957] vhci_hcd: vhci_device speed not set [ 541.151453][T31765] netlink: 'syz.4.10273': attribute type 4 has an invalid length. [ 541.151874][ T6249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.169006][ T6249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.178577][ T6249] bond0 (unregistering): Released all slaves [ 541.188658][ T6249] bond1 (unregistering): Released all slaves [ 541.197064][T31718] chnl_net:caif_netlink_parms(): no params data found [ 541.205959][T31768] netlink: 'syz.4.10273': attribute type 4 has an invalid length. [ 541.221158][T28138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.238959][ T6249] tipc: Left network mode [ 541.267178][T31718] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.274473][T31718] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.290181][T31718] bridge_slave_0: entered allmulticast mode [ 541.296817][T31718] bridge_slave_0: entered promiscuous mode [ 541.309147][T31718] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.316268][T31718] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.323994][T31718] bridge_slave_1: entered allmulticast mode [ 541.330697][T31718] bridge_slave_1: entered promiscuous mode [ 541.358356][ T6249] hsr_slave_0: left promiscuous mode [ 541.365020][ T6249] hsr_slave_1: left promiscuous mode [ 541.372084][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.382682][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.417556][ T6249] team0 (unregistering): Port device team_slave_1 removed [ 541.427600][ T6249] team0 (unregistering): Port device team_slave_0 removed [ 541.471972][T31718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.485452][T31718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.541996][T31718] team0: Port device team_slave_0 added [ 541.556241][T31718] team0: Port device team_slave_1 added [ 541.591184][T31718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.600053][T31718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.626145][T31718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.627234][T31798] team0: Device ipvlan0 failed to register rx_handler [ 541.644642][T31718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.651695][T31718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.677733][T31718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.718081][T31718] hsr_slave_0: entered promiscuous mode [ 541.731452][T31718] hsr_slave_1: entered promiscuous mode [ 541.737809][T31718] debugfs: 'hsr0' already exists in 'hsr' [ 541.743620][T31718] Cannot create hsr debugfs directory [ 541.860679][ T6249] IPVS: stop unused estimator thread 0... [ 541.975494][T31824] loop1: detected capacity change from 0 to 2364 [ 541.996129][T31824] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 542.002881][T31824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 542.010482][T31824] vhci_hcd vhci_hcd.0: Device attached [ 542.028867][T31824] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 542.035500][T31824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 542.044602][T31824] vhci_hcd vhci_hcd.0: Device attached [ 542.046881][T31837] team0: Device ipvlan0 failed to register rx_handler [ 542.070229][T31824] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 542.076961][T31824] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 542.084625][T31824] vhci_hcd vhci_hcd.0: Device attached [ 542.117335][T31834] vhci_hcd: connection closed [ 542.117490][T31831] vhci_hcd: connection closed [ 542.118560][T31838] vhci_hcd: connection closed [ 542.127147][ T6266] vhci_hcd: stop threads [ 542.136138][ T6266] vhci_hcd: release socket [ 542.140610][ T6266] vhci_hcd: disconnect device [ 542.147699][T31843] 9pnet_fd: Insufficient options for proto=fd [ 542.155551][ T6266] vhci_hcd: stop threads [ 542.159864][ T6266] vhci_hcd: release socket [ 542.164284][ T6266] vhci_hcd: disconnect device [ 542.188837][T27015] vhci_hcd: vhci_device speed not set [ 542.211309][ T6266] vhci_hcd: stop threads [ 542.215591][ T6266] vhci_hcd: release socket [ 542.220083][ T6266] vhci_hcd: disconnect device [ 542.225784][T31718] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 542.241293][T31718] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 542.260194][T31718] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.280450][T31718] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 542.368547][T31718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.398415][T31718] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.422613][T31718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 542.433081][T31718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.450771][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.457915][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.467389][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.474526][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.547502][T31718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.690290][T31872] __nla_validate_parse: 10 callbacks suppressed [ 542.690305][T31872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10303'. [ 542.744081][T31883] validate_nla: 3 callbacks suppressed [ 542.744099][T31883] netlink: 'syz.1.10306': attribute type 21 has an invalid length. [ 542.884061][T31718] veth0_vlan: entered promiscuous mode [ 542.903647][T31718] veth1_vlan: entered promiscuous mode [ 542.931771][T31718] veth0_macvtap: entered promiscuous mode [ 542.942986][T31718] veth1_macvtap: entered promiscuous mode [ 542.967560][T31718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.986765][T31718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.002742][ T6266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.042322][ T6266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.081072][T31897] netlink: 'syz.0.10307': attribute type 10 has an invalid length. [ 543.098398][ T6266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.109886][T31897] team0: Device ipvlan0 failed to register rx_handler [ 543.120270][ T6266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.180890][T31895] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 543.187452][T31895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 543.195251][T31895] vhci_hcd vhci_hcd.0: Device attached [ 543.216975][T31902] vhci_hcd: connection closed [ 543.217174][ T6266] vhci_hcd: stop threads [ 543.226176][ T6266] vhci_hcd: release socket [ 543.230650][ T6266] vhci_hcd: disconnect device [ 543.242305][T31905] 9pnet_fd: Insufficient options for proto=fd [ 543.270259][T31907] random: crng reseeded on system resumption [ 543.284575][T31907] netlink: 'syz.0.10310': attribute type 1 has an invalid length. [ 543.292488][T31907] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10310'. [ 543.332118][T31909] pim6reg1: entered promiscuous mode [ 543.337668][T31909] pim6reg1: entered allmulticast mode [ 543.437935][T31911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10312'. [ 543.459725][T31911] netlink: 'syz.3.10312': attribute type 21 has an invalid length. [ 543.479732][T31913] netlink: 'syz.4.10313': attribute type 30 has an invalid length. [ 543.596172][T31919] ipvlan0: left allmulticast mode [ 543.601280][T31919] veth0_vlan: left allmulticast mode [ 543.652182][T31918] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 543.658734][T31918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 543.666346][T31918] vhci_hcd vhci_hcd.0: Device attached [ 543.691347][T31930] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 543.697992][T31930] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 543.705697][T31930] vhci_hcd vhci_hcd.0: Device attached [ 543.770438][T31925] vhci_hcd: connection closed [ 543.770699][T31931] vhci_hcd: connection closed [ 543.780613][ T6247] vhci_hcd: stop threads [ 543.789614][ T6247] vhci_hcd: release socket [ 543.794044][ T6247] vhci_hcd: disconnect device [ 543.803536][T31939] loop1: detected capacity change from 0 to 512 [ 543.828607][T31939] EXT4-fs: inline encryption not supported [ 543.841051][ T6247] vhci_hcd: stop threads [ 543.845373][ T6247] vhci_hcd: release socket [ 543.849863][ T6247] vhci_hcd: disconnect device [ 543.854770][T27015] vhci_hcd: vhci_device speed not set [ 543.868299][T31939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 543.889387][T31939] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.10318: bg 0: block 4: invalid block bitmap [ 543.917480][T31939] EXT4-fs (loop1): Remounting filesystem read-only [ 543.925702][T31939] EXT4-fs (loop1): 1 truncate cleaned up [ 543.932432][T31939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.992379][T28138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.000778][T31948] SELinux: Context @ is not valid (left unmapped). [ 544.029696][T31950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10325'. [ 544.045096][T31950] netlink: 'syz.0.10325': attribute type 21 has an invalid length. [ 544.163436][T31963] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 544.170062][T31963] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 544.177627][T31963] vhci_hcd vhci_hcd.0: Device attached [ 544.185282][T31965] vhci_hcd: connection closed [ 544.185561][ T6260] vhci_hcd: stop threads [ 544.194571][ T6260] vhci_hcd: release socket [ 544.199023][ T6260] vhci_hcd: disconnect device [ 544.264216][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10333'. [ 544.275806][T31973] netlink: 'syz.5.10333': attribute type 21 has an invalid length. [ 544.405006][T31982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10336'. [ 544.417733][T31982] netlink: 'syz.5.10336': attribute type 21 has an invalid length. [ 544.511088][ T29] kauditd_printk_skb: 929 callbacks suppressed [ 544.511107][ T29] audit: type=1326 audit(544.493:56422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.517414][T31990] random: crng reseeded on system resumption [ 544.540534][ T29] audit: type=1326 audit(544.493:56423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.569545][ T29] audit: type=1326 audit(544.493:56424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.592820][ T29] audit: type=1326 audit(544.493:56425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.616112][ T29] audit: type=1326 audit(544.493:56426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.628479][T31990] netlink: 'syz.5.10339': attribute type 1 has an invalid length. [ 544.639770][ T29] audit: type=1326 audit(544.493:56427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.647374][T31990] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10339'. [ 544.670446][ T29] audit: type=1326 audit(544.493:56428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.702618][ T29] audit: type=1326 audit(544.493:56429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.725883][ T29] audit: type=1326 audit(544.493:56430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.749002][ T29] audit: type=1326 audit(544.493:56431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31989 comm="syz.5.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae19debe9 code=0x7ffc0000 [ 544.792476][T31993] ipvlan0: left allmulticast mode [ 544.797571][T31993] veth0_vlan: left allmulticast mode [ 545.045270][T32014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10348'. [ 545.080513][T32014] netlink: 'syz.0.10348': attribute type 21 has an invalid length. [ 545.237342][T32019] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 545.243904][T32019] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.251886][T32019] vhci_hcd vhci_hcd.0: Device attached [ 545.257470][T32022] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 545.264148][T32022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.271755][T32022] vhci_hcd vhci_hcd.0: Device attached [ 545.284522][T32034] vhci_hcd: connection closed [ 545.292539][ T6260] vhci_hcd: stop threads [ 545.301550][ T6260] vhci_hcd: release socket [ 545.301792][T32041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10357'. [ 545.306009][ T6260] vhci_hcd: disconnect device [ 545.325998][T32035] vhci_hcd: connection closed [ 545.359003][ T6260] vhci_hcd: stop threads [ 545.367956][ T6260] vhci_hcd: release socket [ 545.372475][ T6260] vhci_hcd: disconnect device [ 545.867766][T32062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10366'. [ 545.976380][T32065] loop1: detected capacity change from 0 to 512 [ 546.004793][T32065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 546.060645][T32065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.519812][T32084] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 546.526442][T32084] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 546.533973][T32084] vhci_hcd vhci_hcd.0: Device attached [ 546.585410][T32088] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 546.592120][T32088] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 546.599680][T32088] vhci_hcd vhci_hcd.0: Device attached [ 546.659895][T32091] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 546.666527][T32091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 546.674154][T32091] vhci_hcd vhci_hcd.0: Device attached [ 546.720844][T28138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.763265][T32089] vhci_hcd: connection closed [ 546.763425][T32086] vhci_hcd: connection closed [ 546.763583][T32092] vhci_hcd: connection closed [ 546.768325][ T6260] vhci_hcd: stop threads [ 546.778800][T27015] usb 1-1: new low-speed USB device number 16 using vhci_hcd [ 546.782032][ T6260] vhci_hcd: release socket [ 546.793865][ T6260] vhci_hcd: disconnect device [ 546.838920][T32095] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 546.841237][T32087] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 546.845551][T32095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 546.859016][T32095] vhci_hcd vhci_hcd.0: Device attached [ 546.876343][ T6260] vhci_hcd: stop threads [ 546.880754][ T6260] vhci_hcd: release socket [ 546.885235][ T6260] vhci_hcd: disconnect device [ 546.917353][T32102] vhci_hcd: connection closed [ 546.917671][ T6260] vhci_hcd: stop threads [ 546.926752][ T6260] vhci_hcd: release socket [ 546.931213][ T6260] vhci_hcd: disconnect device [ 546.975086][ T6260] vhci_hcd: stop threads [ 546.979528][ T6260] vhci_hcd: release socket [ 546.983979][ T6260] vhci_hcd: disconnect device [ 547.298180][T32114] syzkaller0: entered promiscuous mode [ 547.303824][T32114] syzkaller0: entered allmulticast mode [ 547.602807][T32121] random: crng reseeded on system resumption [ 547.851190][T32130] validate_nla: 6 callbacks suppressed [ 547.851206][T32130] netlink: 'syz.3.10387': attribute type 10 has an invalid length. [ 547.897867][T32130] team0: Device ipvlan0 failed to register rx_handler [ 548.066669][T32139] loop1: detected capacity change from 0 to 2364 [ 548.120211][T32139] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 548.126805][T32139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 548.134346][T32139] vhci_hcd vhci_hcd.0: Device attached [ 548.161051][T32139] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 548.167755][T32139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 548.175483][T32139] vhci_hcd vhci_hcd.0: Device attached [ 548.206181][T32139] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 548.212854][T32139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 548.220502][T32139] vhci_hcd vhci_hcd.0: Device attached [ 548.249361][T32152] vhci_hcd: connection closed [ 548.249556][T32144] vhci_hcd: connection closed [ 548.249560][T32149] vhci_hcd: connection closed [ 548.259172][ T6247] vhci_hcd: stop threads [ 548.268135][ T6247] vhci_hcd: release socket [ 548.272695][ T6247] vhci_hcd: disconnect device [ 548.294450][ T6247] vhci_hcd: stop threads [ 548.298773][ T6247] vhci_hcd: release socket [ 548.300007][T32156] __nla_validate_parse: 2 callbacks suppressed [ 548.300020][T32156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10395'. [ 548.303199][ T6247] vhci_hcd: disconnect device [ 548.353293][T32156] netlink: 'syz.3.10395': attribute type 21 has an invalid length. [ 548.389104][T27000] usb 3-1: new low-speed USB device number 23 using vhci_hcd [ 548.396552][T32146] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 548.412781][ T6247] vhci_hcd: stop threads [ 548.417077][ T6247] vhci_hcd: release socket [ 548.421644][ T6247] vhci_hcd: disconnect device [ 548.506782][T32169] netlink: 'syz.3.10400': attribute type 4 has an invalid length. [ 548.531270][T32169] netlink: 'syz.3.10400': attribute type 4 has an invalid length. [ 548.643967][T32173] random: crng reseeded on system resumption [ 548.677096][T32179] netlink: 'syz.0.10405': attribute type 21 has an invalid length. [ 548.685307][T32173] netlink: 'syz.3.10402': attribute type 1 has an invalid length. [ 548.693199][T32173] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10402'. [ 548.901479][T32189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10409'. [ 548.927050][T32189] netlink: 'syz.3.10409': attribute type 21 has an invalid length. [ 549.037445][T32195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10412'. [ 549.456346][T32197] chnl_net:caif_netlink_parms(): no params data found [ 549.547511][T32197] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.554636][T32197] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.573464][T32197] bridge_slave_0: entered allmulticast mode [ 549.582553][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 549.582578][ T29] audit: type=1400 audit(549.563:57206): avc: denied { prog_load } for pid=32213 comm="syz.5.10414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 549.589280][T32197] bridge_slave_0: entered promiscuous mode [ 549.607579][ T29] audit: type=1400 audit(549.563:57207): avc: denied { bpf } for pid=32213 comm="syz.5.10414" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 549.616150][T32197] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.641201][T32197] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.648495][T32197] bridge_slave_1: entered allmulticast mode [ 549.713276][T32197] bridge_slave_1: entered promiscuous mode [ 549.781283][ T6266] bridge_slave_1: left allmulticast mode [ 549.787004][ T6266] bridge_slave_1: left promiscuous mode [ 549.792830][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.802965][ T29] audit: type=1400 audit(549.653:57208): avc: denied { map_create } for pid=32213 comm="syz.5.10414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 549.821836][ T29] audit: type=1400 audit(549.693:57209): avc: denied { read write } for pid=28138 comm="syz-executor" name="loop1" dev="devtmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 549.844809][ T29] audit: type=1400 audit(549.693:57210): avc: denied { open } for pid=28138 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 549.867600][ T29] audit: type=1400 audit(549.693:57211): avc: denied { ioctl } for pid=28138 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=830 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 549.891875][ T29] audit: type=1400 audit(549.713:57212): avc: denied { map_read map_write } for pid=32213 comm="syz.5.10414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 549.911374][ T29] audit: type=1326 audit(549.713:57213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32221 comm="syz.1.10417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa76ecebe9 code=0x7ffc0000 [ 549.934589][ T29] audit: type=1326 audit(549.713:57214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32221 comm="syz.1.10417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa76ecebe9 code=0x7ffc0000 [ 549.957669][ T29] audit: type=1326 audit(549.723:57215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32221 comm="syz.1.10417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa76ecebe9 code=0x7ffc0000 [ 549.986143][ T6266] bridge_slave_0: left allmulticast mode [ 549.991904][ T6266] bridge_slave_0: left promiscuous mode [ 549.997558][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.022854][T32232] netlink: 360 bytes leftover after parsing attributes in process `syz.5.10420'. [ 550.038522][T32230] random: crng reseeded on system resumption [ 550.082342][T32230] netlink: 'syz.0.10419': attribute type 1 has an invalid length. [ 550.090460][T32230] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10419'. [ 550.174127][ T6266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.197284][ T6266] bond0 (unregistering): Released all slaves [ 550.206965][T32197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.234378][T32197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.303183][ T6266] hsr_slave_0: left promiscuous mode [ 550.319602][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.339075][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.358336][ T6266] batadv0: left allmulticast mode [ 550.363468][ T6266] batadv0: left promiscuous mode [ 550.457813][ T6266] team0 (unregistering): Port device team_slave_1 removed [ 550.482030][ T6266] team0 (unregistering): Port device team_slave_0 removed [ 550.564516][T32197] team0: Port device team_slave_0 added [ 550.588334][T32197] team0: Port device team_slave_1 added [ 550.619416][T32197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.626553][T32197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.652657][T32197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.750456][T32197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.757484][T32197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.783498][T32197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.878848][T32252] loop1: detected capacity change from 0 to 512 [ 550.903848][T32252] EXT4-fs: inline encryption not supported [ 550.907195][T32197] hsr_slave_0: entered promiscuous mode [ 550.919808][T32252] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 550.948869][T32197] hsr_slave_1: entered promiscuous mode [ 550.955044][T32197] debugfs: 'hsr0' already exists in 'hsr' [ 550.960805][T32197] Cannot create hsr debugfs directory [ 550.979905][T32252] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.10427: bg 0: block 4: invalid block bitmap [ 550.999403][T32252] EXT4-fs (loop1): Remounting filesystem read-only [ 551.016293][T32252] EXT4-fs (loop1): 1 truncate cleaned up [ 551.026814][T32252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.102861][ T6266] IPVS: stop unused estimator thread 0... [ 551.114570][T28138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.364002][T32261] loop1: detected capacity change from 0 to 512 [ 551.386781][T32261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 551.415840][T32261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.470417][T32197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 551.492401][T32197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 551.506942][T32197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 551.526688][T32197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 551.587515][T32197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.602413][T32197] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.613465][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.620572][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.640777][T32197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.651211][T32197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.665748][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.672879][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.748360][T32197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.756014][T32283] netlink: 'syz.4.10432': attribute type 4 has an invalid length. [ 551.766458][T32283] netlink: 'syz.4.10432': attribute type 4 has an invalid length. [ 551.826704][T32197] veth0_vlan: entered promiscuous mode [ 551.835281][T32197] veth1_vlan: entered promiscuous mode [ 551.851254][T32197] veth0_macvtap: entered promiscuous mode [ 551.858625][T32197] veth1_macvtap: entered promiscuous mode [ 551.868850][T27015] usb 1-1: enqueue for inactive port 0 [ 551.874442][T27015] usb 1-1: enqueue for inactive port 0 [ 551.887492][T32197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.918005][T32299] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.925399][T32299] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.958917][T27015] vhci_hcd: vhci_device speed not set [ 551.967789][T32299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.977962][T32299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.015900][ T6247] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.026775][T32197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.038705][ T6247] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.047676][ T6247] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.060860][ T6247] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.092292][ T6247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.102293][ T6247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.120732][ T6247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.143222][ T6247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.155005][T32306] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 552.159843][T32304] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 552.161804][T32306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.168302][T32304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.175977][T32306] vhci_hcd vhci_hcd.0: Device attached [ 552.183349][T32304] vhci_hcd vhci_hcd.0: Device attached [ 552.201522][T32314] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 552.208160][T32314] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.214706][T32304] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 552.215794][T32314] vhci_hcd vhci_hcd.0: Device attached [ 552.222223][T32304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.222293][T32304] vhci_hcd vhci_hcd.0: Device attached [ 552.232243][T28138] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.243092][T32304] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 552.256567][T32304] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 552.264266][T32304] vhci_hcd vhci_hcd.0: Device attached [ 552.270323][T32306] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 552.276956][T32306] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 552.277127][T32317] vhci_hcd: connection closed [ 552.284700][T32306] vhci_hcd vhci_hcd.0: Device attached [ 552.292078][ T6266] vhci_hcd: stop threads [ 552.296739][T32312] vhci_hcd: connection closed [ 552.299263][ T6266] vhci_hcd: release socket [ 552.299275][ T6266] vhci_hcd: disconnect device [ 552.306762][T32321] vhci_hcd: connection closed [ 552.308914][T32319] vhci_hcd: connection closed [ 552.315442][ T6266] vhci_hcd: stop threads [ 552.317932][T32315] vhci_hcd: connection closed [ 552.322503][ T6266] vhci_hcd: release socket [ 552.322516][ T6266] vhci_hcd: disconnect device [ 552.331519][T32309] vhci_hcd: connection closed [ 552.341723][ T6266] vhci_hcd: stop threads [ 552.350904][ T6266] vhci_hcd: release socket [ 552.355350][ T6266] vhci_hcd: disconnect device [ 552.360698][ T6266] vhci_hcd: stop threads [ 552.365033][ T6266] vhci_hcd: release socket [ 552.369533][ T6266] vhci_hcd: disconnect device [ 552.375997][ T6266] vhci_hcd: stop threads [ 552.380354][ T6266] vhci_hcd: release socket [ 552.384954][ T6266] vhci_hcd: disconnect device [ 552.392996][ T6266] vhci_hcd: stop threads [ 552.397273][ T6266] vhci_hcd: release socket [ 552.401861][ T6266] vhci_hcd: disconnect device [ 552.402862][T32326] loop1: detected capacity change from 0 to 512 [ 552.416303][T32326] EXT4-fs (loop1): orphan cleanup on readonly fs [ 552.423265][T32326] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.10442: bad orphan inode 13 [ 552.433389][T27017] usb 9-1: new low-speed USB device number 22 using vhci_hcd [ 552.433536][T32326] ================================================================== [ 552.442547][T27017] usb 9-1: enqueue for inactive port 0 [ 552.448873][T32326] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 552.454592][T27017] usb 9-1: enqueue for inactive port 0 [ 552.461311][T32326] [ 552.461320][T32326] write to 0xffffffff868a1a30 of 88 bytes by task 27017 on cpu 0: [ 552.469701][T27017] usb 9-1: enqueue for inactive port 0 [ 552.476869][T32326] prb_reserve+0x696/0xaf0 [ 552.486726][T32326] vprintk_store+0x56d/0x860 [ 552.491342][T32326] vprintk_emit+0x178/0x650 [ 552.495870][T32326] dev_vprintk_emit+0x242/0x2a0 [ 552.500751][T32326] dev_printk_emit+0x84/0xb0 [ 552.505375][T32326] __dev_printk+0xf3/0x110 [ 552.509821][T32326] _dev_info+0x9b/0xd0 [ 552.513913][T32326] hub_port_init+0x3e9/0x1680 [ 552.518605][T32326] hub_event+0x19f3/0x29c0 [ 552.523035][T32326] process_scheduled_works+0x4ce/0x9d0 [ 552.528521][T32326] worker_thread+0x582/0x770 [ 552.533139][T32326] kthread+0x486/0x510 [ 552.537224][T32326] ret_from_fork+0xda/0x150 [ 552.541745][T32326] ret_from_fork_asm+0x1a/0x30 [ 552.546533][T32326] [ 552.546766][T32331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32331 comm=syz.3.10444 [ 552.548865][T32326] read to 0xffffffff868a1a30 of 8 bytes by task 32326 on cpu 1: [ 552.548885][T32326] _prb_read_valid+0x383/0x920 [ 552.548918][T32326] prb_read_valid+0x3c/0x60 [ 552.563068][T27017] vhci_hcd: vhci_device speed not set [ 552.569063][T32326] console_unlock+0x164/0x330 [ 552.577273][T32331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10444'. [ 552.578328][T32326] vprintk_emit+0x388/0x650 [ 552.601885][T32326] vprintk_default+0x26/0x30 [ 552.606492][T32326] vprintk+0x1d/0x30 [ 552.610403][T32326] _printk+0x79/0xa0 [ 552.614311][T32326] __ext4_error+0x248/0x320 [ 552.618836][T32326] ext4_orphan_get+0x1d3/0x430 [ 552.623630][T32326] ext4_orphan_cleanup+0x5fa/0xa00 [ 552.628775][T32326] ext4_fill_super+0x3260/0x35d0 [ 552.633725][T32326] get_tree_bdev_flags+0x291/0x300 [ 552.638930][T32326] get_tree_bdev+0x1f/0x30 [ 552.643349][T32326] ext4_get_tree+0x1c/0x30 [ 552.647777][T32326] vfs_get_tree+0x54/0x1d0 [ 552.652196][T32326] do_new_mount+0x207/0x5e0 [ 552.656710][T32326] path_mount+0x4a4/0xb20 [ 552.661046][T32326] __se_sys_mount+0x28f/0x2e0 [ 552.665749][T32326] __x64_sys_mount+0x67/0x80 [ 552.670340][T32326] x64_sys_call+0x2b4d/0x2ff0 [ 552.675022][T32326] do_syscall_64+0xd2/0x200 [ 552.679530][T32326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.685423][T32326] [ 552.687750][T32326] value changed: 0x00000000000021c8 -> 0x00000000000041c8 [ 552.694859][T32326] [ 552.697178][T32326] Reported by Kernel Concurrency Sanitizer on: [ 552.703325][T32326] CPU: 1 UID: 0 PID: 32326 Comm: syz.1.10442 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 552.714787][T32326] Tainted: [W]=WARN [ 552.718615][T32326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.728669][T32326] ================================================================== [ 552.738610][T32326] ext4_test_bit(bit=12, block=18) = 1 [ 552.744046][T32326] is_bad_inode(inode)=0 [ 552.748219][T32326] NEXT_ORPHAN(inode)=2130706432 [ 552.753205][T32326] max_ino=32 [ 552.756517][T32326] i_nlink=1 [ 552.760349][T32326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 552.799597][T32326] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended Connection to 10.128.0.123 closed by remote host. [ 552.858312][T32338] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.10442: deleted inode referenced: 12 [ 552.875009][T32326] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 552.929126][T32340] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.10442: deleted inode referenced: 12 [ 553.007209][ T6260] smc: removing ib device syz1 [ 553.203978][T32340] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.349739][ T6247] bridge_slave_1: left allmulticast mode [ 553.355451][ T6247] bridge_slave_1: left promiscuous mode [ 553.361169][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.368698][ T6247] bridge_slave_0: left allmulticast mode [ 553.374416][ T6247] bridge_slave_0: left promiscuous mode [ 553.380196][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.469007][T27000] usb 3-1: enqueue for inactive port 0 [ 553.474499][T27000] usb 3-1: enqueue for inactive port 0 [ 553.490609][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.499671][ T6247] bond0 (unregistering): Released all slaves [ 553.548803][T27000] vhci_hcd: vhci_device speed not set [ 553.572269][ T6247] hsr_slave_0: left promiscuous mode [ 553.577788][ T6247] hsr_slave_1: left promiscuous mode [ 553.583335][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.590778][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.622275][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 553.632240][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 554.420974][ T6247] bridge_slave_1: left allmulticast mode [ 554.426625][ T6247] bridge_slave_1: left promiscuous mode [ 554.432315][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.440003][ T6247] bridge_slave_0: left allmulticast mode [ 554.445634][ T6247] bridge_slave_0: left promiscuous mode [ 554.451267][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.459455][ T6247] bridge_slave_1: left allmulticast mode [ 554.465151][ T6247] bridge_slave_1: left promiscuous mode [ 554.470889][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.479262][ T6247] bridge_slave_0: left allmulticast mode [ 554.484973][ T6247] bridge_slave_0: left promiscuous mode [ 554.490622][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.560862][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.570161][ T6247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.579412][ T6247] bond0 (unregistering): Released all slaves [ 554.630993][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.640398][ T6247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.649500][ T6247] bond0 (unregistering): Released all slaves [ 554.693601][ T6247] hsr_slave_0: left promiscuous mode [ 554.700108][ T6247] hsr_slave_1: left promiscuous mode [ 554.705879][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.713439][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.722214][ T6247] hsr_slave_0: left promiscuous mode [ 554.727823][ T6247] hsr_slave_1: left promiscuous mode [ 554.733570][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.741284][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.768571][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 554.777700][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 554.836157][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 554.845839][ T6247] team0 (unregistering): Port device team_slave_0 removed [ 555.342885][ T6247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.591112][ T6247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.641075][ T6247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.690912][ T6247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.740293][ T6247] bridge_slave_1: left allmulticast mode [ 555.746002][ T6247] bridge_slave_1: left promiscuous mode [ 555.751730][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.759435][ T6247] bridge_slave_0: left allmulticast mode [ 555.765130][ T6247] bridge_slave_0: left promiscuous mode [ 555.770799][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.840829][ T6247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.850402][ T6247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.859883][ T6247] bond0 (unregistering): Released all slaves [ 555.892143][ T6247] hsr_slave_0: left promiscuous mode [ 555.897727][ T6247] hsr_slave_1: left promiscuous mode [ 555.903215][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.910757][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.918202][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.925739][ T6247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.936066][ T6247] veth1_macvtap: left promiscuous mode [ 555.941658][ T6247] veth0_macvtap: left promiscuous mode [ 555.947179][ T6247] veth1_vlan: left promiscuous mode [ 555.952553][ T6247] veth0_vlan: left promiscuous mode [ 556.004604][ T6247] team0 (unregistering): Port device team_slave_1 removed [ 556.013702][ T6247] team0 (unregistering): Port device team_slave_0 removed